Re: TOFU for GnuPG

2015-10-30 Thread MFPA
he OpenPGP spec should have a way to do > this. My point was "there is already a way to do this: use signature notations". Is that a red herring? - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Don't talk unless you can improve on th

Re: TOFU for GnuPG

2015-11-05 Thread MFPA
ed to support TOFU > so these messages might not be shown. I would think that was quite important, for users whose email client uses GPGME. -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> A pict

Re: Trusting other keys a message was encrypted to

2015-11-07 Thread MFPA
s cause for concern. Maybe there is a good reason this check is not currently done. The fact that information is available and *could* be used does not mean it necessarily *should* be used. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Penguins are

Trusting other keys a message was encrypted to

2015-11-06 Thread MFPA
use of throw-keyids or hidden-recipient or hidden-encrypt-to. And if another copy were encrypted separately, we know nothing about it. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Wise men learn

Re: Trusting other keys a message was encrypted to

2015-11-06 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Friday 6 November 2015 at 3:46:21 PM, in <mid:20151106154621.b1bd620...@smtp.hushmail.com>, ved...@nym.hush.com wrote: > On 11/6/2015 at 10:11 AM, "MFPA" wrote: While writing > in the "TOFU for GnuP

Re: Importing and using non-self-signed PGP keys

2015-10-19 Thread MFPA
-does-not-have-one> - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Look, it's a hat! It's not going to hurt you. -BEGIN PGP SIGNATURE- iQF8BAEBCgBmBQJWJWbiXxSAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRCM0FFN

Re: How can it be made even easier!?

2015-10-12 Thread MFPA
ion's network. The IT people never had any answers if asked about email security. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> What's another word for synonym? -BEGIN PGP SIGNATURE- iQF8BAEB

Re: Multiple GPG public keys with one private keys

2015-08-27 Thread MFPA
multiple User-IDs to a single key-pair. - -- Best regards MFPA mailto:2014-667rhzu3dc-lists-gro...@riseup.net He's an environmentalist - his arguments are 100% recycled -BEGIN PGP SIGNATURE- iQF8BAEBCgBmBQJV32BMXxSAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w

Re: Multiple GPG public keys with one private keys

2015-08-30 Thread MFPA
, the parent secret key can be calculated. So the parent key and all possible child keys are compromised by the compromise of just one child secret key. - -- Best regards MFPA mailto:2014-667rhzu3dc-lists-gro...@riseup.net Don't learn safety rules by accident... -BEGIN PGP SIGNATURE

Re: How to get your first key signed

2015-10-03 Thread MFPA
and posting histories did not become merged. > If at least one of you commit crimes with > your signed messages, you will share the same legal > liability unless proved not guilty by other means, What happened to being innocent until proven guilty? - -- Best regards MFPA

Re: Seperate Session Key and Encrypted Data

2015-10-03 Thread MFPA
it. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> My mind works like lightning... one brilliant flash and it's gone -BEGIN PGP SIGNATURE- iQF8BAEBCgBmBQJWD7foXxSAAC4AKGlzc3Vl

Re: How to get your first key signed

2015-10-04 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Saturday 3 October 2015 at 1:04:55 PM, in

Re: How to get your first key signed

2015-10-04 Thread MFPA
igure out which of us was using the certificate. This may not be the case if the crime took place in a jurisdiction that applies the doctrine of joint enterprise [0]. [0] <https://en.wikipedia.org/wiki/Common_purpose> - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-

Re: [Announce] GnuPG 2.1.10 released

2015-12-06 Thread MFPA
options > --tofu-default-policy and --tofu-db-format. Should these be available in the Windows version? I get:- gpg: unknown trust model 'tofu+pgp' gpg: unknown TOFU policy 'ask' - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Change is

Re: Error message "gpg: Can't check signature: Broken public key"

2015-12-08 Thread MFPA
ur public key in his > computer would be a problem. I suggested he delete my key and re-import it. He tells me he tried that twice and it didn't help. It's a mystery to me. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> The man who really want

