Re: Is the OpenPGP model still useful?

2011-07-26 Thread Marcio B. Jr.
Hi Daniel, On Sat, Jul 23, 2011 at 2:21 PM, Daniel Kahn Gillmor d...@fifthhorseman.net wrote: On 07/23/2011 07:04 PM, Marcio B. Jr. wrote: On Wed, Jul 6, 2011 at 5:49 PM, Robert J. Hansen r...@sixdemonbag.org wrote: So far, OTR adoption seems unjustifiable, really. I mean, it uses the

Re: Is the OpenPGP model still useful?

2011-07-26 Thread Robert J. Hansen
On 7/26/11 2:44 PM, Marcio B. Jr. wrote: Are you aware that the purpose of OTR is to allow two parties to communicate confidentially? Right now, I'm trying to study OTR within some US Fifth Amendment contexts. So I'll answer that in a later time. It seems to be a straightforward yes or no

Re: Is the OpenPGP model still useful?

2011-07-23 Thread Marcio B. Jr.
Hello Robert. On Wed, Jul 6, 2011 at 5:49 PM, Robert J. Hansen r...@sixdemonbag.org wrote: So far, OTR adoption seems unjustifiable, really. I mean, it uses the Diffie-Hellman key exchange method with block ciphers. Why is this a problem? You know, secrets are shared. 100% increase (at

Re: Is the OpenPGP model still useful?

2011-07-23 Thread Robert J. Hansen
On 7/23/11 1:04 PM, Marcio B. Jr. wrote: You know, secrets are shared. 100% increase (at least) in exposing risks. I need to see a citation for this. What you're claiming is at odds with everything I've ever learned about how DHKEA operates. ___

Re: OT: IM encryption options [was: Re: Is the OpenPGP model still useful?]

2011-07-23 Thread Marcio B. Jr.
Hi Aron, you are somewhat arrogant. Please read what I wrote till completion. Regards, On Fri, Jul 22, 2011 at 9:17 PM, Aaron Toponce aaron.topo...@gmail.com wrote: On Fri, Jul 22, 2011 at 07:56:42PM -0300, Marcio B. Jr. wrote: Hello Daniel, sorry for such a delay; this has been a wild

Re: Is the OpenPGP model still useful?

2011-07-23 Thread Daniel Kahn Gillmor
On 07/23/2011 07:04 PM, Marcio B. Jr. wrote: On Wed, Jul 6, 2011 at 5:49 PM, Robert J. Hansen r...@sixdemonbag.org wrote: So far, OTR adoption seems unjustifiable, really. I mean, it uses the Diffie-Hellman key exchange method with block ciphers. Why is this a problem? You know, secrets

Re: Is the OpenPGP model still useful?

2011-07-23 Thread Marcio B. Jr.
Hi Robert. Secrecy sharing constitutes sort of a symmetric fact when more than one instance is involved and you ask me for a citation? I resumed this thread in order to clarify whether Kopete's OpenPGP plugin was really superior, compared to the OTR one, and all people say is OTR and its

Re: Is the OpenPGP model still useful?

2011-07-23 Thread Robert J. Hansen
On 7/23/11 2:36 PM, Marcio B. Jr. wrote: Secrecy sharing constitutes sort of a symmetric fact when more than one instance is involved and you ask me for a citation? Yes. I am quite certain that if, say, Daniel Gillmor were to assert the Earth is round and I were to ask him for a citation, he

Re: OT: IM encryption options [was: Re: Is the OpenPGP model still useful?]

2011-07-22 Thread Marcio B. Jr.
Hello Daniel, sorry for such a delay; this has been a wild JULY. On Wed, Jul 6, 2011 at 4:09 PM, Daniel Kahn Gillmor d...@fifthhorseman.net wrote: On 07/06/2011 01:28 PM, Marcio B. Jr. wrote: So far, OTR adoption seems unjustifiable, really. I mean, it uses the Diffie-Hellman key exchange

Re: Is the OpenPGP model still useful?

2011-07-07 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Thursday 7 July 2011 at 12:52:42 AM, in mid:20110706235242.ga24...@helcaraxe.net, Milo wrote: I think that informative and didactic value of such response is negligible. Even if that were true, there would still be the entertainment

Re: Is the OpenPGP model still useful?

2011-07-06 Thread Marcio B. Jr.
Hello, resuming this thread because I'm studying encryption options for KDE's Kopete IM client. So far, OTR adoption seems unjustifiable, really. I mean, it uses the Diffie-Hellman key exchange method with block ciphers. As of what I got from your (Robert) explanation plus some preliminary

OT: IM encryption options [was: Re: Is the OpenPGP model still useful?]

2011-07-06 Thread Daniel Kahn Gillmor
On 07/06/2011 01:28 PM, Marcio B. Jr. wrote: resuming this thread because I'm studying encryption options for KDE's Kopete IM client. Hmm, i'm not sure this is the best place for this discussion, so i've marked the subject line OT for off-topic -- if you think there might be a better discussion

Re: Is the OpenPGP model still useful?

2011-07-06 Thread Doug Barton
On 07/06/2011 10:28, Marcio B. Jr. wrote: Hello, resuming this thread because I'm studying encryption options for KDE's Kopete IM client. So far, OTR adoption seems unjustifiable, really. I mean, it uses the Diffie-Hellman key exchange method with block ciphers. As of what I got from your

Re: Is the OpenPGP model still useful?

2011-07-06 Thread Marcio B. Jr.
Dear Doug, I don't know what IDOYTM is supposed to mean, and am afraid I'm not enough-of-a-teenager to get really concerned with that. If the existence of big fans justifies quality, Amy Winehouse would be Teresa of Calcutta. My question, which, I must emphasize for you, is a question — not an

Re: Is the OpenPGP model still useful?

