Re: gpg-agent automatically use passphrase for signing subkey?

2011-07-23 Thread Ingo Klöcker
On Friday 22 July 2011, Charly Avital wrote: Chris Poole CAF=p9qbcmfqkvv_49a5nysoswzkh2ka_kjo5wjy2onm6yhs...@mail.gmail.com wrote on 7/22/11 10:38:39 AM: On Thu, Jul 21, 2011 at 5:30 PM, Charly Avital shavi...@mac.com wrote: When your passphrase has been cached for each of those

Re: gpg-agent automatically use passphrase for signing subkey?

2011-07-23 Thread Richard
As far as I know every subkey holds its own passphrase (per default, they are all identical for a given primary key). This means that passphrase requests are actually not action-based, but key-based. Please correct me if I'm wrong. :) Richard ___

Primary Key Security, Old DSA Key

2011-07-23 Thread Edmond
Hello everyone, one of my keys (the one I'm signing this message with) was created a while back and uses a 1024 bit DSA primary key. For encryption I'm using a 4096 bit RSA subkey, and for singing a 2048 bit DSA subkey (due to the smaller signature). gpg2 --list-packets for my primary key and

Re: Primary Key Security, Old DSA Key

2011-07-23 Thread Robert J. Hansen
On 7/23/11 10:19 AM, Edmond wrote: But since AFAIK both 1024 bit DSA and SHA1 hashes are not recommended for use anymore (at least in new systems), I was wondering if I should issue a new primary key. This is impossible to answer, since we don't know exactly what threats you're facing.

Re: gpg-agent automatically use passphrase for signing subkey?

2011-07-23 Thread Chris Poole
2011/7/23 Ingo Klöcker kloec...@kde.org: There is already the option --ignore-cache-for-signing (curiously the corresponding option for decryption is missing, i.e. it's not possible to use the cache for signing but not for decryption), so why not add another option like

Re: Is the OpenPGP model still useful?

2011-07-23 Thread Marcio B. Jr.
Hello Robert. On Wed, Jul 6, 2011 at 5:49 PM, Robert J. Hansen r...@sixdemonbag.org wrote: So far, OTR adoption seems unjustifiable, really. I mean, it uses the Diffie-Hellman key exchange method with block ciphers. Why is this a problem? You know, secrets are shared. 100% increase (at

Re: Is the OpenPGP model still useful?

2011-07-23 Thread Robert J. Hansen
On 7/23/11 1:04 PM, Marcio B. Jr. wrote: You know, secrets are shared. 100% increase (at least) in exposing risks. I need to see a citation for this. What you're claiming is at odds with everything I've ever learned about how DHKEA operates. ___

Re: OT: IM encryption options [was: Re: Is the OpenPGP model still useful?]

2011-07-23 Thread Marcio B. Jr.
Hi Aron, you are somewhat arrogant. Please read what I wrote till completion. Regards, On Fri, Jul 22, 2011 at 9:17 PM, Aaron Toponce aaron.topo...@gmail.com wrote: On Fri, Jul 22, 2011 at 07:56:42PM -0300, Marcio B. Jr. wrote: Hello Daniel, sorry for such a delay; this has been a wild

Re: Is the OpenPGP model still useful?

2011-07-23 Thread Daniel Kahn Gillmor
On 07/23/2011 07:04 PM, Marcio B. Jr. wrote: On Wed, Jul 6, 2011 at 5:49 PM, Robert J. Hansen r...@sixdemonbag.org wrote: So far, OTR adoption seems unjustifiable, really. I mean, it uses the Diffie-Hellman key exchange method with block ciphers. Why is this a problem? You know, secrets

Re: Is the OpenPGP model still useful?

2011-07-23 Thread Marcio B. Jr.
Hi Robert. Secrecy sharing constitutes sort of a symmetric fact when more than one instance is involved and you ask me for a citation? I resumed this thread in order to clarify whether Kopete's OpenPGP plugin was really superior, compared to the OTR one, and all people say is OTR and its

Re: Is the OpenPGP model still useful?

2011-07-23 Thread Robert J. Hansen
On 7/23/11 2:36 PM, Marcio B. Jr. wrote: Secrecy sharing constitutes sort of a symmetric fact when more than one instance is involved and you ask me for a citation? Yes. I am quite certain that if, say, Daniel Gillmor were to assert the Earth is round and I were to ask him for a citation, he