Re: [Announce] GnuPG 2.1.10 released

2015-12-07 Thread MFPA
The reason for the missing Tofu support is that we need > to package Sqlite in a way to make it easy to > cross-compile for Windows. It is just a bit of work > but other things have higher priority for now than > Windows. Thanks for the explanation. - -- Best regards MFPA

Error message "gpg: Can't check signature: Broken public key"

2015-12-07 Thread MFPA
/windows/misc/gnupg-w32-2.1.10_20151204.tar.gz/gnupg-w32-2.1.10/PLAY/src/libgpg-error/doc/errorref.txt> - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Why is the universe here? Well, where else would it be? --

Re: Error message "gpg: Can't check signature: Broken public key"

2015-12-09 Thread MFPA
them back round to see what happens. > (1) Different error message "The signature can't be > checked - End of file." -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> To steal ideas from one person is plagia

Re: Error message "gpg: Can't check signature: Broken public key"

2015-12-11 Thread MFPA
unknown pubkey algorithm" for the signature from my EDDSA subkey. > There's also one > other difference; The signature is no longer inline, > but attached. Not that I expect that is relevant. Yes, I accidentally used PGP/MIME instead of inline. - -- Best regards MFPA

Re: Keyserver lookup failure

2016-06-06 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Thursday 2 June 2016 at 3:43:10 AM, in <mid:138546192.20160602034...@riseup.net>, MFPA wrote: > Thanks for replying. Port 11371 is not blocked:- [snipped] Sorry. I just spotted the reason in "[Announce] GnuPG 2

Re: Curve 25519 encryption subkey - problem encrypting

2016-06-06 Thread MFPA
, ZIP, ZLIB, BZIP2 Thank you. I have passed on both replies. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> It's better to feed one cat than many mice -BEGIN PGP SIGNATURE- iQF8BAEBCgBmBQJXVMN/XxSAAC4AKGlzc3V

Re: Having issues with dirmngr in gpg 2.1

2016-06-06 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Friday 3 June 2016 at 12:33:17 PM, in <mid:211459920.20160603123...@riseup.net>, MFPA wrote: > [snipped] Please ignore me. I've realised the version 2.1.12 release announcement tells me the Windows installer is missing HKP

Re: RSA pub-sec pri key pair + ELG enc + RSA sign subkeys + EDDSA/ECDH subkeys -> e-mail familiar RSA/ELG key recipient

2016-06-10 Thread MFPA
ure to the recipient as Good, or not. This was before Christmas, so maybe the Enigmail people fixed it in the meantime. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Roses smell better than onions but don't make such

Re: Having issues with dirmngr in gpg 2.1

2016-06-03 Thread MFPA
e lines appear and the task exits:- gpg: no keyserver known (use option --keyserver) gpg: keyserver search failed: No keyserver available Subsequent attempts to run gpg -v --keyserver hkp://pool.sks-keyservers.net --search-keys mfpa display the "no keyserver known" message with no freezing,

Curve 25519 encryption subkey - problem encrypting

2016-06-04 Thread MFPA
n). [0] <http://ftp.rrzn.uni-hannover.de/pub/mirror/linux/opensuse/repositories/security:/privacy/openSUSE_13.2/i586/> - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> All generalisations are dangerous, even this one. --

Re: Curve 25519 encryption subkey - problem encrypting

2016-06-04 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Saturday 4 June 2016 at 11:15:36 AM, in <mid:ba3bd322-022f-4d24-4784-42c69de34...@sumptuouscapital.com>, Kristian Fiskerstrand wrote: > On 06/04/2016 12:10 PM, MFPA wrote: >> I recently created a new Curve 25519 encryption

Re: Keyserver lookup failure

2016-06-01 Thread MFPA
st timed out. 513 ms12 ms12 ms be10-1194.gra-g2-a9.fr.eu [2001:41d0::292] 6 *** Request timed out. 7 *** Request timed out. 820 ms20 ms20 ms po6.vss-4-6k.routers.ovh.net [2001:41d0::522] 920 ms20 ms20 ms 2001:41d0:2:a8b4::10

