Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Patrick Brunschwig
On 04.02.15 23:28, Doug Barton wrote: > On 2/4/15 1:21 PM, Ludwig Hügelschäfer wrote: >> On 04.02.15 21:21, Doug Barton wrote: >>> On 2/4/15 9:13 AM, Patrick Brunschwig wrote: We recently discussed in (a part of) the Enigmail team that we should think about giving up support for GnuPG 1.4

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Patrick Brunschwig
On 04.02.15 20:16, Bob Henson wrote: > On 04/02/2015 5:13 pm, Patrick Brunschwig wrote: >> We recently discussed in (a part of) the Enigmail team that we should >> think about giving up support for GnuPG 1.4.x. >> >> > Hmm - just tried the GPG4Win installer - it won't allow the installation > of Gn

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Daniel Kahn Gillmor
On Wed 2015-02-04 17:28:48 -0500, Doug Barton wrote: > Nope, I understood the timeline perfectly. :) There are still a lot of > Linux distros that use 1.x by default, and that is not going to change > any time in the next several years. fwiw, in debian, the GnuPG maintainer team has been discus

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Doug Barton
On 2/4/15 1:21 PM, Ludwig Hügelschäfer wrote: On 04.02.15 21:21, Doug Barton wrote: On 2/4/15 9:13 AM, Patrick Brunschwig wrote: We recently discussed in (a part of) the Enigmail team that we should think about giving up support for GnuPG 1.4.x. Reasons: * GnuPG 2.0 was released in November 20

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Ludwig Hügelschäfer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 04.02.15 21:21, Doug Barton wrote: > On 2/4/15 9:13 AM, Patrick Brunschwig wrote: >> We recently discussed in (a part of) the Enigmail team that we >> should think about giving up support for GnuPG 1.4.x. >> >> Reasons: * GnuPG 2.0 was released i

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Daniel Kahn Gillmor
On Wed 2015-02-04 12:13:18 -0500, Patrick Brunschwig wrote: > We recently discussed in (a part of) the Enigmail team that we should > think about giving up support for GnuPG 1.4.x. > > Reasons: > * GnuPG 2.0 was released in November 2006; it has proven for a long > time to be stable. > * While Gnu

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Robert J. Hansen
> Not all Debian/Ubuntu users install Enigmail as a package, now that it > no longer contains machine-dependent code. No, but it *is* what we recommend. If you get your Thunderbird from your distribution (or ports tree, for the BSDs), then please also get Enigmail from the same place. Downloading

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 El 04-02-2015 a las 16:16, Ludwig Hügelschäfer escibió: ... > You'll need gpg4win, as it brings the required (and fully windows > integrated) pinentry. > > gpg4win 2.23 works well on Win7 64 bit. I think it's safe to don't install Clawsmail and

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Doug Barton
On 2/4/15 9:13 AM, Patrick Brunschwig wrote: We recently discussed in (a part of) the Enigmail team that we should think about giving up support for GnuPG 1.4.x. Reasons: * GnuPG 2.0 was released in November 2006; it has proven for a long time to be stable. * While GnuPG 1.4 still makes sense on

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Ian Mann
Yes, I would not have been able to do it without the help of you folk. Ian On 05/02/15 07:18, Doug Barton wrote: > On 2/4/15 10:53 AM, Robert J. Hansen wrote: >>> Well, that does surprise me. I can understand why you'd prefer an >>> Enigmail wizard to guide you through the upgrade. >> >> It's no

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Doug Barton
On 2/4/15 10:53 AM, Robert J. Hansen wrote: Well, that does surprise me. I can understand why you'd prefer an Enigmail wizard to guide you through the upgrade. It's not necessary. Debian (and by extension Ubuntu) package Enigmail; thus, if you install a new version of Enigmail through the Debi

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Doug Barton
On 2/4/15 11:16 AM, Bob Henson wrote: On 04/02/2015 5:13 pm, Patrick Brunschwig wrote: We recently discussed in (a part of) the Enigmail team that we should think about giving up support for GnuPG 1.4.x. Hmm - just tried the GPG4Win installer - it won't allow the installation of GnuPG without

