Re: Is the OpenPGP model still useful?

2011-07-06 Thread Robert J. Hansen
On 7/6/2011 7:52 PM, Milo wrote: > Are you sure about that? then find a person who will tell you that (you like > thought experiments, don't you?) during obvious live threat situation > feels secure. You can imaging what will be a common anwser, right? You must not know many United States Marines.

Re: Is the OpenPGP model still useful?

2011-07-06 Thread Milo
On Wed, Jul 06, 2011 at 01:49:52PM -0700, Robert J. Hansen wrote: > (...) > > -- it's just not something I can answer. Coherency and security are > matters of personal taste and policy. Are you sure about that? then find a person who will tell you that (you like thought experiments, don't you?)

Re: Is the OpenPGP model still useful?

2011-07-06 Thread Doug Barton
On 07/06/2011 13:39, Marcio B. Jr. wrote: Dear Doug, I don't know what "IDOYTM" is supposed to mean, It depends on your threat model. You haven't defined what you're guarding against, so it's impossible to judge how potential solutions may or may not help. "and am" afraid I'm not enough-of

Re: Is the OpenPGP model still useful?

2011-07-06 Thread Robert J. Hansen
> So far, OTR adoption seems unjustifiable, really. I mean, it uses the > Diffie-Hellman key exchange method with block ciphers. Why is this a problem? > As of what I got from your (Robert) explanation plus some preliminary > conclusions of my studies, making use of asymmetric algos with OpenPGP

Re: Is the OpenPGP model still useful?

2011-07-06 Thread Marcio B. Jr.
Dear Doug, I don't know what "IDOYTM" is supposed to mean, "and am" afraid I'm not enough-of-a-teenager to get really concerned with that. If the existence of big fans justifies quality, Amy Winehouse would be Teresa of Calcutta. My question, which, I must emphasize for you, is a question — not a

Re: Is the OpenPGP model still useful?

2011-07-06 Thread Doug Barton
On 07/06/2011 10:28, Marcio B. Jr. wrote: Hello, resuming this thread because I'm studying encryption options for KDE's Kopete IM client. So far, OTR adoption seems unjustifiable, really. I mean, it uses the Diffie-Hellman key exchange method with block ciphers. As of what I got from your (Robe

OT: IM encryption options [was: Re: Is the OpenPGP model still useful?]

2011-07-06 Thread Daniel Kahn Gillmor
On 07/06/2011 01:28 PM, Marcio B. Jr. wrote: > resuming this thread because I'm studying encryption options for KDE's > Kopete IM client. Hmm, i'm not sure this is the best place for this discussion, so i've marked the subject line OT for "off-topic" -- if you think there might be a better discuss

Re: Is the OpenPGP model still useful?

2011-07-06 Thread Marcio B. Jr.
Hello, resuming this thread because I'm studying encryption options for KDE's Kopete IM client. So far, OTR adoption seems unjustifiable, really. I mean, it uses the Diffie-Hellman key exchange method with block ciphers. As of what I got from your (Robert) explanation plus some preliminary conclu

Re: Error messages when generating new keys

2011-07-06 Thread Olivier N.
Hello Werner, 2. I tried "$ gpg2 --gen-key", chose default options and entered my infos (email address, name,…) and I got: gpg: problem with the agent: Bad CA certificate gpg: problem with the agent: Invalid card gpg: Key generation canceled. You are either runnin