Keyserver lookup failure

2016-06-01 Thread MFPA
41.243.15: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 44ms, Maximum = 45ms, Average = 44ms Any ideas how to proceed? - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Alcohol a

Re: Keyserver lookup failure

2016-06-01 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Wednesday 1 June 2016 at 1:34:15 PM, in

Re: Unable to batch decrypt messages on Windows

2016-06-24 Thread MFPA
- -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> You can't build a reputation on what you are going to do -BEGIN PGP SIGNATURE- iQF8BAEBCgBmBQJXbXlLXxSAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRCM0FFN0VDQTlBOEM4Q

Re: FAQ maintenance

2016-02-27 Thread MFPA
inst by switching from hexadecimal to, for example, base 32. Preferably in one of the variants that precludes visual clashes, such as O0 Z2 I1l B8 b6 S5. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> ETHERNET(n): device used to catch the Ether bu

Re: SHA-1 checksums to be replaced with something better at https://gnupg.org/download/integrity_check.html ?

2016-03-19 Thread MFPA
is works in Powershell, not in an ordinary Command window. The syntax is:- Get-FileHash FileToHash.ext -Algorithm sha1 - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Wait. You think I'm right? -BEGIN PGP SIGNATURE- iQF8BAEB

Re: Top-posting

2016-04-29 Thread MFPA
have faced. I sometimes see people try to hijack threads without top-posting. I spent a few minutes trying to find examples, but could not come up with good-enough search terms. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> No man ever listened

Re: Top-posting

2016-04-29 Thread MFPA
email. Please not (B), or it will appear as a new thread. (Unless you meant reply to the previous message without quoting from it.) - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Keep them dry and don't f

Re: (OT) gpgme-sharp API missing

2016-04-25 Thread MFPA
our messages, I suggest checking your subscription options at <https://lists.gnupg.org/mailman/listinfo/gnupg-users>. You might have the option to receive a copy of your own posts turned off. -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> I would

Re: making a Debian Live CD for managing GnuPG master key and smartcards

2016-04-26 Thread MFPA
second guide to export the subkeys to an OpenPGP smartcard. [0] <https://wiki.debian.org/GnuPG/AirgappedMasterKey> [1] <https://wiki.debian.org/GnuPG/SmartcardSubkeys> - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Alw

Re: Create subkey with same passphrase

2016-05-12 Thread MFPA
e > primary key and the > first subkey. Just enter the same passphrase as already used for this key when prompted for the passphrase for the new subkey. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Dreams come true on this side of the

Re: UK Investigatory Powers Bill

2016-05-04 Thread MFPA
of it is needed. If "the authorities" think they need access to some specific group or individual's communications, they can employ plain old-fashioned deception to have undercover agents worm their way in and get themselves trusted and included in the encryption list.

Re: how to configure default sign key for particular user?

2016-05-08 Thread MFPA
he > assumption that > one always want to use the newer key, not the oldest > one.) That would enable a "denial of service" attack: I publish a key containing your email address in a UID, people encrypt to my newer key instead of your older key. - -- Best regards MFPA

Re: DKIM and email address proof-of-control

2016-08-01 Thread MFPA
r example to begin with a help ticket number or simply to make the subject match the content? - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> My mind works like lightning... one brilliant flash and it's gone -BEGI

Re: DKIM and email address proof-of-control

2016-08-02 Thread MFPA
ithout any other text > around it. Dashes are > there so that misleading spacing cannot be > canonicalised away. Subject > lines wouldn't ever be changed and expected to > remain valid, because the > process would be "Send a blank email with the > subject line > "VALID

Re: DKIM and email address proof-of-control

2016-08-02 Thread MFPA
shouldn't? > Checking the subject line seems fairly reasonable, > and requiring an > email in response to one the CA---In-Reply-To is > signed in my test > messages, you can use a signature as the message > ID---ought to make > things more difficult for anyone but the CA. I

Re: SHA1 collision found

2017-02-25 Thread MFPA
size to vary (usually to a bizarre key size that > would be quite suspect, and not believed). Is that why the majority of keys are exactly 1024, 2048, etc. bits, or is there a technical reason? -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> War i

Re: GPG, subkeys smartcard and computer

2017-02-19 Thread MFPA
G is not version 2.1.x will not see report of a valid signature. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> The trouble with words is that you never know whose mouths they've been

Re: send-keys does not update my key

2017-02-12 Thread MFPA
subkeys, etc. to a key that is already on the server. But you cannot delete anything from it. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> No matter what a man's past may have been, his future is spotless. -B

Has GPGME been extended to support TOFU yet?