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 El 04-02-2015 a las 16:08, Bob Henson escibió: > On 04/02/2015 5:13 pm, Patrick Brunschwig wrote: >> We recently discussed in (a part of) the Enigmail team that we >> should think about giving up support for GnuPG 1.4.x. >> > > There may be a few p

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Ian Mann
Ludwig, That worked after putting in the Path, Thank you Ian On 05/02/15 07:01, Ludwig Hügelschäfer wrote: > On 04.02.15 20:36, Ian Mann wrote: > > OK looks like I have GnuPG 2.0.22 on the system now. > > > Do I have to tell enigmail to use that now? If so how do I manage > > that? > > It may

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Samir Nassar
On Wednesday, February 04, 2015 05:09:24 PM Faramir wrote: > If I'm not wrong, gpg 1.4.16 had a security flaw so it's strange > ubuntu has not upgraded to 1.4.17 or 1.4.18. But that flaw may have > been too specific to be considered exploitable... it was something > about denial of service. Depe

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 El 04-02-2015 a las 15:07, Alexander Buchner escibió: > On 04.02.2015 19:00, Bob Williams wrote: >> I'd be surprised if Ubuntu gives you GnuPG 1.4. What is the >> output of >> >> gpg --version? > > I have a Ubuntu 14.10 system: > > @@@:~$ gpg --ve

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 El 04-02-2015 a las 14:13, Patrick Brunschwig escibió: > We recently discussed in (a part of) the Enigmail team that we > should think about giving up support for GnuPG 1.4.x. ... > > Please let me know if this would cause major issues that I'm not

[Enigmail] How to: Use PGP for Windows PC

2015-02-04 Thread Samir Nassar
In response to some issues with using gpg4win I'd like to share part of Electronic Frontier Foundation's Surveillance Self-Defense guide: How to: Use PGP for Windows PC https://ssd.eff.org/en/module/how-use-pgp-windows-pc It might be helpful to others on this list in setting up to use Enigmail w

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Ludwig Hügelschäfer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 04.02.15 20:36, Ian Mann wrote: > OK looks like I have GnuPG 2.0.22 on the system now. > > Do I have to tell enigmail to use that now? If so how do I manage > that? It may be sufficient to restart Thunderbird, but I'm not sure. If not: You firs

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Bob Henson
On 04/02/2015 7:27 pm, Samir Nassar wrote: > On Wednesday, February 04, 2015 07:16:26 PM Bob Henson wrote: > > Hmm - just tried the GPG4Win installer - it won't allow the installation > > of GnuPG without Kleopatra too and Kleopatra is very, very flaky under > > Windows 64 bit. I think before you d

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Bob Henson
On 04/02/2015 7:27 pm, Samir Nassar wrote: > > On Wednesday, February 04, 2015 07:16:26 PM Bob Henson wrote: > > Hmm - just tried the GPG4Win installer - it won't allow the installation > of GnuPG without Kleopatra too and Kleopatra is very, very flaky under > Windows 64 bit. I think before you d

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Ian Mann
OK looks like I have GnuPG 2.0.22 on the system now. Do I have to tell enigmail to use that now? If so how do I manage that? Ian gpg2 --version gpg (GnuPG) 2.0.22 libgcrypt 1.5.3 Copyright (C) 2013 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Samir Nassar
On Wednesday, February 04, 2015 07:16:26 PM Bob Henson wrote: > Hmm - just tried the GPG4Win installer - it won't allow the installation > of GnuPG without Kleopatra too and Kleopatra is very, very flaky under > Windows 64 bit. I think before you drop support of 1.4 you should wait > until there is

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Andreas Hirsch
Bob Henson schrieb am 2015-02-04 um 20:16: > On 04/02/2015 5:13 pm, Patrick Brunschwig wrote: >> We recently discussed in (a part of) the Enigmail team that we should >> think about giving up support for GnuPG 1.4.x. >> >> > Hmm - just tried the GPG4Win installer - it won't allow the installation >

