Re: PGP (or GnuPG) signing hidden on authentication?

[Richard Wakeford]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello Greg,

On Thu, 1 Jan 2004 you wrote in 

MDP>> I have just configured it for  minutes. Let's see how I get on
MDP>> with that.

> Let me know if it works for you. I'll pass on the  minutes though. I
> don't think it is good security to cache a pass phrase for that long on
> a broad band connection. I don't think it good security to cache a pass
> phrase.

Ah, I must have misunderstood what caching a pass phrase means. I live
on my own and no one else has access to my PC and I thought allowing
chaching of a pass phrase just meant access for people using that PC and
nothing to do with being on line. If you're right then maybe I'll change
my settings as I have it set to cache while logged on which is all the
time as I have ADSL.

- --

Best regards,
Richard

| Using The Bat! 2.03 Beta/25 & SpamPal
| Windows 2000 (build 2195), version 5.0 Service Pack 4
| and the best browser: Opera 7.23

PGP public key:
http://pgpkeys.mit.edu:11371/pks/lookup?op=get&search=0xCA93B5BE

-BEGIN PGP SIGNATURE-
Version: PGP SDK 3.0.3
Comment: ""

iQA/AwUBP/VIDhqZtcDKk7W+EQIYvgCgtI2tHDd+OhtVb9k9Er2i728+BIgAoOx6
fDry8Mu8rZ+zXCasyFVidT2z
=4kd3
-END PGP SIGNATURE-



Current version is 2.02.3 CE | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: PGP (or GnuPG) signing hidden on authentication?

[Greg Strong]

Hello Marck,

Thursday, January 1, 2004, 8:59:44 PM, Marck D Pearlstone wrote:

MDP> I have just configured it for  minutes. Let's see how I get on
MDP> with that.

Let me know if it works for you. I'll pass on the  minutes though. I
don't think it is good security to cache a pass phrase for that long on
a broad band connection. I don't think it good security to cache a pass
phrase.

To each their own I guess.

-- 
Best regards,

Greg Strong

Using The Bat! v2.03 Beta/25 on Windows XP 5.1 Build  2600
Service Pack 1



Current version is 2.02.3 CE | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: PGP (or GnuPG) signing hidden on authentication?

[Marck D Pearlstone]

Hi Greg,

@1-Jan-2004, 20:00 -0600 (02-Jan 02:00 UK time) Greg Strong [GS] in
mid:[EMAIL PROTECTED] said to Marck:

GS> In "Privacy Preferences" under Tools | OpenPGP | Open
GS> PGPPreferences I have caching of passphrase selected for 5
GS> minutes. It is NOT working. Is this a bug or a configuration
GS> issue? I have my key rings on a floppy disk and TB pointed to
GS> them on the files tab, or is this some other strange
GS> configuration issue?

I don't know. I have thought it worked here. Sometimes. I have just
configured it for  minutes. Let's see how I get on with that.

-- 
Cheers -- .\\arck D Pearlstone -- List moderator
TB! v2.03 Beta/25 on Windows XP 5.1.2600 Service Pack 1
'

pgp0.pgp
Description: PGP signature

Current version is 2.02.3 CE | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: PGP (or GnuPG) signing hidden on authentication?

[Greg Strong]

Hello Marck,

Thursday, January 1, 2004, 7:49:15 PM, Marck D Pearlstone wrote:

MDP> I have never heard of "Hidden signatures" but PGP/MIME sounds like
MDP> the thing.

Ok. Misunderstanding or miscommunication. I thought you were referring
to PHP/MIME when you said you never heard of it before which really
threw me for a loop. Anyhow!

In "Privacy Preferences" under Tools | OpenPGP | Open PGPPreferences I
have caching of passphrase selected for 5 minutes. It is NOT working. Is
this a bug or a configuration issue? I have my key rings on a floppy
disk and TB pointed to them on the files tab, or is this some other
strange configuration issue?

Thanks!

