Re: It's time for PGP to die.

2014-08-19 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Wednesday 20 August 2014 at 7:04:23 AM, in , Johan Wevers wrote: > Now the > question is, do the prisoners at Guantanomo Bay notice > anything of it? Or will they still be tortured, have no > access to lawyers and get still no fair trial an

Re: It's time for PGP to die.

2014-08-19 Thread Johan Wevers
On 19-08-2014 22:49, Robert J. Hansen wrote: >> And do they get it or will the government just ignore the supreme >> court? > I could literally list *dozens* of cases where the Supreme Court told > Congress and the President "no" on subjects where Congress and the > President insisted they would

Re: Fwd: It's time for PGP to die.

2014-08-19 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Tuesday 19 August 2014 at 11:48:29 PM, in , Robert J. Hansen wrote: > Yes, it's pure semantics. It's *law*. What, were you > expecting something else? Fair comment, but what has been described as "bargaining" is still coercion. > The

Re: Fwd: It's time for PGP to die.

2014-08-19 Thread Robert J. Hansen
> In my opinion that is pure semantics. In other news, water is wet, bricks are heavy, and politicians lie. Yes, it's pure semantics. It's *law*. What, were you expecting something else? Wake up and realize the essential nature of what you're talking about: law is *all about* formalism, syntax

Re: Fwd: It's time for PGP to die.

2014-08-19 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Tuesday 19 August 2014 at 10:05:23 PM, in , Robert J. Hansen wrote: > What the prosecutor is offering there is, "you will plead guilty to > lesser charges, but I'm only willing to do this if you're willing to > show me the full extent of y

Re: Fwd: It's time for PGP to die.

2014-08-19 Thread Robert J. Hansen
Not coercion? Nope. That's a trade. Passphrase coercion is like so: "you will produce the passphrase, or you will sit in jail until you decide to produce the passphrase, and we're just fine if you sit in there the rest of your natural life, and once we get the passphrase then we'll decide whet

Re: So on & so forth

2014-08-19 Thread Peter Lebbing
On 19/08/14 22:27, Peter Lebbing wrote: > I think that you should only build or fork software[1] when you're willing to > provide the service of security fixes to your users, or clearly indicate this > is > out of your scope. Do they provide security support? I'm starting to regret my from-the-si

Re: So on & so forth

2014-08-19 Thread Doug Barton
Ville, Thank you for your detailed response, it was very helpful. :) I'm curious about one thing, and sorry if this is off-topic but since we're discussing how to keep GnuPG up to date on Mac perhaps it is close enough to on-topic. I notice you suggested (home)brew as the source of the gpg2

Re: It's time for PGP to die.

2014-08-19 Thread Robert J. Hansen
And do they get it or will the government just ignore the supreme court? This is the last I will be contributing to this misbegotten thread. The Supreme Court gets involved only rarely, but when they do, they settle the argument with the finality of a nuclear strike. Consider the Detainee Trea

Re: Fwd: It's time for PGP to die.

2014-08-19 Thread Bob Holtzman
On Mon, Aug 18, 2014 at 10:43:49PM -0400, Robert J. Hansen wrote: > On 8/18/2014 9:32 PM, Bob Holtzman wrote: > > There are quite a few ways police and prosecutors can coerce a > > suspect to hand over his encryption key(s). > > Your examples which involve coercion are illegal, and the ones that

Re: So on & so forth

2014-08-19 Thread Peter Lebbing
On 19/08/14 21:52, Ludwig Hügelschäfer wrote: > Ack. They use the build system from homebrew. They update recipes from > time to time, but their releases normally go only with major Mac OS X > updates (e.g. 10.8 -> 10.9), as in last october with 2.0.22. Their > main target is the gpg-plugin for App

Re: So on & so forth

2014-08-19 Thread Hauke Laging
Am Di 19.08.2014, 14:49:37 schrieb Robert J. Hansen: > > 2. They have a default skeleton gpg.conf with incompatible digest > > algo etc. (as discussed many times on the list). > > Use of cert-digest-algo isn't really a problem unless you're needing > people running old PGP or GnuPG to be able to v

Re: So on & so forth

2014-08-19 Thread Werner Koch
On Tue, 19 Aug 2014 20:41, do...@dougbarton.us said: > I got to their site from the link on > https://www.gnupg.org/download/index.html so I had assumed it was > Ok. :-/ Me too. I do not have access to a Mac, thus I am not able to test the stuff myself. After they fixed some license related th

Re: So on & so forth

2014-08-19 Thread Ville Määttä
I just went through the process of switching to brew provided gpg2. Anyone not interested in the particular Mac workflow can skip this one. So, removing GPG Suite, installed gnupg2 via brew, re-installing GPG Suite without MacGPG2 (i.e. the Mail.app helpers etc.). There is a bit of work involve

Re: So on & so forth

2014-08-19 Thread Ludwig Hügelschäfer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 19.08.14 20:17, Ville Määttä wrote: > Yeah. Ok. Assuming the Mac guys / fork referred to here are > GPGTools / MacGPG2 I can see a couple bigger issues there than just > patching in support for bigger keys. Ack. Nevertheless, I don't like some of

Re: It's time for PGP to die.