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Ludwig Hügelschäfer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 04.02.15 20:08, Bob Henson wrote: > On 04/02/2015 5:13 pm, Patrick Brunschwig wrote: >> We recently discussed in (a part of) the Enigmail team that we >> should think about giving up support for GnuPG 1.4.x. >> > > There may be a few problems wi

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Bob Henson
On 04/02/2015 5:13 pm, Patrick Brunschwig wrote: > We recently discussed in (a part of) the Enigmail team that we should > think about giving up support for GnuPG 1.4.x. > > Hmm - just tried the GPG4Win installer - it won't allow the installation of GnuPG without Kleopatra too and Kleopatra is ve

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Bob Henson
On 04/02/2015 5:13 pm, Patrick Brunschwig wrote: > We recently discussed in (a part of) the Enigmail team that we should > think about giving up support for GnuPG 1.4.x. > There may be a few problems with Windows users only being able to get GnuPG 2.x as part of GPG4Win - that might put many peop

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Robert J. Hansen
> Do I have to uninstall 1.4? Nope. They coexist beautifully. smime.p7s Description: S/MIME Cryptographic Signature ___ enigmail-users mailing list enigmail-users@enigmail.net To unsubscribe or make changes to your subscription click here: https://ad

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Ludwig Hügelschäfer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 04.02.15 20:02, Andreas Hirsch wrote: > If I remember correctly, there comes a new instance of handling > the passthrase instead of Enigmail and so my passthrase was not > recognized. Did your passphrase contain special characters like accent or

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Ludwig Hügelschäfer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 04.02.15 20:00, Ian Mann wrote: > Do I have to uninstall 1.4? No. 2.0.x can peacefully coexist with a 1.4.x installation. Ludwig -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCgAGBQJU0mz9AAoJEDrb+m0Aoeb+UhkP/R4QirRetOY8IpCtSkkB/Asq j

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Andreas Hirsch
Ludwig Hügelschäfer schrieb am 2015-02-04 um 19:58: > On 04.02.15 19:53, Andreas Hirsch wrote: > >> In the past, I tried twice to switch to GnuPG 2.x (in case of >> setting up a new pc) and wasn't able to use my existing private key >> anymore. > > This surprises me. GnuPG 2.x understands and kee

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Bob Williams
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 04/02/15 18:53, Robert J. Hansen wrote: >> Well, that does surprise me. I can understand why you'd prefer >> an Enigmail wizard to guide you through the upgrade. > > It's not necessary. Debian (and by extension Ubuntu) package > Enigmail; thus, if

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Ludwig Hügelschäfer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 04.02.15 19:58, Ludwig Hügelschäfer wrote: > This surprises me. GnuPG 2.x understands and keeps the same formats > of files and keys/keyrings. Correction: 2.0.x 2.1.x is another story... Ludwig -BEGIN PGP SIGNATURE- Version: GnuPG v2

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Ian Mann
Do I have to uninstall 1.4? On 05/02/15 05:53, Robert J. Hansen wrote: >> Well, that does surprise me. I can understand why you'd prefer an >> Enigmail wizard to guide you through the upgrade. > It's not necessary. Debian (and by extension Ubuntu) package Enigmail; > thus, if you install a new ve

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Ludwig Hügelschäfer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 04.02.15 19:53, Andreas Hirsch wrote: > In the past, I tried twice to switch to GnuPG 2.x (in case of > setting up a new pc) and wasn't able to use my existing private key > anymore. This surprises me. GnuPG 2.x understands and keeps the same fo

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Ian Mann
Hmm, I might give it ago. Thanks Robert. Ian On 05/02/15 05:53, Robert J. Hansen wrote: >> Well, that does surprise me. I can understand why you'd prefer an >> Enigmail wizard to guide you through the upgrade. > It's not necessary. Debian (and by extension Ubuntu) package Enigmail; > thus, if yo

