Bug#273756: ITP: gpgmailsign -- sign and mail gnupg keys
Re: sean finney in <[EMAIL PROTECTED]> > On Thu, Sep 30, 2004 at 03:10:38PM +0200, Christoph Berg wrote: > > > > http://www.df7cb.de/projects/gpgmailsign/ > > > > > Afaik, Debian currently does not include any package that provides that > > functionality; the only other I know of (caff by Peter Palfrader) needs > > an experimental+patched gnupg version to work, so I still think > > gpgmailsign should be packaged. > > signing-party? I'll look into it to see if I can contribute to gpg-mailkeys or if the two programs serve different purposes. Thanks for the pointer. Re: Graham Wilson in <[EMAIL PROTECTED]> > Peter Palfrader's cabot works just fine with the version of GnuPG > included in unstable. cabot works by challenge-response, I don't want that. gpgmailsign sends the encrypted signature to the recipient who can then decide if he wants to upload it, without the need to send anything back. The challenge is the same; the recipient needs the private key to decrypt the message. (As mentioned above, Peter's caff does the same, but needs a non-standard gpg.) Christoph -- [EMAIL PROTECTED] | http://www.df7cb.de/ signature.asc Description: Digital signature
Bug#273756: ITP: gpgmailsign -- sign and mail gnupg keys
On Thu, Sep 30, 2004 at 03:10:38PM +0200, Christoph Berg wrote: > Afaik, Debian currently does not include any package that provides that > functionality; the only other I know of (caff by Peter Palfrader) needs > an experimental+patched gnupg version to work, so I still think > gpgmailsign should be packaged. Peter Palfrader's cabot works just fine with the version of GnuPG included in unstable. -- gram
Bug#273756: ITP: gpgmailsign -- sign and mail gnupg keys
On Thu, Sep 30, 2004 at 03:10:38PM +0200, Christoph Berg wrote: > > > http://www.df7cb.de/projects/gpgmailsign/ > > > Afaik, Debian currently does not include any package that provides that > functionality; the only other I know of (caff by Peter Palfrader) needs > an experimental+patched gnupg version to work, so I still think > gpgmailsign should be packaged. signing-party? sean -- signature.asc Description: Digital signature
Bug#273756: ITP: gpgmailsign -- sign and mail gnupg keys
Re: Rob Bradford in <[EMAIL PROTECTED]> > > This script takes PGP/GnuPG keys keys, strips off non-self signatures, and > > signs. Each UID is signed separately, encrypted, and mailed to the email > > address in the UID to check the validity of the address. > > . > > http://www.df7cb.de/projects/gpgmailsign/ > > In my opinion I don't think this package should be included, since it is only > a > small script and their are lots of complicated trust issues involved. I > suggest > you make sure that someone can just pop the perl script into ~/bin/ and it > should just work. Many people have made their own versions of this script and > I > don't think it would be right to include one in the archive. In my opinion > this > is unreasonable bloat given that the archive is already bulging at the seams. Hi, it's not that simple. The gnupg interface is hard to work with, and gpgmailsign needs expects scripts besides the main perl script. Besides that, the ~/bin/ argument applies more or less to every "unpack-configure-make-make_install" package. (Of course gpgmailsign's install path needs to be rewritten before I'll package it.) Afaik, Debian currently does not include any package that provides that functionality; the only other I know of (caff by Peter Palfrader) needs an experimental+patched gnupg version to work, so I still think gpgmailsign should be packaged. I tried to write it in such a way that the user can check the messages that get sent out before if he wants to, so no undesired signatures leak out. Christoph -- [EMAIL PROTECTED] | http://www.df7cb.de/
Bug#273756: ITP: gpgmailsign -- sign and mail gnupg keys
Package: wnpp Severity: wishlist * Package name: gpgmailsign Version : 0.7a Upstream Author : Christoph Berg <[EMAIL PROTECTED]> * URL : http://www.df7cb.de/projects/gpgmailsign/ * License : GPL Description : sign and mail gnupg keys This script takes PGP/GnuPG keys keys, strips off non-self signatures, and signs. Each UID is signed separately, encrypted, and mailed to the email address in the UID to check the validity of the address. . http://www.df7cb.de/projects/gpgmailsign/ Christoph -- [EMAIL PROTECTED] | http://www.df7cb.de/ signature.asc Description: Digital signature
