Possible bug: addkey can create certifying subkey

, SHA224 Compression: Uncompressed, ZIP, ZLIB, BZIP2 howar...@thermopylae:~$ -- James P. Howard, II, MPA j...@jameshoward.us signature.asc Description: OpenPGP digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org

Re: Possible bug: addkey can create certifying subkey

by the certifying subkey and may have undually dwelt on it. James -- James P. Howard, II, MPA j...@jameshoward.us signature.asc Description: OpenPGP digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman

Re: [gnupg-users] same key pair for more than one e-mail address

P. Howard, II, MPA MBCS j...@jameshoward.us pgp529PvAKpnX.pgp Description: PGP signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Crypto Stick released!

take it I am missing something obvious in this? James - -- James P. Howard, II, MPA MBCS CGFM j...@jameshoward.us -BEGIN PGP SIGNATURE- iQEcBAEBCAAGBQJL+87BAAoJEHPMAEw+5CSeGCQH/3cv2suaLFZTptKkALg2XZa6 FRCpJ4um4QsO+xwwdNBQ314XYSWBjmVkvrwHIAYHkzBDwdbbRpH+yrZz41S6T98/ EIRfY4K5zI5dDA+Q6fu

Re: Crypto Stick released!

On 5/25/10 10:07 AM, Hauke Laging wrote: What is the gpg version you use? IIRC You need 2.0.13 or 2.0.14 for 2048 bit keys on a smartcard. That did the trick! I was on 2.0.12 and moved to 2.0.14. -- James P. Howard, II, MPA MBCS CGFM j...@jameshoward.us

Re: Crypto Stick released!

signatures with hashes other than SHA1 or RIPEMD160. James -- James P. Howard, II, MPA MBCS CGFM signature.asc Description: OpenPGP digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg

Re: Crypto Stick released!

up 3072 total. I noted that, too, but I currently have three 2048 bit keys on my card. James -- James P. Howard, II, MPA MBCS CGFM signature.asc Description: OpenPGP digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http

Problem with smartcards and scdaemon

am using a Mac with 10.6.x and have done this with MacGPG 2.0.12 and 2.0.14. James -- James P. Howard, II, MPA MBCS CGFM signature.asc Description: OpenPGP digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org

Re: Problem with smartcards and scdaemon

On 7/16/10 12:50 PM, Alex Mauer wrote: Do you definitely have to replug it, or is killing scdaemon sufficient? Both are necessary. -- James P. Howard, II, MPA MBCS CGFM ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org

Re: User ID without email address

On 7/23/10 11:51 AM, war_is_pe...@privatdemail.net wrote: Does that make sense? Are there known problems if a (primary) user ID doesn't contain any email address? Nope! Check out 0xE6602099 for my key with a primary uid of James Patrick Howard, II. James -- James P. Howard, II, MPA MBCS

Re: Gnupg good for big groups?

wonder if the key management issue would be simpler if there were a master key, group members were an ADK, and GnuPGP supported ADK. James - -- James P. Howard, II, MPA MBCS CGFM -BEGIN PGP SIGNATURE- iQEcBAEBAgAGBQJMWg8oAAoJEHPMAEw+5CSeBJQH/3tCo8vwsGR0mW5l4ul2YR8j

Re: Gnupg good for big groups?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 8/5/10 1:46 PM, Snaky Love wrote: About GSWoT - does this cover my described use-case? I don´t quite get it from a first glance on the website... Actually, no, not at all. - -- James P. Howard, II, MPA MBCS CAPM CGFM -BEGIN PGP SIGNATURE

Re: Protecting IDs at a key signing party

On Wed, Dec 8, 2010 at 15:20, Hank Ivy hank...@hot.rr.com wrote: What should I take?  How should I organize, and protect the IDs? Take two. A driver's license and a passport would be best, though one probably authenticated you for the other. To protect them, put them in your wallet or pocket.

Question about Smart Cards and GPG

? Thank you, James 1. http://gnupg.org/howtos/card-howto/en/smartcard-howto-single.html -- James P. Howard, II [EMAIL PROTECTED] http://jameshoward.us pgpsI34I98Ria.pgp Description: PGP signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http

Re: editing User ID

and it won't get revoked by simply deleting it from the original key. Sorry if I misunderstood the point... ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users -- James P. Howard, II [EMAIL PROTECTED

Re: Timestamping Service: Existing Services or Software Project?