-- 
Best regards,

Greg Strong

Using The Bat! v2.03 Beta/25 on Windows XP 5.1 Build  2600
Service Pack 1

pgp0.pgp
Description: PGP signature

Current version is 2.02.3 CE | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: PGP (or GnuPG) signing hidden on authentication?

[Marck D Pearlstone]

Hi Greg,

@1-Jan-2004, 18:48 -0600 (02-Jan 00:48 UK time) Greg Strong [GS] in
mid:[EMAIL PROTECTED] said to Marck:

GS>>> The hidden signatures is referred to as PGP/MIME? Correct?

MDP>> No idea. Never heard it referred to as that before.

GS> So what is the hidden signature of PGP (or GPG) called?

At the risk of repeating myself, I have never heard of "Hidden
signatures" but PGP/MIME sounds like the thing. Although, as a
technical purist, "hidden" is, perhaps, a misnomer. TB hides them I
suppose. But send a PGP/MIME signed message to a non PGP/MIME aware
mail client and they'll be complaining about the 'odd' attachment of
with this header "Content-Type: application/pgp-signature". The
attachment is clearly visible and not hidden at all.

-- 
Cheers -- .\\arck D Pearlstone -- List moderator
TB! v2.03 Beta/25 on Windows XP 5.1.2600 Service Pack 1
'

pgp0.pgp
Description: PGP signature

Current version is 2.02.3 CE | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: PGP (or GnuPG) signing hidden on authentication?

[Greg Strong]

Hello Marck,

Thursday, January 1, 2004, 6:05:11 PM, Marck D Pearlstone wrote:

MDP> I use GnuPG and PGP/MIME signing right here.

Glad to here it.

GS>> I see the Tools | OpenPGP menu. Under Tools | OpenPGP | Choose
GS>> OpenPGP version I have GNU Privacy Guard (GPG) chosen.

MDP> Good start. Then, in the message editor menu you have:

MDP> Privacy |
MDP> Sign when complete
MDP> PGP/MIME
MDP> Off / On / Auto

MDP> "On" will sign with PGP/MIME.

MDP> Or in templates you can specify:

MDP> %SIGNCOMPLETE%PGPMIME%-

GS>> So unless I missed something I would imagine I need to have the
GS>> commercial product to get the hidden signatures? Correct?

MDP> Wrong :-).

Again glad to here it! Now I just have to get kinks worked out on
templates for how I want to use signing.

GS>> The hidden signatures is referred to as PGP/MIME? Correct?

MDP> No idea. Never heard it referred to as that before.

So what is the hidden signature of PGP (or GPG) called?

-- 
Best regards,

Greg Strong

Using The Bat! v2.03 Beta/25 on Windows XP 5.1 Build  2600
Service Pack 1

pgp0.pgp
Description: PGP signature

Current version is 2.02.3 CE | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: PGP (or GnuPG) signing hidden on authentication?

[Marck D Pearlstone]

Hi Greg,

@1-Jan-2004, 17:32 -0600 (01-Jan 23:32 UK time) Greg Strong [GS] in
mid:[EMAIL PROTECTED] said to TBUDL:

GS> In order to get the PGP signatures hidden do I have to use the
GS> commercial product, or is it possible to configure with GnuPG?

I use GnuPG and PGP/MIME signing right here.

... 

GS> I see the Tools | OpenPGP menu. Under Tools | OpenPGP | Choose
GS> OpenPGP version I have GNU Privacy Guard (GPG) chosen.

Good start. Then, in the message editor menu you have:

Privacy |
Sign when complete
PGP/MIME
Off / On / Auto

"On" will sign with PGP/MIME.

Or in templates you can specify:

%SIGNCOMPLETE%PGPMIME%-

GS> So unless I missed something I would imagine I need to have the
GS> commercial product to get the hidden signatures? Correct?

Wrong :-).

GS> The hidden signatures is referred to as PGP/MIME? Correct?

No idea. Never heard it referred to as that before.

-- 
Cheers -- .\\arck D Pearlstone -- List moderator
TB! v2.03 Beta/25 on Windows XP 5.1.2600 Service Pack 1
'

pgp0.pgp
Description: PGP signature

Current version is 2.02.3 CE | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html