2016-09-10 Thread MFPA
nouncement saying this has changed. [0] <https://lists.gnupg.org/pipermail/gnupg-users/2015-October/054608.html> - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Something must be done. This is something. Therefore, we must do it. --

Re: What is a reliable way to backup/restore my keys and test?

2016-09-15 Thread MFPA
your keyring. Does exporting local signatures make it somehow more likely they might be accidentally sent to a keyserver? And if they are accidentally sent to a keyserver, does the keyserver strip them because they are marked as non-exportable? - -- Best regards MFPA <mailto:

Re: GnuPG vs. GPG4Win

2016-10-08 Thread MFPA
. Windows binaries for GnuPG versions 2.1.x and 1.4.x are the second and third items listed at <https://gnupg.org/download/index.html#sec-1-2>. The first list item points you to the GPG4win download page. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@r

Re: Terminology - certificate or key ?

2016-10-08 Thread MFPA
chanisms). These new modular locking mechanics allowed the locks to be serviced and rekeyed because all components could be removed and reconstructed." [0] <http://united-locksmith.net/blog/the-history-of-padlocks> - -- Best regards MFPA &l

Re: Please unsubscribe me form your mailing list. Thank you.

2016-08-28 Thread MFPA
ages, her advert was 100% of her message content. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> A picture is a poem without words -BEGIN PGP SIGNATURE- iQF8BAEBCgBmBQJXwtiVXxSAAC4AKGlzc3Vlci1mcHJAb

Re: Terminology - certificate or key ?

2016-10-01 Thread MFPA
can only be opened from the outside with a key." - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Coffee doesn't need a menu, it needs a cup. -BEGIN PGP SIGNATURE- iL4EARYKAGYFAlfwCClfFIAALgAoaXNzdWVyLWZwckBub3RhdGlvbn

Re: Why GnuPG encrypted file has no icon?

2016-10-01 Thread MFPA
how as "GnuPG's OpenPGP Tool".) Not sure why you get .pgp files; I get .asc. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Lotto: A tax on people who are bad at statistics! -BEGIN PGP SIGNATURE- iQF

Re: Why GnuPG encrypted file has no icon?

2016-10-01 Thread MFPA
use this app" box ticked if you are unsure. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> The greatest of faults is to be conscious of none. -BEGIN PGP SIGNATURE- iL4EARYKAGYFAlfv9gxfFIAALgAoaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl bnBncC5maW

Re: Implications of a common private keys directory in 2.1

2016-11-23 Thread MFPA
;https://www.confidantmail.org>? Maybe your signing/encryption servers at each end could incorporate a CM-to-SMTP gateway; CM could be awesome it were possible to compose and read messages on an ordinary mail client. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-g

Re: GnuPG vs. GPG4Win

2016-10-09 Thread MFPA
> front-end and the readme file says it can be run only from > command-line. That's as it should be. Well done. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Don't cry because it is over - smile because it happened

Re: GnuPG vs. GPG4Win

2016-10-10 Thread MFPA
ure what component in the package is a beta; GnuPG 2.1.15 isn't and most of the version numbers match those in Gpg4win version 2.3.3 (2016-08-18). - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> After all is said and done, a lot more will be said t

Re: Common directory for different installs of GnuPG

2016-12-17 Thread MFPA
do the same sort of search: > > gpg.conf-1.4.18 > gpg.conf-1.4 > gpg.conf-1 > gpg.conf [0] <https://www.mail-archive.com/gnupg-users@gnupg.org/msg26542.html> - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro.

Signatures on a subkey?

