Re: OT: DKIM signatures on email messages from lists.gnupg.org

2023-06-12 Thread Konstantin Ryabitsev via Gnupg-users
On Mon, Jun 12, 2023 at 09:54:45PM +0200, Steffen Nurpmeso wrote: > |No it isn't. Changing the subject and adding the footer is a damaging > |anti-pattern from mid-nineties. If the end-user wants to filter mail, \ > |they can > |do it based on the List-Id header or any other criteria. Lists

Re: OT: DKIM signatures on email messages from lists.gnupg.org

2023-06-12 Thread Konstantin Ryabitsev via Gnupg-users
On Mon, Jun 12, 2023 at 06:45:37PM +0200, Alessandro Vesely via Gnupg-users wrote: > > What the list-software would need to do is to strip the original DKIM > > signature > > Why? Original signatures can often be recovered. They shouldn't be removed > anyway. If list-software is doing

Re: gpg: can't handle public key algorithm 18

2023-04-17 Thread Konstantin Ryabitsev via Gnupg-users
On Mon, Apr 17, 2023 at 03:22:42PM +0200, Werner Koch via Gnupg-users wrote: > >> > gpg (GnuPG) 2.0.22 > > That version reached end-of-life more than 5 years ago. Don't use it. If you need a newer version of GnuPG for RHEL7 systems, you can install gnupg24-static from this COPR:

Re: GnuPG 2.2.36 released

2022-07-13 Thread Konstantin Ryabitsev via Gnupg-users
On Wed, Jul 13, 2022 at 09:22:36AM -0400, Todd Zullinger via Gnupg-users wrote: > > Maybe it helps to report the problem of missing crypto algorithms to your > > GNU/Linux distribution. > > They aren't really missing but rather intentionally removed > due to legal issues on Fedora/Red Hat. This

Re: GnuPG 2.2.36 released

2022-07-11 Thread Konstantin Ryabitsev via Gnupg-users
On Fri, Jul 08, 2022 at 11:07:36PM +0200, Ingo Klöcker wrote: > > That key doesn't appear to be provided via > > https://gnupg.org/signature_key.asc. > > Yes, it is. > > ``` > $ curl https://gnupg.org/signature_key.asc | gpg --import > [...] > gpg: key 549E695E905BA208: 1 signature not checked

Re: GnuPG 2.2.36 released

2022-07-08 Thread Konstantin Ryabitsev via Gnupg-users
On Wed, Jul 06, 2022 at 08:38:04PM +0200, Werner Koch via Gnupg-users wrote: > Hi! > > This is a quick announcement that a new GnuPG release for 2.2 is > available. We will also preprare a 2.3 release in the next days but due > to summer holidays things are a bit delayed. Hello: I'm trying to

Re: Error importing fetching key from wkd

2022-06-01 Thread Konstantin Ryabitsev via Gnupg-users
On Tue, May 31, 2022 at 12:17:05PM -0400, Todd Zullinger via Gnupg-users wrote: > Hello again, > > I wrote: > > Dirk Gottschalk via Gnupg-users wrote: > >> A workaround for this is to download the SRPM, remove the > >> line '--disable-brainpool' and rebuild the package. > > > > Ahh, excellent.

Re: Questions re auto-key-locate

2022-02-15 Thread Konstantin Ryabitsev via Gnupg-users
On Tue, Feb 15, 2022 at 12:32:50PM -0800, Dan Mahoney (Gushi) via Gnupg-users wrote: > Thus, using that as a prefetch method to grab the current version of our > codesign@ key into our keyring is not helpful either, unless we "faked it" > by attempting to encrypt a message to that address, then

Re: Ditching OpenPGP, a new approach to signing APT repositories

2021-06-29 Thread Konstantin Ryabitsev via Gnupg-users
On Tue, Jun 29, 2021 at 05:53:53PM +0200, Bernhard Reiter wrote: > Am Dienstag 29 Juni 2021 14:44:39 schrieb Konstantin Ryabitsev via > Gnupg-users: > > With this change, they are replacing PGP with ed25519, but everything else > > remains pretty much the same > > But O

Re: Ditching OpenPGP, a new approach to signing APT repositories

2021-06-29 Thread Konstantin Ryabitsev via Gnupg-users
On Tue, Jun 29, 2021 at 08:37:56AM +0200, Bernhard Reiter wrote: > Am Sonntag 27 Juni 2021 18:56:15 schrieb Стефан Васильев via Gnupg-users: > > maybe interesting for some of you. > > https://wiki.debian.org/Teams/Apt/Spec/AptSign > > This does not have references on the problems it is claiming

Re: Where is swdb.lst

2021-06-17 Thread Konstantin Ryabitsev via Gnupg-users
On Thu, Jun 17, 2021 at 04:19:24PM +, Ajax via Gnupg-users wrote: > > >> $ build-aux/getswdb.sh > > > > > > Which gave : > > > ... No such file or directory > > > > $ tar tjvf gnupg-2.2.28.tar.bz2 | grep getswdb.sh > > -rwxr-xr-x 1000/1000 4831 2021-05-21 07:35 > >

Re: Where is swdb.lst

2021-06-16 Thread Konstantin Ryabitsev via Gnupg-users
On Wed, Jun 16, 2021 at 04:29:32PM +, Ajax via Gnupg-users wrote: > With gnuupg-2.3.1 > > make -f build-aux/speedo.mk native > > gives "download of swdb.lst failed" > > The above is on a Debian 10 buster box. > > I've not been able to find swdb.lst nor how to work without it; I'd be >

Re: Plan B - Who carries the torch?

2021-01-05 Thread Konstantin Ryabitsev via Gnupg-users
On Tue, Jan 05, 2021 at 09:46:01AM -0500, Robert J. Hansen via Gnupg-users wrote: > On Tue, 2021-01-05 at 15:38 +0100, Werner Koch via Gnupg-users wrote: > > Virtually nobody uses the WoT... > > Strangely, the Linux kernel folks still use it a decent amount. > They're the only large group I can

Re: Plan B - Who carries the torch?

2021-01-05 Thread Konstantin Ryabitsev via Gnupg-users
On Tue, Jan 05, 2021 at 07:27:14AM -0500, Jean-David Beyer via Gnupg-users wrote: > Building a web of trust is so hopeless, from my point of view, that I have > abandonned gnupg. I have made keys for myself, obtained enigmail for my > Firefox browser, etc. But those with whom I correspond by

Re: Five volunteers needed (EU only please)

2020-10-05 Thread Konstantin Ryabitsev via Gnupg-users
On Mon, Oct 05, 2020 at 05:37:57PM +0200, Stefan Claas wrote: > > Why I came up with this idea? Well I thought of a way to send private content > digitally, > without Internet usage, so that 3rd parties outside the EU have it difficult > to intercept > such messages, in order to protect EU

Re: [Announce] [security fix] GnuPG 2.2.23 released

2020-09-04 Thread Konstantin Ryabitsev via Gnupg-users
On Thu, Sep 03, 2020 at 06:44:35PM +0200, Werner Koch via Gnupg-users wrote: > Hello! > > We are pleased to announce the availability of a new GnuPG release: > version 2.2.23. This version fixes a *critical security bug* in > versions 2.2.21 and 2.2.22. For those using gnupg22-static on el7 via