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Andreas Hirsch
Hi Patrick, Patrick Brunschwig schrieb am 2015-02-04 um 18:13: > Please let me know if this would cause major issues that I'm not aware of. In the past, I tried twice to switch to GnuPG 2.x (in case of setting up a new pc) and wasn't able to use my existing private key anymore. Andreas -- And

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Robert J. Hansen
> Well, that does surprise me. I can understand why you'd prefer an > Enigmail wizard to guide you through the upgrade. It's not necessary. Debian (and by extension Ubuntu) package Enigmail; thus, if you install a new version of Enigmail through the Debian (or Ubuntu) package installation mechani

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Ian Mann
Thanks for that information Lars, Ian On 05/02/15 05:46, Lars Noodén wrote: > On 04.02.2015 20:07, Alexander Buchner wrote: >> On 04.02.2015 19:00, Bob Williams wrote: >>> I'd be surprised if Ubuntu gives you GnuPG 1.4. What is the output of >>> >>> gpg --version? >> I have a Ubuntu 14.10 system:

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Lars Noodén
On 04.02.2015 20:07, Alexander Buchner wrote: > On 04.02.2015 19:00, Bob Williams wrote: >> I'd be surprised if Ubuntu gives you GnuPG 1.4. What is the output of >> >> gpg --version? > > I have a Ubuntu 14.10 system: > > @@@:~$ gpg --version > gpg (GnuPG) 1.4.16 >... Ubuntu 14.10 will expire soo

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Ian Mann
Yes, I don't know much about tinkering with the system. I just want to use the applications. For me to upgrade GnuPG to 2.x by myself would be stressful, I would be sure to stuff it up Bob. On 05/02/15 05:26, Bob Williams wrote: > On 04/02/15 18:18, Ian Mann wrote: > > On 05/02/15 05:00, Bob Wi

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Bob Williams
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 04/02/15 18:18, Ian Mann wrote: > On 05/02/15 05:00, Bob Williams wrote: >> On 04/02/15 17:43, Ian Mann wrote: >>> I hope it is directly from Enigmail as I don't feel confident >>> to install GnuPG 2.x it separately on Ubuntu. >> >>> Ian >> >> I'd

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Ian Mann
gpg --version gpg (GnuPG) 1.4.16 Copyright (C) 2013 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Home: ~/.gnupg S

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Ian Mann
bin_uRbgS43DJ.bin Description: PGP/MIME version identification encrypted.asc Description: OpenPGP encrypted message ___ enigmail-users mailing list enigmail-users@enigmail.net To unsubscribe or make changes to your subscription click here: https://adm

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Alexander Buchner
On 04.02.2015 19:00, Bob Williams wrote: > I'd be surprised if Ubuntu gives you GnuPG 1.4. What is the output of > > gpg --version? I have a Ubuntu 14.10 system: @@@:~$ gpg --version gpg (GnuPG) 1.4.16 Copyright (C) 2013 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Bob Williams
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 04/02/15 17:43, Ian Mann wrote: > I hope it is directly from Enigmail as I don't feel confident to > install GnuPG 2.x it separately on Ubuntu. > > Ian I'd be surprised if Ubuntu gives you GnuPG 1.4. What is the output of gpg --version? - -- Bo

Re: [Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Ian Mann
I hope it is directly from Enigmail as I don't feel confident to install GnuPG 2.x it separately on Ubuntu. Ian On 05/02/15 04:13, Patrick Brunschwig wrote: > We recently discussed in (a part of) the Enigmail team that we should > think about giving up support for GnuPG 1.4.x. > > Reasons: > * G

[Enigmail] Medium Term Plan for Dropping GnuPG 1.4.x Support

2015-02-04 Thread Patrick Brunschwig
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 We recently discussed in (a part of) the Enigmail team that we should think about giving up support for GnuPG 1.4.x. Reasons: * GnuPG 2.0 was released in November 2006; it has proven for a long time to be stable. * While GnuPG 1.4 still makes sense