Re: Question about a perfect private Key store for today's environment

2013-09-22 Thread Marko Randjelovic
Of course it is not safe. If you realy need a smartphone, use some of those that are supported by Replicant OS. http://replicant.us/ ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Question about a perfect private Key store for today's environment

2013-09-22 Thread Pete Stephenson
On Sat, Sep 21, 2013 at 11:06 PM, Aleksandar Lazic al-gnupg_us...@none.at wrote: What could be a perfect or at least a very good storage of the private Key. Probably a smartcard -- this keeps your key entirely on the card and it is not accessible to the computer (that is, a bad guy with control

Re: Question about a perfect private Key store for today's environment

2013-09-22 Thread NdK
Il 21/09/2013 23:06, Aleksandar Lazic ha scritto: What solution is available for public Web mail providers like gmail, gmx, hotmail, .? Firefox+GreaseMonkey+script to interface to card? BYtE, Diego ___ Gnupg-users mailing list

Re: Question about a perfect private Key store for today's environment

2013-09-22 Thread Heinz Diehl
On 22.09.2013, Aleksandar Lazic wrote: What could be a perfect or at least a very good storage of the private Key. Spend a little bit money and buy you a smartcard and a reader. Then, boot a machine without internet connection from an USB-stick or CD/DVD with some live version (e.g.

gpg: Go ahead and type your message

2013-09-22 Thread Len Cooley
I'm sure this has been a topic of inquiry many times, but I can't seem to find useful information about it. I haven't used gpg command line for a long time (I actually haven't used gpg much at all in the past few years, as I've had a Windows machine, and I just don't trust the OS), but I have gpg

Re: gpg: Go ahead and type your message

2013-09-22 Thread Robert J. Hansen
On 9/22/2013 10:57 AM, Len Cooley wrote: I'm sure this has been a topic of inquiry many times, but I can't seem to find useful information about it. The normal way to use GnuPG is to first compose your document (using whatever application you wish -- a word processor, a text editor, whatever)

CryptoList - Looking for beta testers

2013-09-22 Thread Oliver Verlinden
Hey guys, some days ago I had the idea of a pgp compatible mailing list. I know there is a mailman extension which supports pgp encrypted messages out there, but I wanted ta have a small, fast and easy to configure solution. I imagined something like that: - A list member writes an pgp signed

Re: CryptoList - Looking for beta testers

2013-09-22 Thread kwadronaut
On 22/09/13 19:10, Oliver Verlinden wrote: some days ago I had the idea of a pgp compatible mailing list. I know there is a mailman extension which supports pgp encrypted messages out there, but I wanted ta have a small, fast and easy to configure solution. Åre you also aware of Schleuder?

Re: Question about a perfect private Key store for today's environment

2013-09-22 Thread Aleksandar Lazic
Hi Marko, Am 22-09-2013 10:29, schrieb Marko Randjelovic: Of course it is not safe. If you realy need a smartphone, use some of those that are supported by Replicant OS. http://replicant.us/ Thank you for your feedback. I'm not sure how much 'normal' or mass user are able to use this OS.

Re: Question about a perfect private Key store for today's environment

2013-09-22 Thread Aleksandar Lazic
Dear Diego, Am 22-09-2013 10:37, schrieb NdK: Il 21/09/2013 23:06, Aleksandar Lazic ha scritto: What solution is available for public Web mail providers like gmail, gmx, hotmail, .? Firefox+GreaseMonkey+script to interface to card? Your solution implies that you need to install all

Re: Question about a perfect private Key store for today's environment

2013-09-22 Thread Aleksandar Lazic
Dear Heinz, Am 22-09-2013 10:45, schrieb Heinz Diehl: On 22.09.2013, Aleksandar Lazic wrote: What could be a perfect or at least a very good storage of the private Key. Spend a little bit money and buy you a smartcard and a reader. Then, boot a machine without internet connection from an

Re: CryptoList - Looking for beta testers

2013-09-22 Thread Oliver Verlinden
On Sunday, 22. September 2013, 20:33:45 kwadronaut wrote: Hi kwadronaut, On 22/09/13 19:10, Oliver Verlinden wrote: some days ago I had the idea of a pgp compatible mailing list. I know there is a mailman extension which supports pgp encrypted messages out there, but I wanted ta have a

Generation of key ID's

2013-09-22 Thread Ralf Ramsauer
Hi, just a short question: When a new GPG key gets generated, then in fact and by default two key pairs get generated. Let's assume we deployed RSA-RSA. Both, signature and encryption key get their own ID's. How are these ID's generated? Randomly? Or are they some kind of checksum of the modulus

Re: Question about a perfect private Key store for today's environment

2013-09-22 Thread NdK
Il 22/09/2013 20:43, Aleksandar Lazic ha scritto: Firefox+GreaseMonkey+script to interface to card? Your solution implies that you need to install all this components on all devices. Sure. Unless you want to trust someone else to handle your keys. But then don't be surprised if who have

Re: CryptoList - Looking for beta testers

2013-09-22 Thread Randolph D.
you can look at the buzz channel function of http://spot-on.sf.net too, that is a kind of encrypted irc as message list. regards 2013/9/22 Oliver Verlinden oli...@wps-verlinden.de No, I did not know Schleuder yet. Thank you for the link, I will take a look at this.

Re: CryptoList - Looking for beta testers

2013-09-22 Thread Daniel Kahn Gillmor
On 09/22/2013 01:10 PM, Oliver Verlinden wrote: some days ago I had the idea of a pgp compatible mailing list. I know there is a mailman extension which supports pgp encrypted messages out there, but I wanted ta have a small, fast and easy to configure solution. Very cool to see that you've

Re: Generation of key ID's

2013-09-22 Thread Daniel Kahn Gillmor
On 09/21/2013 11:56 AM, Ralf Ramsauer wrote: Both, signature and encryption key get their own ID's. How are these ID's generated? Randomly? the key IDs are the low-order bits of the fingerprints. the fingerprints are an SHA-1 digest of the creation date of the key plus the public elements of

Re: CryptoList - Looking for beta testers

2013-09-22 Thread Kenneth Jones
On 09/23/2013 04:45 AM, Daniel Kahn Gillmor wrote: On 09/22/2013 01:10 PM, Oliver Verlinden wrote: some days ago I had the idea of a pgp compatible mailing list. I know there is a mailman extension which supports pgp encrypted messages out there, but I wanted ta have a small, fast and easy

Re: CryptoList - Looking for beta testers

2013-09-22 Thread mirimir
On 09/22/2013 11:08 PM, Kenneth Jones wrote: On 09/23/2013 04:45 AM, Daniel Kahn Gillmor wrote: SNIP Hmmm... Last two messages from Daniel prompt my Thunderbird/Enigmail setup that an OpenPGP secret key is needed to decrypt the message (which nonetheless shows up in cleartext). What's

Re: CryptoList - Looking for beta testers

2013-09-22 Thread John Clizbe
Kenneth Jones wrote: Hmmm... Last two messages from Daniel prompt my Thunderbird/Enigmail setup that an OpenPGP secret key is needed to decrypt the message (which nonetheless shows up in cleartext). What's happening? Is it signed with a public key? Can you do that? Why would one wnt to?

Re: CryptoList - Looking for beta testers

2013-09-22 Thread Kenneth Jones
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/23/2013 08:31 AM, John Clizbe wrote: Kenneth Jones wrote: snip ...and when I go back to review them after having read several intervening messages, they (and all others, it seems) behave just as I expected them to behave originally.