2017-01-14 Thread MFPA
the bottom of this page:- https://pgp.mit.edu/pks/lookup?search=0x2B9880E1E6602099=vindex Can anybody explain? - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Two rights do not make a wrong. They make an airplane. -BEG

Re: Implications of a common private keys directory in 2.1

2016-12-03 Thread MFPA
cipients to mean "try this/these key(s) and if they won't decrypt it, give up on hidden recipients". - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Only dead fish go with the flow -BEGIN PGP SIGNATU

Re: Proof for a creation date

2016-12-03 Thread MFPA
llegedly signed at that specific > date or (prior to a > determined date). Maybe use a digital timestamping service, such as <http://www.itconsult.co.uk/stamper/stampinf.htm>? Or publish an encrypted (or not) copy in the small ads of a newspaper. - -- Best regards MFPA <ma

Re: How to prevent passphrase caching in 2.1

2016-12-29 Thread MFPA
s out they do not like the URL you will now get as the first search result on the search URL I have substituted above.) - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> No matter where you go, there you are. -BEGIN PGP SIGNATURE- iL4EARYKAGY

Re: Unable to import Private Key

2016-12-27 Thread MFPA
y by its key ID with an appended > '!', The --export-secret-subkeys command will do what it says on the tin. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> A fool and his money are soon partying

GnuPG 2.1.19 crashing when listing keys, if tofu-default-policy is "ask"

2017-03-14 Thread MFPA
w.mail-archive.com/debian-bugs- d...@lists.debian.org/msg1499869.html> - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Something must be done. This is something. Therefore, we must do it. -BEGIN PGP SIGNATURE- iQ

Re: Cannot encrypt to reenabled key after migration

2017-04-12 Thread MFPA
oblem went away when I switched back to GnuPG 2.1.19. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Keep them dry and don't feed them after midnight -BEGIN PGP SIGNATURE- iNUEARYKAH0WIQQzrO1O6RNO695qhQYXErxG

Re: Security doubts on 3DES default

2017-03-13 Thread MFPA
ogroups.com> or <http://groups.yahoo.com/group/pgpnet/>. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> During an eruption - move away from the volcano - not towards it -BEGIN PGP SIGNATURE- iNUEARYKAH0WIQQzrO1O6RNO695q

Re: Security doubts on 3DES default

2017-03-13 Thread MFPA
signatures. For what its worth, forcing SHA-256 signatures with a "digest-algo" line in gpg.conf doesn't cause anybody to shout that there is a problem. But GnuPG says "gpg: WARNING: forcing digest algorithm SHA512 (10) violates recipient preferences". - -- Best regards MFPA

Dirmngr fails to communicate with keyservers (W32 binaries for GnuPG 2.1.22)

2017-07-29 Thread MFPA
1EF251BFAB has been revoked - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> It's not hard to meet expenses, they're everywhere. -BEGIN PGP SIGNATURE- iNUEARYKAH0WIQQzrO1O6RNO695qhQYXErxGGvd

Re: Changing PINs of German bank card

2017-07-11 Thread MFPA
pins like 1234 or > their birthday). Surely things like 1234 can be prevented by software. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Change is inevitable except from a vending machine

Re: Changing PINs of German bank card

2017-07-11 Thread MFPA
facility. And at one time, NatWest only allowed a PIN change the first time the card was used in one of their own ATMs. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> A woman's mind is cleaner than a man's: She changes it more often. -BEGI

Re: Changing PINs of German bank card

2017-07-10 Thread MFPA
he UK bank card PINs are almost exclusively 4 digits long. The bank allocates a PIN initially, but the customer can usually change it as often as they like at an ATM that supports PIN changes. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Hard wor

Re: Changing PINs of German bank card

2017-07-15 Thread MFPA
some countries, using your Dutch > bank card, if you > allow it), the PIN necessarily went to the bank, > there was no way for a > check by the chip in the card. Same applies with online shopping. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.ne

Re: Changing PINs of German bank card

2017-07-15 Thread MFPA
odern > cryptography are at hand. Think of asymmetric methods > like RSA ... All of which is irrelevant for online transactions. On the shopping website, the customer keys in the long card number, the PIN, and the last three digits from the signature strip. The chip on the c