___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users -- James P. Howard, II [EMAIL PROTECTED] http://jameshoward.us ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman

Re: Timestamping Service: Existing Services or Software Project?

Yep, sorry about that. Try this instead: http://jameshoward.us/robot-digital-signature-authority James -- James P. Howard, II [EMAIL PROTECTED] http://jameshoward.us -Original Message- From: Sven Radde [EMAIL PROTECTED] Date: Wed, 23 Apr 2008 16:58:09 To:[EMAIL PROTECTED

Re: Timestamping Service: Existing Services or Software Project?

://jameshoward.us/robot-digital-signature-authority James -- James P. Howard, II [EMAIL PROTECTED] http://jameshoward.us [...] Sent a signed test message using my gmail account (please see below), with sign as subject. Received the following: Hi. This is the qmail-send

Re: Timestamping Service: Existing Services or Software Project?

Aha! My provider fixed a doohickey somewhere (it was an error in a mail forwarding configuration file) and it now works. James On 4/23/08, James P. Howard, II [EMAIL PROTECTED] wrote: This is embarrassing. I've contacted my provider to find out why mail is bouncing. Thank you, James

Re: [admin] What is top posting, and why should you avoid it?

/ island voices on the winds / surplus of vowels -- James P. Howard, II [EMAIL PROTECTED] http://jameshoward.us ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Safety of the key and it's length

means instead. It's best not to obsess over key size. Larger is not better, but it's not as if it hurts you, either. There are some ancient keys out there which are 512 bits (and I think I've seen smaller). Are these likely still secure enough to use? -- James P. Howard, II, MPA j

Re: Subkeys...

. James -- James P. Howard, II, MPA j...@jameshoward.us ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: questions: no input file, and pascal programming

-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users -- James P. Howard, II, MPA j...@jameshoward.us signature.asc Description: OpenPGP digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman

Re: There are actually two public keys?

, the private part of the encryption keypair is used to decrypt documents; the public part is used to encrypt them. Can anyone explain why there is a difference between signing and encrypting keypairs, even for the same type (RSA)? James -- James P. Howard, II, MPA j...@jameshoward.us

Re: There are actually two public keys?

-- James P. Howard, II, MPA j...@jameshoward.us signature.asc Description: OpenPGP digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: There are actually two public keys?

this, you have to have the key in primary key form in the (local) web of trust. If you don't, then the signatures won't be used. Well, I did succeed in doing it last night as a test. So I guess the bigger question, is it poor etiquette? James -- James P. Howard, II, MPA j...@jameshoward.us

Re: backup all keys of DSA+ELG pair?

for each of 3 previous commands failed me... Also the same, if I used key IDs. How to do it? When you perform the import, you must use --allow-secret-key-import but unless you intended not to use the master signing key, you should not use --export-secret-subkeys. James -- James P. Howard, II

Re: How to verify lot of .sig files in lot of subdirectories with script

is assumption on the file to be verified and as a result, you can see the signature following the name. More complex variants on this may be possible. James -- James P. Howard, II, MPA j...@jameshoward.us signature.asc Description: OpenPGP digital signature

Re: Question about authentication subkeys and SSH

On Wed Jul 22 2009 16:12:34 GMT-0400 (EDT) , Daniel Kahn Gillmor d...@fifthhorseman.net wrote: On 07/22/2009 03:59 PM, James P. Howard, II wrote: I have created a 2048-bit RSA subkey that is authentication only. I'd like to use this with SSH. A bit of Googling suggests this cannot be used

Encryption keys in the OpenPGP spec

key types? Thank you, James -- James P. Howard, II, MPA j...@jameshoward.us signature.asc Description: OpenPGP digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Encryption keys in the OpenPGP spec

this, too. But since I also do not claim any special wisdom on the issue, I was hoping someone would. Since we all seem to agree that communication and storage is difficult to distinguish, can someone suggest why different keys may be desired in different circumstances? James -- James P. Howard, II