Re: GnuPG and g10 code

2014-12-17 Thread Dave Pawson 
Not meant as a critique of the content, just pointing out that
it does not explain 'why' and 'what' the card and software (as a system) do
for the reader new to the idea. It may be accurate technically.

Dave



On 17 December 2014 at 00:35, Peter Lebbing  wrote:
> On 16/12/14 13:26, Dave Pawson wrote:
>>> What about:
>>>
>>>   https://en.wikipedia.org/wiki/OpenPGP_card
>>
>> (IMHO) pure geekery copied from one of the other pages?
>
> Hmmm, that article seems lacking. If you would have asked nicely, I might have
> bothered to improve it. Now, I don't feel inclined to do it. I'll get around 
> to
> it one day.
>
> Peter.
>
> --
> I use the GNU Privacy Guard (GnuPG) in combination with Enigmail.
> You can send me encrypted mail if you want some privacy.
> My key is available at 
>
> ___
> Gnupg-users mailing list
> Gnupg-users@gnupg.org
> http://lists.gnupg.org/mailman/listinfo/gnupg-users



-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: GnuPG and g10 code

2014-12-16 Thread Peter Lebbing 
On 16/12/14 13:26, Dave Pawson wrote:
>> What about:
>>
>>   https://en.wikipedia.org/wiki/OpenPGP_card
> 
> (IMHO) pure geekery copied from one of the other pages?

Hmmm, that article seems lacking. If you would have asked nicely, I might have
bothered to improve it. Now, I don't feel inclined to do it. I'll get around to
it one day.

Peter.

-- 
I use the GNU Privacy Guard (GnuPG) in combination with Enigmail.
You can send me encrypted mail if you want some privacy.
My key is available at 

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: GnuPG and g10 code

2014-12-16 Thread Dave Pawson 
On 16 December 2014 at 12:16, Werner Koch  wrote:
> On Tue, 16 Dec 2014 11:11, dave.paw...@gmail.com said:
>
>> 1. I knew nothing about this smart card.
>> 2 Searched on Google. Found http://shop.kernelconcepts.de/product_info.php
>
> What about:
>
>   https://en.wikipedia.org/wiki/OpenPGP_card

(IMHO) pure geekery copied from one of the other pages?


>
> and the second section of
>
>   https://gnupg.org/documentation/howtos.html

https://gnupg.org/howtos/card-howto/en/smartcard-howto-single.html#id2456468

Note how quickly it gets into using GPG? Then into software installation?
Missing, the layer above this, the marketing 'spiel'.

OK, it could be me (I don't think it is).

Simple question, WTF is thing all about? I have lots of credit cards
(are they smart? No idea).
I know what to do with them. I think this thing is different, so my
first question is what is it for?
Why should I be interested, what can it do (especially as it
costs?80 Euro with reader?)

As if you are talking to your little sister (big sister, anyone one
non-geek :-) tell me (us)
what it offers?

I'll shut up now 

regards




>
>
>
> Shalom-Salam,
>
>Werner
>
>
> --
> Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.
>



-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: GnuPG and g10 code

2014-12-16 Thread Werner Koch 
On Tue, 16 Dec 2014 11:11, dave.paw...@gmail.com said:

> 1. I knew nothing about this smart card.
> 2 Searched on Google. Found http://shop.kernelconcepts.de/product_info.php

What about:

  https://en.wikipedia.org/wiki/OpenPGP_card

and the second section of 

  https://gnupg.org/documentation/howtos.html



Shalom-Salam,

   Werner


-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: OpenPGP card (Was Re: GnuPG and g10 code)

2014-12-16 Thread Dave Pawson 
On 16 December 2014 at 11:31, MFPA
<2014-667rhzu3dc-lists-gro...@riseup.net> wrote:

>> from there I see For more information, please visit
>> this products webpage.
>
>> Sadly that page is 404
>
> Try .

Which links on to the GNU pgp page?

all written by techies, for techies?

Nothing to explain what it's all about, how it might be used,
why it is useful etc?