Re: Changing PINs of German bank card

2017-07-15 Thread MFPA
or example, see <http://personal.natwest.com/personal/ccet/service/debit-card0.html> and <https://www.barclays.co.uk/help/cards/pin/forgot-pin/#main>. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> I would like to help you out. Which wa

Re: Changing PINs of German bank card

2017-07-18 Thread MFPA
the long card number, the **expiry date** and the last three digits from the signature strip. The chip on the card is not involved. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> If you are afraid to speak against tyranny, then you are already a sl

Re: How to use a the same generated keypair on enigmail/thunderbird and iOS Mail

2017-07-25 Thread MFPA
would think you could transfer the private key file to the moblle device by bluetooth, or by using a USB cable, or by email. So long as the private key is protected by a decent passphrase, anybody else getting a copy of the file should be of no consequence. - -- Best regards MFPA

Re: gpg-agent cache keygrip

2017-07-27 Thread MFPA
for > everyone, not just old > people. Have you considered using a password manager to remember them? - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Can you imagine a world with no hypothetical situation

Re: gpg-agent cache keygrip

2017-07-27 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Thursday 27 July 2017 at 10:46:33 AM, in <mid:e74cc71a-5049-403b-32e0-ba9f0fe3f...@digitalbrains.com>, Peter Lebbing wrote:- > On 27/07/17 11:24, MFPA wrote: >> Have you considered using a password manager to >> remembe

Re: How to use a the same generated keypair on enigmail/thunderbird and iOS Mail

2017-07-26 Thread MFPA
nPGP, it's just there for additional > purposes with other > applications. At least on some, NFC works with OpenPGP. For example, see <https://www.grepular.com/An_NFC_PGP_SmartCard_For_Android>. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> No

Re: How to use a the same generated keypair on enigmail/thunderbird and iOS Mail

2017-07-26 Thread MFPA
s usually a good idea. That's the whole > point of the > OpenPGP smartcard, after all. Do "most normal users" make use of an OpenPGP smartcard? Those that do might be able to use the same keypair on their mobile phone by means of an NFC-enabled smartcard. - -- Best regards

Re: Changing PINs of German bank card

2017-07-12 Thread MFPA
ve the capacity. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> If you save the world too often, it begins to expect it -BEGIN PGP SIGNATURE- iNUEARYKAH0WIQQzrO1O6RNO695qhQYXErxGGvd45AU

Re: Changing PINs of German bank card

2017-07-12 Thread MFPA
ash). Otherwise they would not know if you entered the correct PIN for online transactions. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> War is a matter of vital importance to the State. ---

Re: gnupg or gpg-agent options for parallelism and memory usage

2017-08-04 Thread MFPA
all" does not reply to the list, It does here. I normally just use "Reply", same as other lists. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Wise men learn many things fro

Re: Posting short GnuPG clear signed messages on social media sites

2017-08-06 Thread MFPA
verify without any errors the text that appeared on my timeline. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Always forgive your enemies; nothing annoys them so much -BEGIN PGP SIGNATURE- iNUEARYKAH0WIQQzrO1O6RNO

Re: TOFU db corruption detected

2017-08-06 Thread MFPA
ze of my tofu.db from 1532 to 1432 KB but unfortunately GnuPG still reports the same issue. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Beware the deadly donkey falling slowly from the sky -BEGIN PGP SIGNATU

Re: TOFU db corruption detected

2017-08-06 Thread MFPA
4 KB but GnuPG unfortunately still reports the same issue. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Day-old pastry is hollow succour to a man who is bereft of ostrich. -BEGIN PGP SIGNATURE- iNUEARYKAH0WIQQzrO1O6RNO695qhQYXErxGGvd45AUC

Re: TOFU db corruption detected

2017-08-08 Thread MFPA
roblem key and to a revoked key from the same user, deleted the signature and encryption entries relating to those bindings, then restored from the dump file. I don't know what issues this may introduce but I no longer get the "TOFU db corruption detected" messages. - -- Best regards MFPA

