Re: Printing PGP Businesscard

2013-12-27 Thread Daniel Kahn Gillmor
[rearranging top-posted-ness for chronological sanity]

On 12/27/2013 01:12 PM, Avi wrote:

> On Fri, Dec 27, 2013 at 1:01 PM, Olav Seyfarth  wrote:
>> Apart from the question about whitespace, there are no OpenPGP related
>> fields defined in vCard, neither for keyIDs, key-download-URLs nor 
>> fingerprints
>> (yet).
> 
> So what is the "KEY" field then (see the wikipedia link you brought and
> this 

Re: Printing PGP Businesscard

2013-12-27 Thread Avi
So what is the "KEY" field then (see the wikipedia link you brought and
this ).

Thanks,

Avi


User:Avraham

pub 3072D/F80E29F9 1/30/2009 Avi (Wikimedia-related key) 
   Primary key fingerprint: 167C 063F 7981 A1F6 71EC ABAA 0D62 B019 F80E
29F9


On Fri, Dec 27, 2013 at 1:01 PM, Olav Seyfarth  wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: RIPEMD160
>
> Hi list,
>
> I asked dkg off-list whether a whitespace after the field name-value
> delimiter
> would be OK. He answered:
>
> > monkeysign will accept it with spaces, but the Vcard format commonly used
> > for personal metadata like this tends to expect no spaces:
> >
> > https://en.wikipedia.org/wiki/Vcard
>
> So in a TEXT QR-Code,
>   OPENPGP4FPR: 0123456789abcdef...
> should work with monkeysign. But as a VCARD, the fingeprint line should
> read
>   OPENPGP4FPR:0123456789abcdef...
> because of to the vCard standard.
>
> Apart from the question about whitespace, there are no OpenPGP related
> fields
> defined in vCard, neither for keyIDs, key-download-URLs nor fingerprints
> (yet).
>
> Olav
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2.0.22 (MingW32)
> Comment: Dies ist eine elektronische Signatur - http://www.enigmail.net/
>
> iQGcBAEBAwAGBQJSvcBpAAoJEKGX32tq4e9WrAsL/1C3fC+ghQTJMgSH/KoXYE3I
> WdhCyz8SPgr/R4Y7BaiXpWGbZuiwvhueJyXV+/pCtHT9moP2pwAZTpgdkG2N+GDy
> Y7dSgTxZCm9tRLZZx2Zi88cGgftZgNXGzI62AwPBB8BhpMTaCmSLqENStaE6pqHe
> hTbKHf2+Xc7etJt5JE1fSYqodkI5f9XxKSJ7/lZko8P738Y9MERm07TfupYuGokv
> t0zNHyasoChx/LzqinunQ1YsLFNpAFU2dX6PwhPcIj5d2jYhqAmYtreWCDZzppZx
> 9JyTtWFMnGkQuvT1NzFYvcwgR+j513fvPzW1PzYk7/f4ExF0Wr4+9j7X3DGJWP+3
> BEeM6hszvkxhoPGKe6J/q6oeE1RTi3gAKqpkAyZ6OPjMxSRWriKk0mVjrs53GgaN
> e5cMK/GY+J3AD25jw6/MvpjZ/e82djO2EqLkxttnxDtH8PMyDk58nhAMIbZJ6wEE
> ArTGiK+0rI76b3IK8Lt7dpf++ltkBx4DJnXrsHKQ9Q==
> =MqAW
> -END PGP SIGNATURE-
>
> ___
> Gnupg-users mailing list
> Gnupg-users@gnupg.org
> http://lists.gnupg.org/mailman/listinfo/gnupg-users
>
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Printing PGP Businesscard

2013-12-27 Thread Olav Seyfarth
-BEGIN PGP SIGNED MESSAGE-
Hash: RIPEMD160

Hi list,

I asked dkg off-list whether a whitespace after the field name-value delimiter
would be OK. He answered:

> monkeysign will accept it with spaces, but the Vcard format commonly used
> for personal metadata like this tends to expect no spaces:
> 
> https://en.wikipedia.org/wiki/Vcard

So in a TEXT QR-Code,
  OPENPGP4FPR: 0123456789abcdef...
should work with monkeysign. But as a VCARD, the fingeprint line should read
  OPENPGP4FPR:0123456789abcdef...
because of to the vCard standard.

Apart from the question about whitespace, there are no OpenPGP related fields
defined in vCard, neither for keyIDs, key-download-URLs nor fingerprints (yet).

Olav
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.22 (MingW32)
Comment: Dies ist eine elektronische Signatur - http://www.enigmail.net/
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=MqAW
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Printing PGP Businesscard

2013-12-26 Thread Daniel Kahn Gillmor
On 12/26/2013 03:01 PM, Avi wrote:
> Would having the e-mail address and name in the QR code adversely affect
> compatibility with monkeysign?
> For example, see the attached code which is similar to what I was playing
> with for key-signing purposes, although I was going to print them on
> mailing labels.


