Re: Safe decryption with GnuPG?

2008-02-14 Thread Anders Breindahl
Hello, On 200802131141, Krzysztof Żelechowski wrote: > Dnia 12-02-2008, Wt o godzinie 11:59 +0100, Anders Breindahl pisze: > > Use full-disk encryption, as has been stated before. > Full disk encryption makes the system unnecessarily slow, especially > if applied to swap space. I'm not under th

Re: Safe decryption with GnuPG?

2008-02-14 Thread David Shaw
On Thu, Feb 14, 2008 at 08:44:32AM -0600, Robert J. Hansen wrote: >> Full disk encryption makes the system unnecessarily slow, >> especially if applied to swap space. > > Not necessarily so. A lot of people make a big deal out of a couple of > papers published on how much whole-disk encryption sl

RE: Safe decryption with GnuPG?

2008-02-14 Thread Alan Olsen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 >From: Krzysztof Zelechowski >Dnia 12-02-2008, Wt o godzinie 11:59 +0100, Anders Breindahl pisze: >> Hello, >> >> On 200802010958, Krzysztof Żelechowski wrote: >> > 1. The decrypted information must not make it to any persistent >> > medium >>

Re: Multiple users of GPG

2008-02-14 Thread Dennis Heitmann
You should tell more details, like the OS of your virtual server. Regards, Dennis Kammer, Kenneth A (Ken) schrieb: > I have installed GPG on a virtual server and everything works fine for > me. I now want to allow users to also encrypt their files using the > public and private keys I have esta

Re: Safe decryption with GnuPG?

2008-02-14 Thread Robert J. Hansen
Full disk encryption makes the system unnecessarily slow, especially if applied to swap space. Not necessarily so. A lot of people make a big deal out of a couple of papers published on how much whole-disk encryption slows down OpenBSD, but the flip side to that is the file and network syst

Re: Safe decryption with GnuPG?

2008-02-14 Thread Janusz A. Urbanowicz
On Wed, Feb 13, 2008 at 11:41:53AM +0100, Krzysztof Żelechowski wrote: > > Dnia 12-02-2008, Wt o godzinie 11:59 +0100, Anders Breindahl pisze: > > Hello, > > > > On 200802010958, Krzysztof Żelechowski wrote: > > > 1. The decrypted information must not make it to any persistent medium > > > > Us

RE: Corporate use of gnupg

2008-02-14 Thread Max Allan
You're cracking the wrong nut. We've concluded : You can't enforce everyone to ensure their email is decryptable. So the solution is to make sure they don't get encrypted email. Use GPG at a gateway level and deny any internal mail that can't be decrypted. This is the way PGPU can work. All inte

Multiple users of GPG

2008-02-14 Thread Kammer, Kenneth A (Ken)
I have installed GPG on a virtual server and everything works fine for me. I now want to allow users to also encrypt their files using the public and private keys I have established. But when another user connects to my virtual server, they can not see any keys on the keyring. Has anyone else com

Re: Kmail/gnupg fails to encrypt on F8

2008-02-14 Thread Anonymous Sender
> Is there a way to "force" users to encrypt to a corporate key, in > addition to the receipient's key? Use a wrapper around 'gpg' which adds '-r corporate_key' to the user-supplied options (only when encrpypting, obviously) and then exec()'s the original 'gpg' with the modified options. ___

New to GnuPG and OpenGPG

2008-02-14 Thread shaz . zeb
Hello everyone, I am rookie to GPG, so please bare with me when I ask some 'rookie' questions ... :-) I am trying to import keys into OpenPGP on an AIX box, which were created using GnuPG (version 1.48) on windows. I am getting the following error: - %: IBMpgp -verify my-win-key

Re: Safe decryption with GnuPG?

2008-02-14 Thread Krzysztof Żelechowski
Dnia 12-02-2008, Wt o godzinie 11:59 +0100, Anders Breindahl pisze: > Hello, > > On 200802010958, Krzysztof Żelechowski wrote: > > 1. The decrypted information must not make it to any persistent medium > > Use full-disk encryption, as has been stated before. That way, you can > be confident tha