Re: Corporate use of gnupg

2008-02-26 Thread Alexander W. Janssen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andrew Berg wrote: > Alexander W. Janssen wrote: >> Or chown() the gnupg.conf to some other user. Not sure if gpg will read >> the file then though. > If the user has read access (and gpg is being run with that user's > privileges of course), why would

Re: w32 client installer - silent install?

2008-02-26 Thread Werner Koch
On Tue, 26 Feb 2008 18:02, [EMAIL PROTECTED] said: > Should I be worried about not using the latest version of gpg? No. Unless you are bitten by one of the bugs fixed in 1.4.8. There are no security issues. Salam-Shalom, Werner -- Die Gedanken sind frei. Auschnahme regelt ein Bundeschg

Re: Corporate use of gnupg

2008-02-26 Thread Andrew Berg
Robert J. Hansen wrote: Andrew Berg wrote: Well, /I/ could've told you that. Don't tell me you never figured that out on your own. Unless your day job involves being intimately involved in IP transactions (not just writing code), you could have _speculated_ on that. Although I would not

Re: Corporate use of gnupg

2008-02-26 Thread Robert J. Hansen
Andrew Berg wrote: > Well, /I/ could've told you that. Don't tell me you never figured that > out on your own. Unless your day job involves being intimately involved in IP transactions (not just writing code), you could have _speculated_ on that. There's a big difference between what you believe

Re: w32 client installer - silent install?

2008-02-26 Thread Craig Hurley
On 26/02/2008 08:10, Werner Koch wrote: Sorry, no. However the installer we use with gpg4win now features a few options. See the excerpt below for details. IIRC, this is available in the current gpg4win (1.1.3); checkout the README file. Thanks for that. It looks like gpg4win, version 1.1.3

Re: Corporate use of gnupg

2008-02-26 Thread Alexander W. Janssen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andrew Berg wrote: > Why can't they take away write privileges of gpg.conf (and the gpg > executables for that matter) from normal users? AFAIK, that would be > pretty simple (at least on a *nix system). You'd need to take away write-rights from the d

Re: Corporate use of gnupg

2008-02-26 Thread Andrew Berg
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Robert J. Hansen wrote: | The last time I talked to a patent lawyer about software (I had a nifty thing I wanted to implement and needed to make sure I wasn't walking into a patent lawsuit), I paid my $200/hr and got this bit of professional a

Re: How know who is a file encrypted for ?

2008-02-26 Thread vedaal
>Date: Tue, 26 Feb 2008 08:48:57 +0100 >From: "Dirk Traulsen" <[EMAIL PROTECTED]> >Subject: Re: How know who is a file encrypted for ? >1. If there are several recipients, test the given passphrase >automatically for all secret keys in your keyring, so that you >don't >have to give for example

Re: How know who is a file encrypted for ?

2008-02-26 Thread Dirk Traulsen
Am 26 Feb 2008 um 9:40 hat Sven Radde geschrieben: > Hi! > > Dirk Traulsen schrieb: > > b. some keys do not belong to me in a common keyring. > > I am really not sure whether that is a good idea at all. Granting other > people (write!) access to my secret keyring would be a troubling > thought,

Re: How know who is a file encrypted for ?

2008-02-26 Thread Sven Radde
Hi! Dirk Traulsen schrieb: b. some keys do not belong to me in a common keyring. I am really not sure whether that is a good idea at all. Granting other people (write!) access to my secret keyring would be a troubling thought, even though I am not currently aware of any practical exploits.

Re: w32 client installer - silent install?

2008-02-26 Thread Werner Koch
On Mon, 25 Feb 2008 23:46, [EMAIL PROTECTED] said: > ... I'm wondering are there any command line options for the installer? Sorry, no. However the installer we use with gpg4win now features a few options. See the excerpt below for details. IIRC, this is available in the current gpg4win (1.1.3