Re: On the advisability of stronger digests than SHA-1 in OpenPGP certifications

2014-06-28 Thread Johan Wevers
On 28-06-2014 0:31, Johannes Zarl wrote: The way I see it compatibility between those two groups is a non-issue - they simply don't exchange messages. Why not? Robert came with the example of a law firm. Lawyers exchange messages with their clients, and in criminal cases the police might want

card reader (was: riseup.net OpenPGP Best Practices article)

2014-06-28 Thread Werner Koch
On Fri, 27 Jun 2014 21:44, ds...@jabberwocky.com said: I do admire the Neo form factor though. The SCT3512 [1] with an OpenPGP card is also quite convenient: http://werner.eifzilla.de/sct3512.jpg I have taken off the ID-000 form factor card for the picture. The label is also non-standard

Re: On the advisability of stronger digests than SHA-1 in OpenPGP certifications [was: Re: riseup.net OpenPGP Best Practices article]

2014-06-28 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Friday 27 June 2014 at 11:35:00 PM, in mid:a2f8dba9-1da7-47a6-bc79-cfaea3b02...@jabberwocky.com, David Shaw wrote: Incidentally, since subkeys have come up in this thread, I seem to recall a few strange bugs with 8.x (8.0? 8.1?) that

Re: PGP insecurities?

2014-06-28 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Friday 27 June 2014 at 10:58:18 PM, in mid:blu436-smtp2501dab5bb2ed692950b55585...@phx.gbl, 'Mark W. Walton' mark.wal...@sympatico.ca [PGP-Basics] wrote: What is FIPS? [0] lists quite a few possibilities, of which the most promising is

Re: On the advisability of stronger digests than SHA-1 in OpenPGP certifications

2014-06-28 Thread Johannes Zarl
On Saturday 28 June 2014 08:09:10 Johan Wevers wrote: On 28-06-2014 0:31, Johannes Zarl wrote: The way I see it compatibility between those two groups is a non-issue - they simply don't exchange messages. Why not? My assumptions were as follows: - When exchanging messages with untrusted

Re: On the advisability of stronger digests than SHA-1 in OpenPGP certifications

2014-06-28 Thread Johannes Zarl
On Friday 27 June 2014 19:35:12 Robert J. Hansen wrote: On 6/27/2014 6:31 PM, Johannes Zarl wrote: 1. legacy PGP implementations in closed corporate environments Be careful about that phrase legacy. Too often it's used as a slur. It's more accurate to say, PGP installations in corporate

Re: On the advisability of stronger digests than SHA-1 in OpenPGP certifications [was: Re: riseup.net OpenPGP Best Practices article]

2014-06-28 Thread David Shaw
On Jun 28, 2014, at 5:20 AM, MFPA 2014-667rhzu3dc-lists-gro...@riseup.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Friday 27 June 2014 at 11:35:00 PM, in mid:a2f8dba9-1da7-47a6-bc79-cfaea3b02...@jabberwocky.com, David Shaw wrote: Incidentally, since subkeys

Re: card reader (was: riseup.net OpenPGP Best Practices article)

2014-06-28 Thread Nicholas Cole
On Sat, Jun 28, 2014 at 9:18 AM, Werner Koch w...@gnupg.org wrote: On Fri, 27 Jun 2014 21:44, ds...@jabberwocky.com said: I do admire the Neo form factor though. The SCT3512 [1] with an OpenPGP card is also quite convenient: http://werner.eifzilla.de/sct3512.jpg I have taken off the

New to OpenPGP getting frustrated.

2014-06-28 Thread Aaron Chelf
Okay so I'm using Open PGP software in conjunction with Thunderbird in Linux. I've figured out about everything except the only way I can add public keys to my key ring so far is to save them as an attachment from an e-mail sent to me. How can I just copy a public key to my clipboard and add it

Re: New to OpenPGP getting frustrated.

2014-06-28 Thread Rejo Zenger
++ 28/06/14 02:09 -0500 - Aaron Chelf: Okay so I'm using Open PGP software in conjunction with Thunderbird in Linux. I've figured out about everything except the only way I can add public keys to my key ring so far is to save them as an attachment from an e-mail sent to me. How can I just copy a

Re: New to OpenPGP getting frustrated.

2014-06-28 Thread Doug Barton
On 06/28/2014 12:09 AM, Aaron Chelf wrote: Okay so I'm using Open PGP software in conjunction with Thunderbird in Linux. I've figured out about everything except the only way I can add public keys to my key ring so far is to save them as an attachment from an e-mail sent to me. How can I just

Re: card reader (was: riseup.net OpenPGP Best Practices article)

2014-06-28 Thread Ville Määttä
I'm using the FSFE card [1] with SCR3500 [2]. Ok yeah sure, that’s a fellowship card but I actually also wanted to point out the SCR3500 which is a nice similar form factor option for a reader. https://www.dropbox.com/s/jbaxi8ulfdz5585/fsfe_with_scr3500.jpg [1]

Re: New to OpenPGP getting frustrated.

2014-06-28 Thread John Clizbe
Aaron Chelf wrote: Okay so I'm using Open PGP software in conjunction with Thunderbird in Linux. I've figured out about everything except the only way I can add public keys to my key ring so far is to save them as an attachment from an e-mail sent to me. How can I just copy a public key to