Re: 'sign (and cert)' or just 'cert' on a master key with subkeus

2017-08-01 Thread MFPA
, > hopefully refresh the key (or complain or abandon > PGP), and get both > the revocation certificates and the new subkeys. > Without even having > to understand what happens. Doesn't "auto-key-retrieve" in their gpg.conf take care of this? - -- Best regards MFPA

Re: Posting short GnuPG clear signed messages on social media sites

2017-08-05 Thread MFPA
ill read or generate QR codes, so people don't need to jump through too many hoops to read the message. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> It is not necessary to have enemies if you go out of your way

TOFU db corruption detected

2017-08-05 Thread MFPA
keyring does contain an image, which I can view by gpg --list-options show-photos --list-keys Fingerptint. How do I "rebuild" the TOFU database to get rid of the corruption? - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Amateu

Re: Key corruption: duplicate signatures and usage flags

2017-06-22 Thread MFPA
emoved the flag from the > primary key. I didn't know you could remove a usage flag once the key was on the keyservers. And I thought GnuPG would automatically sign with a valid signing subkey if there was one. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@r

Re: TOFU

2017-06-22 Thread MFPA
lid signature > "Good". I think it > suggests they both have some credibility, which is a > false suggestion. I thought "good signature" just meant the message has not been altered in transit. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-

Re: TOFU

2017-06-25 Thread MFPA
Or maybe that the original message data has been replaced with new message data that hashes to the same value. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Keep them dry and don't feed

Re: Managing the WoT with GPG

2017-06-27 Thread MFPA
ese messages on this list lately. It looks like somebody has subscribed a customer helpline email address <supp...@koramgame.mail.helpshift.com> to the list. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> I would like to help you out. Which way did

Re: [Announce] GnuPG 2.1.21 released

2017-05-21 Thread MFPA
, I find I have to stick with 2.1.19 because of <https://dev.gnupg.org/T3097>. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Only dead fish go with the flow -BEGIN PGP SIGNATURE- iNUEARYKAH0WIQQzrO1O6RNO695qhQYXErxGG

Re: Don't send encrypted messages to random users to test your gpg

2017-05-29 Thread MFPA
u have joined an email to <pgpnet-traditio...@yahoogroups.com> removes this silliness. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Another person's secret is like another person's money: you are not as careful with it as y

Re: Don't send encrypted messages to random users

2017-05-31 Thread MFPA
version to locate a key from the local keyring or from keyservers. A member of PGPNET produced some Python scripts as an exercise in seeing what might go into this, when we last discussed the idea over there about three years ago. - -- Best regards MFPA <mailto:2014-667rhzu3d

Re: Fwd: Re: Question for app developers, like Enigmail etc. - Identicons

2017-06-06 Thread MFPA
th his/her id-card so that it's guaranteed that > Alice is not Eve. Assuming the users trust both the CA and the entity that issued the id-card. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Two rights do not make a wrong. They make an airplan

Re: Extending Expiration dates of gnupg keys with the private key residing on a smart card

2017-05-01 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Sunday 30 April 2017 at 7:34:40 PM, in <mid:6b5b17cd-95bc-836c-6dd2-ea2473d84...@digitalbrains.com>, Peter Lebbing wrote:- > I think keys 1, 2 and 3 are all subkeys; NOT your > primary. Isn't the primary "key 0"? -

Re: [Announce] GnuPG 2.1.21 released

2017-05-21 Thread MFPA
solved by renaming my old pubring.kbx file and importing all the keys from it into GnuPG, thereby generating a new pubring.kbx. At least, 2.1.21 seems to work for me at the moment. - -- Best regards MFPA <mailto:2014-667rhzu3dc-lists-gro...@riseup.net> Look, it's a hat!

Re: OT: Which smartphone would you use

2017-09-21 Thread MFPA
airphone <https://www.fairphone.com> tries, but they still have proprietary hardware drivers. "Made using conflict-free minerals." Too dear for me (529 euros from Fairphone themselves, 465 GBP new or 385 GBP refurbished from <https://www.thephone.coop>. - -- Best regards MFPA

<    3   4   5   6   7   8   9   >