Re: MAC Installer for GNUPG?

2008-08-08 Thread Benjamin Donnachie
Robert J. Hansen wrote: http://macgpg.sourceforge.net. The version there is a little out of date, but it's still the easiest to install package. You can get the latest MacOSX builds from my website: http://www.py-soft.co.uk/~benjamin/download/mac-gpg/gpg1.4.9-1.zip http://www.py-soft.co.uk/~

Problem with default key

2008-08-08 Thread andrea giovannoni
Hi, I have a problem with my default key. gpg --default-key 0x12345578 gpg: Go ahead and type your message ... Can you help me? Thanks Andrea ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Problem with default key

2008-08-08 Thread Alexander W. Janssen
andrea giovannoni wrote: > Hi, Hi, > I have a problem with my default key. > > gpg --default-key 0x12345578 gpg: Go ahead and type your message ... > > Can you help me? What's your exact question? That's the default behaviour if you omit all other parameters. It automatically starts reading fr

Re: Some questions

2008-08-08 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 zulag escribió: > 1. The GnuPG documentation states that "--export-secret-key" is "a > security risk". Since no passphrase is asked, I imagine the exported > key is not clear text. So why is it a security risk ? Because it would > make it impossible

Re: Multiple clients

2008-08-08 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Harakiri escribió: > Anyone else is really frightend by this question and prays that your bank is > not part of those that this guy is consulting? Not me, and I don't see any reason to be afraid of using a bank that wants to send encrypted messag

Re: Some questions

2008-08-08 Thread David SMITH
On Fri, Aug 08, 2008 at 06:03:25AM -0400, Faramir wrote: > zulag escribió: > > 1. The GnuPG documentation states that "--export-secret-key" is "a > > security risk". Since no passphrase is asked, I imagine the exported > > key is not clear text. So why is it a security risk ? Because it would > > m

Re: Problem with default key

2008-08-08 Thread Sven Radde
Hi! andrea giovannoni schrieb: I have a problem with my default key. gpg --default-key 0x12345578 gpg: Go ahead and type your message ... Maybe, there was a misunderstanding, about what this call does..? If you want to set your default-key permanently, you would have to do this by editing y

Re: Some questions

2008-08-08 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David SMITH escribió: > Maybe it's considered a security risk because it doesn't necessarily > have the usual UNIX (or other OS) permissions set to make it accessible > only by its owner? Or maybe it's just there to discourage people from > transpo

Re: Some questions

2008-08-08 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sven Radde escribió: > Hi! > > Faramir schrieb: >> I suppose it is clear text, > No, it is still encrypted with your passphrase. >> The idea about export a secret key is to import >> it in other place, so it must be cleartext... > Why? You can ea

Re: Problem with default key

2008-08-08 Thread andrea giovannoni
Hi Sven, I don't want set my default-key permanently, I would like change the default-key sometimes, but I cannot do this because the gpg executable ( gpg --default-key 0x12345578 ) don't work correctly. Thank's 2008/8/8 Sven Radde <[EMAIL PROTECTED]> > Hi! > > andrea giovannoni schrieb: > >> I h

Re: Some questions

2008-08-08 Thread zulag
>> I assume that the warning is there, because an exported key is somewhat >> likely to end up in some public-readable place and this is generally a >> bad thing - even if it is protected by a passphrase. You should at least >> take the risk willingly. OK, but what exactly are the risks, what to ex

Re: Some questions

2008-08-08 Thread zulag
Hi, (first, excuse me for the message not appearing as a reply, I had not subscribed to the mailing-list when I sent the first message) > I ran the command, and got a huge ascii block... so I modified it to: > gpg --export-secret-key --armor > test.asc and got a enarmored block of > ascii charac

Re: Some questions

2008-08-08 Thread Werner Koch
On Fri, 8 Aug 2008 12:59, [EMAIL PROTECTED] said: > only by its owner? Or maybe it's just there to discourage people from > transporting secret keys around? Right. Moving the secret key in a public key system around is in general not required and somewhat contradicts the whole point of public

Re: Some questions

2008-08-08 Thread David SMITH
On Fri, Aug 08, 2008 at 03:55:13PM +0200, zulag wrote: > OK, but what exactly are the risks, what to expect to protect from ? > Is it because of the possible password "cracking" and the password > becoming unmodifiable (because people have a copy of the key encrypted > with the password "P" you had

Re: Some questions

2008-08-08 Thread Alexander W. Janssen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Werner Koch wrote: > Further, > entering the passphrase is subject to side channel atatcks like should > surfing or recording the sound of the keyboard. Don't tell me there are actually real attacks by recording the sound of the keyboard...?! What doe

Re: recursive gpg

2008-08-08 Thread Patrick Brunschwig
David SMITH wrote: > On Thu, Aug 07, 2008 at 09:54:13AM -0600, Eliot, Christopher wrote: >> gpg `find . -type f` >> will get you pretty close. > > Close, but if you've got lots of files, you'll hit the maximum command > line length limit. You have these two options: a) find . -type f -excec gpg

Re: Some questions

2008-08-08 Thread David SMITH
On Fri, Aug 08, 2008 at 05:12:49PM +0200, Alexander W. Janssen wrote: > Don't tell me there are actually real attacks by recording the sound of > the keyboard...?! What does that mean, every key clicks differently? Sounds like an interesting student project... :-) Some keys certainly sound differ

Re: Some questions

2008-08-08 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Alexander W. Janssen escribió: > Werner Koch wrote: >> Further, >> entering the passphrase is subject to side channel atatcks like should >> surfing or recording the sound of the keyboard. > > Don't tell me there are actually real attacks by recordi

Re: Some questions

2008-08-08 Thread Alexander W. Janssen
David SMITH wrote: > On Fri, Aug 08, 2008 at 05:12:49PM +0200, Alexander W. Janssen wrote: >> Don't tell me there are actually real attacks by recording the sound of >> the keyboard...?! What does that mean, every key clicks differently? > > Sounds like an interesting student project... :-) That'

Re: Problem with default key

2008-08-08 Thread John Clizbe
andrea giovannoni wrote: > Hi Sven, > I don't want set my default-key permanently, I would like change the > default-key sometimes, but I cannot do this because the gpg executable > ( gpg --default-key 0x12345578 ) don't work correctly. > Thanks Let me see if I understand your configuration. You h

Re: Problem with default key

2008-08-08 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 >> Hi Sven, >> I don't want set my default-key permanently, I would like change the >> default-key sometimes, but I cannot do this because the gpg executable >> ( gpg --default-key 0x12345578 ) don't work correctly. >> Thanks What OS do you use?

Re: Problem with default key

2008-08-08 Thread Andrew Berg
andrea giovannoni wrote: Hi, I have a problem with my default key. gpg --default-key 0x12345578 gpg: Go ahead and type your message ... Can you help me? Because you have not specified a file, GPG tries to read from stdin. Because there is nothing there, you see that message. The --default