As long as you have a separate line for the fingerprint, and that line
is prefixed with "OPENPGP4FPR:", then monkeysign should be work fine
with your QR code.

--dkg



signature.asc
Description: OpenPGP digital signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Printing PGP Businesscard

2013-12-26 Thread Avi
Would having the e-mail address and name in the QR code adversely affect
compatibility with monkeysign?
For example, see the attached code which is similar to what I was playing
with for key-signing purposes, although I was going to print them on
mailing labels.

[image: Inline image 2]

Avi


User:Avraham

pub 3072D/F80E29F9 1/30/2009 Avi (Wikimedia-related key) 
   Primary key fingerprint: 167C 063F 7981 A1F6 71EC ABAA 0D62 B019 F80E
29F9


On Thu, Dec 26, 2013 at 2:24 PM, Daniel Kahn Gillmor
wrote:

> On 12/24/2013 01:02 PM, Johan Wevers wrote:
> > You think someone will type it over? KeyID plus a URL would be more
> > usefull IMO (perhaps a QR code with the URL?)
>
> Please use a QR code that contains the full fingerprint (no spaces)
> prefixed with OPENPGP4FPR: -- this is the mechanism used by the
> monkeysign project and other mechanisms:
>
>   http://web.monkeysphere.info/monkeysign/
>
> Most humans don't really cope well with long strings of hexadecimal or
> any other high-entropy arbitrary data.
>
> Using machine-readable QR codes makes it easy for humans to feed the
> data directly into their trusted machines.
>
> --dkg
>
>
> ___
> Gnupg-users mailing list
> Gnupg-users@gnupg.org
> http://lists.gnupg.org/mailman/listinfo/gnupg-users
>
>
<>___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Printing PGP Businesscard

2013-12-26 Thread Daniel Kahn Gillmor
On 12/24/2013 01:02 PM, Johan Wevers wrote:
> You think someone will type it over? KeyID plus a URL would be more
> usefull IMO (perhaps a QR code with the URL?)

Please use a QR code that contains the full fingerprint (no spaces)
prefixed with OPENPGP4FPR: -- this is the mechanism used by the
monkeysign project and other mechanisms:

  http://web.monkeysphere.info/monkeysign/

Most humans don't really cope well with long strings of hexadecimal or
any other high-entropy arbitrary data.

Using machine-readable QR codes makes it easy for humans to feed the
data directly into their trusted machines.

--dkg



signature.asc
Description: OpenPGP digital signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Printing PGP Businesscard

2013-12-25 Thread arne renkema-padmos
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 12/25/2013 01:07 PM, Mike Cardwell wrote:
> I used one of those online business card design + printing
> websites.

I agree that just printing the fingerprint and a link on a business
card should be enough. Another online printer is moo.com

Cheers,
arne
-BEGIN PGP SIGNATURE-

iF4EAREIAAYFAlK61CMACgkQL2cqKwcXD+c25AD/WWovdZOPcUIa1N0qIEqWVhAY
rWNKmegT3Nh9nnOzhXkA/jJ25gmnqKNplt+Kg0GaR9f2Et+cFbLM7QSM6mzDUlc8
=4oTt
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Printing PGP Businesscard

2013-12-25 Thread Mike Cardwell
I used one of those online business card design + printing websites.
Can't remember which one though as it was quite a while ago. There are
quite a few. Here's a photo of how it turned out:

https://grepular.com/images/business_card.jpg

Includes my email/XMPP address, website, PGP and OTR fingerprints.

Mike

* on the Tue, Dec 24, 2013 at 04:44:23AM -0500, Avi wrote:

> Perhaps printing your fingerprint and e-mail address as a QR code. I've
> done it on a piece of paper, but never a business card.
> 
> Avi
> 
> 
> User:Avraham
> 
> pub 3072D/F80E29F9 1/30/2009 Avi (Wikimedia-related key)  >
>Primary key fingerprint: 167C 063F 7981 A1F6 71EC ABAA 0D62 B019 F80E
> 29F9
> 
> 
> On Tue, Dec 24, 2013 at 4:18 AM, Ralph J.Mayer wrote:
> 
> > -BEGIN PGP SIGNED MESSAGE-
> > Hash: SHA256
> >
> > Hi,
> >
> > is there an easy way to print your PGP-key on a piece of paper in a
> > nice way?
> >
> > Like those business card creators in Word that you print on perforated
> > paper.
> >
> >
> > Best regards
> >
> > Ralph
> > -BEGIN PGP SIGNATURE-
> > Version: GnuPG v1.4.14 (GNU/Linux)
> > Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
> >
> > iQIcBAEBCAAGBQJSuVF3AAoJEPVMudkWb026+RQP/22nMcoWYSTZru61d0tLtOI9
> > Afs3QX144IODX6UgEl1CDK/bpXb1BNHGiFIOnTi7NcyYHcHj+r1D1ed2+Eu7trQ4
> > evxxOQtFDyT1UUu2NDjUcNQZw/b6u73Rz2niR3YoIbN5fmbvbrVXX+3VsdivlRm9
> > n1rL5sGSorq5LPWSntacSaEHisy5nC/CUtROS//2oK1lyShmAy5k34zLuOPlcAUG
> > PxAxPazXXRW1W5d88q2jWJ5hAcfFGaDe3DEyuY1LDv2HjVbwLVbpPiw9kRZydsCX
> > 2FqHG2lKA+LGWlLHvALv4X/mL+4M8bh//EtALgFE+XBtuu86LWEQwpuvI7nU9ljJ
> > uc9iPPd7cwKq51HlQAsGHvuahvFKyqiTOfBtkZGePOtYm2mn2tWbBjpeYIKH64Op
> > l/VL6LxkgaJWJeoQO+y9kX3roG5yMBt7F029u1nCXwH8YcqAT1g4kpYj7s7U7RGQ
> > Gv1jSqGzN3EKDKn8oap1c1obH7HhwELIXgTQxyttLgSij83Qo0HcspvrFiuhG/oM
> > kNpzrVA5aAK+Riph1S8huWshte6CMPb3OqCLTFSQHXKd5vRO1ZHpGa9VTvYaoPXX
> > B9wx+EcqNysF/6FTVNC2dZwKPULK6niA5l/CIf61GW+cMt0IczBmO9GhUxnd+1px
> > hd2uhcCWXXzR/Gm2VJNA
> > =Ig2O
> > -END PGP SIGNATURE-
> >
> > ___
> > Gnupg-users mailing list
> > Gnupg-users@gnupg.org
> > http://lists.gnupg.org/mailman/listinfo/gnupg-users
> >

> ___
> Gnupg-users mailing list
> Gnupg-users@gnupg.org
> http://lists.gnupg.org/mailman/listinfo/gnupg-users

-- 
Mike Cardwell  https://grepular.com/ http://cardwellit.com/
OpenPGP Key35BC AF1D 3AA2 1F84 3DC3  B0CF 70A5 F512 0018 461F
XMPP OTR Key   8924 B06A 7917 AAF3 DBB1  BF1B 295C 3C78 3EF1 46B4


signature.asc
Description: Digital signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Printing PGP Businesscard

2013-12-24 Thread Johan Wevers
On 24-12-2013 10:18, Ralph J.Mayer wrote:

> is there an easy way to print your PGP-key on a piece of paper in a
> nice way?
> 
> Like those business card creators in Word that you print on perforated
> paper.

You think someone will type it over? KeyID plus a URL would be more
usefull IMO (perhaps a QR code with the URL?)

-- 
ir. J.C.A. Wevers
PGP/GPG public keys at http://www.xs4all.nl/~johanw/pgpkeys.html


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Printing PGP Businesscard

2013-12-24 Thread vedaal
On Tuesday, December 24, 2013 at 3:25 AM, "Ralph J.Mayer" 
 wrote:
>
>Hi,
>
>is there an easy way to print your PGP-key on a piece of paper in a
>nice way?
>
>Like those business card creators in Word that you print on 
>perforated paper.

=

Haven't done this in an actual print on business card paper, 
but here is a suggestion:

[1] Export the public key
[2] Import in into an Open Office txt. document
[3] Change the font to 'OCR A Extended' at 2 pt. type 
(it wont let you do 1 pt. type)
[4] Export it as a pdf

I used a 4096 public key, which fits easily on a business card,
and you can add the fingerprint and key ID by changing the version and comment 
lines:

Instead of the Version and Comment lines, you can put:

KeyID: long Key id   
Fingerprint; actual fingerprint of 40 characters with spaces between blocks of 4

As long as you include the colon and a space after the colon, gnupg will import 
it with only a minor comment of:
'unknown armor header'

Here is a pdf of my key done this way:
www.angelfire.com/pr/pgpf/PK1.pdf

n.b 
PDF treats an empty line as 'whitespace' and when the pdf is copied and pasted 
as text, the empty line between the fingerprint comment and the key block will 
be omitted.
Add the empty line (GnuPG will import it anyway without it, if you forget to 
;-)  )

The entire keyblock will fit on the back of an index card.


Now, for the 'real' problem with all this:

On what type of paper, and how should it be printed, so that it will be durable 
and scanable and importable without scanning errors ?  


vedaal







___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Printing PGP Businesscard

2013-12-24 Thread Peter Lebbing
On 24/12/13 12:22, Ralph J. Mayer wrote:
> So, what I'm looking for is something like this: gpg-card -id=deadbeef -pdf 
> -a4 It extracts the details from the key and puts together a PDF size A4. A 
> grid of 3x8 and lines where to cut.