2014-08-19 Thread Martin Behrendt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am 19.08.2014 um 21:16 schrieb MFPA: > Hi > > > On Monday 18 August 2014 at 8:21:06 PM, in > , Robert J. Hansen wrote: > > > >> No, the Fourth Amendment protects all people within U.S. borders >> equally. Americans get no special protections ove

Re: So on & so forth

2014-08-19 Thread Doug Barton
On 8/19/14 11:17 AM, Ville Määttä wrote: 1. The package and gnupg2 version used has not been updated since October 2013 (2013.10.22). If I’m not completely mistaken the version is still 2.0.22. Yes, that was my biggest concern as well (and you're correct on the version). Is there a better s

Re: So on & so forth

2014-08-19 Thread Doug Barton
On 8/19/14 4:01 AM, Werner Koch wrote: On Tue, 19 Aug 2014 11:14, nicholas.c...@gmail.com said: They've made a fork? I hadn't realised that. Why on earth? I don't know. However they use a set of patches (e.g. allowing 8k keys) and thus the Mac version diverts from the gnupg.org version. Act

Re: So on & so forth

2014-08-19 Thread Ville Määttä
Yeah. Ok. Assuming the Mac guys / fork referred to here are GPGTools / MacGPG2 I can see a couple bigger issues there than just patching in support for bigger keys. 1. The package and gnupg2 version used has not been updated since October 2013 (2013.10.22). If I’m not completely mistaken the ve

Re: It's time for PGP to die.

2014-08-19 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Monday 18 August 2014 at 8:21:06 PM, in , Robert J. Hansen wrote: > No, the Fourth Amendment protects all people within > U.S. borders equally. Americans get no special > protections over visitors to the country. Do people at a border cr

Re: Fwd: It's time for PGP to die.

2014-08-19 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Monday 18 August 2014 at 1:25:41 PM, in , Robert J. Hansen wrote: > Basically, if the fact you know something would tend to > implicate you in the commission of a crime, then you > can't be compelled to reveal that you know it. Whether > i

Re: Fwd: It's time for PGP to die.

2014-08-19 Thread Johan Wevers
On 19-08-2014 4:43, Robert J. Hansen wrote: > real life. The DA is allowed to threaten prosecution of only those > crimes the DA reasonably believes a person violated, But that is a very vague criterium. "You liked Wikileaks on Facebook so I'm going to sue you for terrorism and treason". > Don'

Re: It's time for PGP to die.

2014-08-19 Thread Johan Wevers
On 19-08-2014 17:10, James Platt wrote: > In a more recent event, the Supreme Court ruled that Guantanamo Bay > is in the jurisdiction of the United States and, therefore, the > detainees moved there gained the protection of The Constitution. And do they get it or will the government just ignore

Re: Fwd: It's time for PGP to die.

2014-08-19 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Monday 18 August 2014 at 7:11:57 PM, in , Robert J. Hansen wrote: > If you're a witness > to a crime, you can be compelled to testify about what > you see. Yes, but they can't make you remember accurately what you saw, or tell you what to

Re: So on & so forth

2014-08-19 Thread Robert J. Hansen
2. They have a default skeleton gpg.conf with incompatible digest algo etc. (as discussed many times on the list). Use of cert-digest-algo isn't really a problem unless you're needing people running old PGP or GnuPG to be able to verify your signatures. That's less of a problem than using digest

Re: It's time for PGP to die.

2014-08-19 Thread James Platt
On Aug 18, 2014, at 3:21 PM, Robert J. Hansen wrote: >> At least for US persons, iirc the protection doesn't extend beyond >> that? > > No, the Fourth Amendment protects all people within U.S. borders > equally. Americans get no special protections over visitors to the country. The Fourteenth

Re: So on & so forth

2014-08-19 Thread Robert J. Hansen
They've made a fork? I hadn't realised that. Why on earth? They emphatically disagree with some of the key size limits. To be blunt, it's made me lose a lot of faith in the developers. In the grand scheme of things, it's hard to find *anything* less significant than whether someone uses RSA-

Re: ftp.gnupg.org blocking Tor IP's?

2014-08-19 Thread Werner Koch
On Tue, 19 Aug 2014 11:53, k.chamb...@openmailbox.org said: > following warning: "425 Error accepting connection; connection from > invalid IP." > > My IP was: 46.4.46.66 Sorry, I can't find your IP in the logs. I can ping that address from the server, traceroute shows not strangeness, and that

ftp.gnupg.org blocking Tor IP's?

2014-08-19 Thread Kristy Chambers
Hello, i just wanted to download gnupg via ftp from ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.18.tar.bz2 and got the following warning: "425 Error accepting connection; connection from invalid IP." My IP was: 46.4.46.66 Kind regards, Chambers ___ Gnup

Re: So on & so forth

2014-08-19 Thread Werner Koch
On Tue, 19 Aug 2014 11:14, nicholas.c...@gmail.com said: > They've made a fork? I hadn't realised that. Why on earth? I don't know. However they use a set of patches (e.g. allowing 8k keys) and thus the Mac version diverts from the gnupg.org version. Actually Gpg4win does the same but I take ca

Re: So on & so forth

2014-08-19 Thread Ville Määttä
Quite. Who are the "Mac guys" and what did they fork? -- Ville > On 19.8.2014, at 12.14, Nicholas Cole wrote: > >> On Fri, Aug 15, 2014 at 6:54 PM, Richard Outerbridge >> wrote: >> Still waiting for my email address, yet my blackphone is already in >> my hands. Keep up the good work. >> >>

Re: So on & so forth

2014-08-19 Thread Nicholas Cole
On Fri, Aug 15, 2014 at 6:54 PM, Richard Outerbridge wrote: > Still waiting for my email address, yet my blackphone is already in > my hands. Keep up the good work. > > I’m not going to bother with 2.1 until the Mac guyz come to their > senses about not forking the crypto. Could be a long wait.