IMHO that class of  information would help to raise interest.
My first question was, can I install a reader and use 'my' card
to log on to my computer? No idea.
Next? What else can I use a card/card reader for? Not answered.

regards



-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

OpenPGP card (Was Re: GnuPG and g10 code)

2014-12-16 Thread MFPA 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512



On Tuesday 16 December 2014 at 10:11:32 AM, in
,
Dave Pawson wrote:


> Hi Werner. 1. I knew nothing about this smart card. 2
> Searched on Google. Found
> http://shop.kernelconcepts.de/product_info.php

> from there I see For more information, please visit
> this products webpage.

> Sadly that page is 404

Try .


- --
Best regards

MFPAmailto:2014-667rhzu3dc-lists-gro...@riseup.net

People who throw kisses are hopelessly lazy.
-BEGIN PGP SIGNATURE-
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=
=dDPJ
-END PGP SIGNATURE-


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: GnuPG and g10 code

2014-12-16 Thread Dave Pawson 
Hi Werner.
1. I knew nothing about this smart card.
2 Searched on Google. Found http://shop.kernelconcepts.de/product_info.php

from there I see For more information, please visit this products webpage.

Sadly that page is 404
http://www.hidglobal.de/products/readers/omnikeyindex.php?id=20

Where can I read a user view of this product and software please?

regards


On 16 December 2014 at 09:06, Werner Koch  wrote:
> On Mon, 15 Dec 2014 13:02, br...@minton.name said:
>> Thanks for the good work! Do you get any income from kernel concepts with
>> sale of the OpenPGP smart cards? I prefer to buy products from for-profit
>> companies, and donate only to charities / nonprofit organizations.
>
> Initially I distributed few hundreds cards myself; however this is a lot
> of work given that my business is not setup for distributing small
> physical goods.  Thus I asked Petra of kernelconcepts whether they want
> to do take care of it.  They do not make a lot of profit from the cards
> and thus I do not ask for a share of it.
>
> g10 Code is not a charity but there have been talks on how to set up a
> charitable entity to support crypto projects.  I hope that we can
> establish this by next spring.  In the meantime you may donate to the
> Wau Holland Stiftung  which
> is a charity and will use these donation to pay for development work on
> GnuPG.
>
>
> Salam-Shalom,
>
>Werner
>
> --
> Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.
>
>
> ___
> Gnupg-users mailing list
> Gnupg-users@gnupg.org
> http://lists.gnupg.org/mailman/listinfo/gnupg-users



-- 
Dave Pawson
XSLT XSL-FO FAQ.
Docbook FAQ.
http://www.dpawson.co.uk

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: GnuPG and g10 code

2014-12-16 Thread Werner Koch 
On Mon, 15 Dec 2014 13:02, br...@minton.name said:
> Thanks for the good work! Do you get any income from kernel concepts with
> sale of the OpenPGP smart cards? I prefer to buy products from for-profit
> companies, and donate only to charities / nonprofit organizations.

Initially I distributed few hundreds cards myself; however this is a lot
of work given that my business is not setup for distributing small
physical goods.  Thus I asked Petra of kernelconcepts whether they want
to do take care of it.  They do not make a lot of profit from the cards
and thus I do not ask for a share of it.

g10 Code is not a charity but there have been talks on how to set up a
charitable entity to support crypto projects.  I hope that we can
establish this by next spring.  In the meantime you may donate to the
Wau Holland Stiftung  which
is a charity and will use these donation to pay for development work on
GnuPG.


Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: GnuPG and g10 code

2014-12-15 Thread Brian Minton 
Thanks for the good work! Do you get any income from kernel concepts with
sale of the OpenPGP smart cards? I prefer to buy products from for-profit
companies, and donate only to charities / nonprofit organizations.
On Dec 15, 2014 2:54 AM, "Werner Koch"  wrote:

> Hi,
>
> last week I basically finished the new infrastructure for www.gnupg.org
>  and posted a
> new blog entry which you find below in plain text.  If anyone has an
> interesting thing to say about GnuPG and related topics, drop me a note
> and we can publish it there.  The blog part of the site has no comment
> functions because I find it easier to have discussions by mail.
>
>
> Salam-Shalom,
>
>Werner
>
> 
> 
>
>
>   After the release of GnuPG 1.0 in 1999 it turned out that this was not
>   a write once and forget project.  The unrestricted availability of the
>   software and public concerns about the acquirement of /PGP Inc./ by
>   /NAI Inc./ (coincidentally at the time of the initial GnuPG release in
>   December 1997) raised a lot of interest by those who always cared
>   about privacy issues.
>
>   Fortunately the funding of the Windows port by the German Ministry of
>   Economics helped to finance the maintenance and further developments
>   in 1999 and 2000.  After that I decided to keep on working on GnuPG
>   full time and founded [g10^code GmbH] in 2001 as a legal framework for
>   it.  The company is owned entirely by my brother [Walter] and myself
>   and I like to thank him for his long time support and waive of profit
>   distribution.  If you ever wondered about the name: /g10/ is a
>   reference on the German constitution article on freedom of
>   communication (Grundgesetz [Artikel 10]) and a pun on the [G-10] law
>   which allows the secret services to bypass these constitutional
>   guaranteed freedoms.
>
>   The best known project of g10^code is probably version 2 of GnuPG,
>   which started under the name /NewPG/ as part of the broader /Aegypten/
>   project.  The main goal of Aegypten was to provide support for S/MIME
>   under GNU/Linux and integrate that cleanly with other mail clients,
>   most notably KMail.  This project was due to a public tender of the
>   [BSI] (German federal office for information security) and awarded to
>   a consortium of g10^code, [Intevation], and [KDAB].  Another large
>   project is [Gpg4win] which has its roots in a port of GnuPG-2 to
>   Windows done by g10^code as part of a health research project.
>   Another tender awarded to the same consortium extended this port to
>   the now mostly used GnuPG distribution for Windows.
>
>   Now, how viable is it to run a company for the development of free
>   security software?  Not very good I had to realize: the original plan
>   of selling support contracts did not worked out too well due to the
>   lack of resources for marketing.  Larger development projects raised
>   most of the revenues but they are not easy to acquire.  In the last
>   years we had problems to get new GnuPG related development contracts
>   which turned the company into a one-person show by fall 2012.  I
>   actually planned to shut it down in 2013 and to take a straight coder
>   job somewhere.  However, as a side effect of Edward Snowden‘s brave
>   actions, there was more public demand for privacy tools and thus I
>   concluded that it is worth to keep on working on GnuPG.
>
>   ━
>year  profit  wages  n  balance
>   ─
>2001  -12000  11000  231000
>20023000  4  332000
>2003  -16000  26000  335000
>20043000  45000  452000
>2005   0  44000  456000
>20062000  48000  349000
>2007   5  57000  299000
>2008   11000  75000  394000
>2009  -23000  72000  368000
>2010   28000  74000  278000
>2011  -41000  63000  281000
>2012  -16000  54000  245000
>2013  -1  32000  144000
>2014   12000  32000  147000
>   ━
>
>   The table above is a summary of g10^{code}’s balance sheets (in Euro,
>   2014 are estimations). /profit/ gives the annual net profit or loss,
>   /wages/ are the gross salary costs for the /n/ employed developers,
>   and /balance/ is the balance sheet total.  Despite of our low wages we
>   accumulated an estimated loss of 9000 Euro over the last 3 years.  The
>   crowdfunding campaign last year proved that there are many people who
>   like to see GnuPG alive and maintained.  Despite the huge [costs] of
>   the campaign it allowed me to keep working on GnuPG and I am confident
>   that there will be ways to continue work in 2015.
>
>
>   [g10^code GmbH] https://g10code.com
>
>   [Walter] http://www.u32.de
>
>   [Artikel 10]
>
> http://de.wikipedia.org/wiki/Artikel_10_des_Grundgesetzes_f%C3%BCr_die_Bundesrepublik_D

GnuPG and g10 code

2014-12-15 Thread Werner Koch 
Hi,

last week I basically finished the new infrastructure for www.gnupg.org
 and posted a
new blog entry which you find below in plain text.  If anyone has an
interesting thing to say about GnuPG and related topics, drop me a note
and we can publish it there.  The blog part of the site has no comment
functions because I find it easier to have discussions by mail.