If you're using Debian, you should take a look at the gpg-key2ps script from the
signing-party package. From the man page:

> gpg-key2ps generates a PostScript file with your OpenPGP key fingerprint
> (repeated as often as it fits) useful for keysigning parties. The only
> argument is the same as you would pass to GPG's list-keys command, either a
> key-id or a (partial) name.  The PS data is written to stdout.

>From the Postscript file, you could generate a PDF if necessary (but many
viewers will allow to view and print the Postscript file directly). For
instance, ghostscript includes ps2pdf.

Have fun at 30C3! I already went to OHM2013, I'm skipping the CCC this year.

HTH,

Peter.

-- 
I use the GNU Privacy Guard (GnuPG) in combination with Enigmail.
You can send me encrypted mail if you want some privacy.
My key is available at 

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Printing PGP Businesscard

2013-12-24 Thread Ralph J. Mayer
ok, let me be a bit more clear about what I'm looking for. 

At a signing party like at upcoming 30c3 there's a compiled list of keys. 
But when you meet for a spontaneous signing at your local hackerspace, people 
pull out their keys (aka ID/Fingerprint/...) on little pieces of paper. 
Some are creative with OpenOffice/Word/LaTex, some just take the output of gpg. 
Others have their Infoseek on their real business card. 

So, what I'm looking for is something like this:
gpg-card -id=deadbeef -pdf -a4
It extracts the details from the key and puts together a PDF size A4.
A grid of 3x8 and lines where to cut. 

-- 
Viele Grüße / Kind Regards / Cordiali Saluti / Met vriendelijke groet


Ralph J.Mayer
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Printing PGP Businesscard

2013-12-24 Thread Avi
Perhaps printing your fingerprint and e-mail address as a QR code. I've
done it on a piece of paper, but never a business card.

Avi


User:Avraham

pub 3072D/F80E29F9 1/30/2009 Avi (Wikimedia-related key) 
   Primary key fingerprint: 167C 063F 7981 A1F6 71EC ABAA 0D62 B019 F80E
29F9


On Tue, Dec 24, 2013 at 4:18 AM, Ralph J.Mayer wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> Hi,
>
> is there an easy way to print your PGP-key on a piece of paper in a
> nice way?
>
> Like those business card creators in Word that you print on perforated
> paper.
>
>
> Best regards
>
> Ralph
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.4.14 (GNU/Linux)
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iQIcBAEBCAAGBQJSuVF3AAoJEPVMudkWb026+RQP/22nMcoWYSTZru61d0tLtOI9
> Afs3QX144IODX6UgEl1CDK/bpXb1BNHGiFIOnTi7NcyYHcHj+r1D1ed2+Eu7trQ4
> evxxOQtFDyT1UUu2NDjUcNQZw/b6u73Rz2niR3YoIbN5fmbvbrVXX+3VsdivlRm9
> n1rL5sGSorq5LPWSntacSaEHisy5nC/CUtROS//2oK1lyShmAy5k34zLuOPlcAUG
> PxAxPazXXRW1W5d88q2jWJ5hAcfFGaDe3DEyuY1LDv2HjVbwLVbpPiw9kRZydsCX
> 2FqHG2lKA+LGWlLHvALv4X/mL+4M8bh//EtALgFE+XBtuu86LWEQwpuvI7nU9ljJ
> uc9iPPd7cwKq51HlQAsGHvuahvFKyqiTOfBtkZGePOtYm2mn2tWbBjpeYIKH64Op
> l/VL6LxkgaJWJeoQO+y9kX3roG5yMBt7F029u1nCXwH8YcqAT1g4kpYj7s7U7RGQ
> Gv1jSqGzN3EKDKn8oap1c1obH7HhwELIXgTQxyttLgSij83Qo0HcspvrFiuhG/oM
> kNpzrVA5aAK+Riph1S8huWshte6CMPb3OqCLTFSQHXKd5vRO1ZHpGa9VTvYaoPXX
> B9wx+EcqNysF/6FTVNC2dZwKPULK6niA5l/CIf61GW+cMt0IczBmO9GhUxnd+1px
> hd2uhcCWXXzR/Gm2VJNA
> =Ig2O
> -END PGP SIGNATURE-
>
> ___
> Gnupg-users mailing list
> Gnupg-users@gnupg.org
> http://lists.gnupg.org/mailman/listinfo/gnupg-users
>
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Printing PGP Businesscard

2013-12-24 Thread NdK
Il 24/12/2013 10:18, Ralph J.Mayer ha scritto:

> is there an easy way to print your PGP-key on a piece of paper in a
> nice way?
Maybe using QR code? At least for the fingerprint, or a reference URL.

BYtE,
 Diego.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users