2011-07-06 Thread Doug Barton
On 07/06/2011 13:39, Marcio B. Jr. wrote: Dear Doug, I don't know what IDOYTM is supposed to mean, It depends on your threat model. You haven't defined what you're guarding against, so it's impossible to judge how potential solutions may or may not help. and am afraid I'm not

Re: Is the OpenPGP model still useful?

2011-07-06 Thread Milo
On Wed, Jul 06, 2011 at 01:49:52PM -0700, Robert J. Hansen wrote: (...) -- it's just not something I can answer. Coherency and security are matters of personal taste and policy. Are you sure about that? then find a person who will tell you that (you like thought experiments, don't you?)

Re: Is the OpenPGP model still useful?

2011-07-06 Thread Robert J. Hansen
On 7/6/2011 7:52 PM, Milo wrote: Are you sure about that? then find a person who will tell you that (you like thought experiments, don't you?) during obvious live threat situation feels secure. You can imaging what will be a common anwser, right? You must not know many United States Marines.

Re: Is the OpenPGP model still useful?

2011-05-02 Thread B
Simon Ward schrieb: On Fri, Apr 29, 2011 at 09:05:35PM +0200, B wrote: By the way: Using OpenPGP with enigmail in Thunderbird, I miss a feature: Usually the recipient rules work but if they fail (perhaps due to background update of Thunderbird and not working plugin), I would like to have a

Re: Is the OpenPGP model still useful?

2011-05-02 Thread Jeffrey Walton
On Mon, May 2, 2011 at 5:34 AM, B brud...@cation.de wrote: Simon Ward schrieb: On Fri, Apr 29, 2011 at 09:05:35PM +0200, B wrote: By the way: Using OpenPGP with enigmail in Thunderbird, I miss a feature: Usually the recipient rules work but if they fail (perhaps due to background update of

Re: Is the OpenPGP model still useful?

2011-05-02 Thread B
Jeffrey Walton schrieb: On Mon, May 2, 2011 at 5:34 AM, B brud...@cation.de wrote: Simon Ward schrieb: On Fri, Apr 29, 2011 at 09:05:35PM +0200, B wrote: By the way: Using OpenPGP with enigmail in Thunderbird, I miss a feature: Usually the recipient rules work but if they fail (perhaps due

Re: Is the OpenPGP model still useful?

2011-05-02 Thread Simon Ward
On Mon, May 02, 2011 at 11:34:47AM +0200, B wrote: But I'm lacking phantasy of how to use this for preventing me of sending unencrypted in case that Enigmail does not work properly So, if it does not work, the confirmation request will not appear and mail goes out unencrypted, doesn't

Re: Is the OpenPGP model still useful?

2011-04-29 Thread Michel Messerschmidt
Sounds very much like Off-the-Record messaging for every kind of communication. Or is there a difference I have missed? ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Is the OpenPGP model still useful?

2011-04-29 Thread Robert J. Hansen
On 4/28/11 11:05 AM, Michel Messerschmidt wrote: Sounds very much like Off-the-Record messaging for every kind of communication. Or is there a difference I have missed? The barrier to usage is still high with OTR: users still have to authenticate, and you can get horrible sync issues. Plus,

Re: Is the OpenPGP model still useful?

2011-04-29 Thread B
Am 28.04.2011 17:05, schrieb Michel Messerschmidt: Sounds very much like Off-the-Record messaging for every kind of communication. Or is there a difference I have missed? Hej list members, whatever you ar talking about with this topic: I like using OpenPGP VERY MUCH and find it VERY

Re: Is the OpenPGP model still useful?

2011-04-29 Thread Simon Ward
On Fri, Apr 29, 2011 at 09:05:35PM +0200, B wrote: By the way: Using OpenPGP with enigmail in Thunderbird, I miss a feature: Usually the recipient rules work but if they fail (perhaps due to background update of Thunderbird and not working plugin), I would like to have a chance to see that the

Is the OpenPGP model still useful?

2011-04-27 Thread Robert J. Hansen
(The subject line may be provocative, but please don't think I'm arguing that it's not useful. I don't know. I just had an idea a couple of days ago, and I figure it might be worth some discussion.) OpenPGP takes its origins from ClassicPGP, which in turn comes out of a military threat

Re: Is the OpenPGP model still useful?

2011-04-27 Thread Mark H. Wood
Some thoughts: o Agreed: OpenPGP is difficult. o Media-hopping: each segment can be treated separately. The users know there is a thread of conversation but the technologies do not. So, is this point relevant? o Who is the attacker? A government with sufficient motivation and

Re: Is the OpenPGP model still useful?

2011-04-27 Thread Charly Avital
Robert J. Hansen wrote the following on 4/27/11 9:48 AM: (The subject line may be provocative, but please don't think I'm arguing that it's not useful. I don't know. I just had an idea a couple of days ago, and I figure it might be worth some discussion.) OpenPGP takes its origins from

Re: Is the OpenPGP model still useful?

2011-04-27 Thread Robert J. Hansen
On Wed, 27 Apr 2011 11:09:00 -0400, Mark H. Wood mw...@iupui.edu wrote: o Media-hopping: each segment can be treated separately. The users know there is a thread of conversation but the technologies do not. So, is this point relevant? Yes. E.g., OpenPGP messages cannot be reduced to

Re: Is the OpenPGP model still useful?

2011-04-27 Thread Robert J. Hansen
On Wed, 27 Apr 2011 10:11:51 -0400, Charly Avital shavi...@mac.com wrote: I'm buying. May I cross-post and quote, with attribution (CC3 maybe)? Sure. Consider it CC BY-ND. Repost how you like, commercial use OK. :) ___ Gnupg-users mailing list