<20131101114756.horde.f5rbb0pjwmqx-chco0km...@mail.sixdemonbag.org>

[Djjo Sexman]

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

52732c36.2070...@sixdemonbag.org

[Djjo Sexman]

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

20131031232313.GB14302@leortable

[Djjo Sexman]

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

<23871535.8aid4UM92T@mani>

[Djjo Sexman]

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

<5273fe55.5090...@digitalbrains.com>

[Djjo Sexman]

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

20131031151607.horde.yk7djt4bckh-nfefp6zz...@mail.sixdemonbag.org

[Djjo Sexman]

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

รับข้อมูล

[Djjo Sexman]

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

998560652.20131101152419@my_localhost>

[Djjo Sexman]

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

1745551923.20131101142927@my_localhost> Content-Type: text/plain; charset=utf-8

[Djjo Sexman]

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: gpgsm and expired certificates

[Robert J. Hansen]

My previous email was pretty dry and impersonal.  This one is very personal.


Isn't the NSA "a government based organisation?" Surely
guilt-by-association renders every government based organisation just
as nefarious as the NSA.


My current job is in software forensics -- discovering new ways to  
pull information off electronic media.  Most of the people funding  
research in this area are connected to the government somehow.  I  
would describe what a typical week for me entails but I'm pretty sure  
I would terrify and traumatize a good portion of the list.  (A great  
week for me is one in which I don't have to see, hear, or even think  
about, the three words, "Daddy, no, stop!")  But since some of my R&D  
funding comes from the government, I'm just as nefarious as the NSA.


John Moore III, who hasn't been seen on this list in ages, was always  
quite open about the fact he served in the Marine Corps attached to a  
signals intelligence unit at Fort Meade.  I'll let you do the math and  
figure out what three letter agency at Fort Meade does signals  
intelligence.  Apparently John's contributions to the GnuPG community  
mean nothing, because he's just as nefarious as the NSA.


Werner has taken money from the German government to do crypto-related  
software development.  Apparently Werner is just as nefarious as the  
NSA.


There are a lot of people on this list who have some kind of  
connection to the government.  Many of them -- us -- are deeply  
concerned about civil liberties, surveillance, and the future of  
liberty.  We are not your enemies and we do not deserve to be tarred  
with that brush.


You owe all of us an apology.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: make gpg-agent forget the PIN

[Peter Lebbing]

Hi Johannes,

> Is there any way to explicitly tell gpg-agent to forget the pin as well?

Based on a post once made by Werner, I have this script:

---8<->8---
#!/bin/sh

gpg-connect-agent 'SCD RESET' /bye
---8<->8---

It's called 'scforget' here.

HTH,

Peter.

-- 
I use the GNU Privacy Guard (GnuPG) in combination with Enigmail.
You can send me encrypted mail if you want some privacy.
My key is available at 

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: gpgsm and expired certificates

[Robert J. Hansen]

Isn't the NSA "a government based organisation?" Surely
guilt-by-association renders every government based organisation just
as nefarious as the NSA.


This is why grown-ups don't believe in guilt by association.

To take an example: the graduate students at the University of Iowa  
who teach undergraduate courses on classical French literature are  
University employees. (Unionized ones at that: United  
Electicalworkers/Committee to Organize Graduate Students, *represent*!  
[1])  As University employees, they are officially also government  
employees, since the University is funded by the State.


Do you really think a bunch of graduate students obsessing over _La  
Chanson du Roland_ are "just as nefarious as the NSA"?


If you do, then I think your paranoia is so out of hand you really  
ought consider seeking professional help.  And no, I'm not kidding.


If you don't, then let's dial back the rhetoric.  Governments are  
*big* *big* things with lots of employees, and they deserve better  
treatment than this.




[1] Yes, I was a card-carrying union man and served as a union  
officer.  Try not to keel over from the shock.  ;)


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

make gpg-agent forget the PIN

[Johannes Zarl]

Hi,

I'm trying to get gpg-agent to automatically forget my credentials as soon as 
I leave the PC/the screen is locked. So far, I only got it half working:

When I send a SIGHUP to the gpg-agent, it correctly forgets cached 
passphrases. The cached PIN of my OpenPGP card, however remains available.

Is there any way to explicitly tell gpg-agent to forget the pin as well?

Cheers,
  Johannes

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: trust your corporation for keyowner identification?

[MFPA]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi


On Monday 28 October 2013 at 8:51:30 AM, in
, Stan Tobias
wrote:


> I say it does not, because basing one's certification
> on that of the notary is not [the same as] basing one's
> certification on the notary's verification efforts.

What evidence of the Notary's verification efforts do you review? From
my reading of this thread, there is only the _assumption_ that
sufficient identity checks were properly carried out before the
individual started working in a role that carried a corporate email
address.


- --
Best regards

MFPAmailto:expires2...@ymail.com

Beware the deadly donkey falling slowly from the sky
-BEGIN PGP SIGNATURE-

iPQEAQEKAF4FAlJzx6xXFIAALgAgaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl
bnBncC5maWZ0aGhvcnNlbWFuLm5ldEJBMjM5QjQ2ODFGMUVGOTUxOEU2QkQ0NjQ0
N0VDQTAzAAoJEKipC46tDG5pNUIEAMUYiECVOqbZkNqNvc7ql6Dqr0rELL7wSPuV
pyeKoV7DVmQwZJBcAfCXOS9JFh1vf9f+ziX+1UjmPWezdyF2Rm5tH3hDnhx3wC4V
ieGqimLOP5BllF/E/Yy5XQrw6wwqZzgTQ+tRfXGKc3qJMCd4KUNmkf8uRqa7Bzp/
57Ih7mWL
=s1Md
-END PGP SIGNATURE-


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: gpgsm and expired certificates

[MFPA]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi


On Sunday 27 October 2013 at 2:46:05 PM, in
, Uwe Brauer wrote:



> I would prefer a government based organisation which
> provides this service to its citizen (especially
> because of all which was lately revealed about the NSA)

Isn't the NSA "a government based organisation?" Surely
guilt-by-association renders every government based organisation just
as nefarious as the NSA.




- --
Best regards

MFPAmailto:expires2...@ymail.com

Free advice costs nothing until you act upon it
-BEGIN PGP SIGNATURE-

iPQEAQEKAF4FAlJzusxXFIAALgAgaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl
bnBncC5maWZ0aGhvcnNlbWFuLm5ldEJBMjM5QjQ2ODFGMUVGOTUxOEU2QkQ0NjQ0
N0VDQTAzAAoJEKipC46tDG5pit0EAIiKQnBVsZmESaFATJVSGJ5NHCkKAQ3JzvO1
Qnqy6fV+bF1dKbI6fiymsZpRsx1jppnR5lBNGzFWqXsSTfrp3h99k2YzAYnPi67C
/XAC3D665XDz0ty3vNKx5p+bO4/BaBHbp7deQcLkNwortGS70Gx1zKRH02IJi+I5
fVjbyLyJ
=rXTe
-END PGP SIGNATURE-


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users