Salam-Shalom,

   Werner





  After the release of GnuPG 1.0 in 1999 it turned out that this was not
  a write once and forget project.  The unrestricted availability of the
  software and public concerns about the acquirement of /PGP Inc./ by
  /NAI Inc./ (coincidentally at the time of the initial GnuPG release in
  December 1997) raised a lot of interest by those who always cared
  about privacy issues.

  Fortunately the funding of the Windows port by the German Ministry of
  Economics helped to finance the maintenance and further developments
  in 1999 and 2000.  After that I decided to keep on working on GnuPG
  full time and founded [g10^code GmbH] in 2001 as a legal framework for
  it.  The company is owned entirely by my brother [Walter] and myself
  and I like to thank him for his long time support and waive of profit
  distribution.  If you ever wondered about the name: /g10/ is a
  reference on the German constitution article on freedom of
  communication (Grundgesetz [Artikel 10]) and a pun on the [G-10] law
  which allows the secret services to bypass these constitutional
  guaranteed freedoms.

  The best known project of g10^code is probably version 2 of GnuPG,
  which started under the name /NewPG/ as part of the broader /Aegypten/
  project.  The main goal of Aegypten was to provide support for S/MIME
  under GNU/Linux and integrate that cleanly with other mail clients,
  most notably KMail.  This project was due to a public tender of the
  [BSI] (German federal office for information security) and awarded to
  a consortium of g10^code, [Intevation], and [KDAB].  Another large
  project is [Gpg4win] which has its roots in a port of GnuPG-2 to
  Windows done by g10^code as part of a health research project.
  Another tender awarded to the same consortium extended this port to
  the now mostly used GnuPG distribution for Windows.

  Now, how viable is it to run a company for the development of free
  security software?  Not very good I had to realize: the original plan
  of selling support contracts did not worked out too well due to the
  lack of resources for marketing.  Larger development projects raised
  most of the revenues but they are not easy to acquire.  In the last
  years we had problems to get new GnuPG related development contracts
  which turned the company into a one-person show by fall 2012.  I
  actually planned to shut it down in 2013 and to take a straight coder
  job somewhere.  However, as a side effect of Edward Snowden‘s brave
  actions, there was more public demand for privacy tools and thus I
  concluded that it is worth to keep on working on GnuPG.

  ━
   year  profit  wages  n  balance 
  ─
   2001  -12000  11000  231000 
   20023000  4  332000 
   2003  -16000  26000  335000 
   20043000  45000  452000 
   2005   0  44000  456000 
   20062000  48000  349000 
   2007   5  57000  299000 
   2008   11000  75000  394000 
   2009  -23000  72000  368000 
   2010   28000  74000  278000 
   2011  -41000  63000  281000 
   2012  -16000  54000  245000 
   2013  -1  32000  144000 
   2014   12000  32000  147000 
  ━

  The table above is a summary of g10^{code}’s balance sheets (in Euro,
  2014 are estimations). /profit/ gives the annual net profit or loss,
  /wages/ are the gross salary costs for the /n/ employed developers,
  and /balance/ is the balance sheet total.  Despite of our low wages we
  accumulated an estimated loss of 9000 Euro over the last 3 years.  The
  crowdfunding campaign last year proved that there are many people who
  like to see GnuPG alive and maintained.  Despite the huge [costs] of
  the campaign it allowed me to keep working on GnuPG and I am confident
  that there will be ways to continue work in 2015.


  [g10^code GmbH] https://g10code.com

  [Walter] http://www.u32.de

  [Artikel 10]
  
http://de.wikipedia.org/wiki/Artikel_10_des_Grundgesetzes_f%C3%BCr_die_Bundesrepublik_Deutschland

  [G-10]
  
http://en.wikipedia.org/wiki/Gesetz_zur_Beschr%C3%A4nkung_des_Brief-,_Post-_und_Fernmeldegeheimnisses

  [BSI] http://www.bsi.de/EN/

  [Intevation] https://intevation.de/index.en.html

  [KDAB] https://kdab.com

  [Gpg4win] http://www.gpg4win.org

  [costs] file:20140512-rewards-sent.org


-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.


___