Re: PGP Anonymous Board Idea

2019-03-08 Thread Stefan Claas
Am Fri, 08 Mar 2019 22:00:20 +0100 schrieb Ralph Seichter : > Seriously, it strains my patience if participants in a discussion fail > to pay attention. O.k. understood and sorry for that i only wanted to point out the disadvantages of centralization etc. while there are are proper and proven

Re: Multiple dev one signing key

2019-03-08 Thread Phillip Susi
On 3/8/2019 2:05 PM, john doe wrote: > Hi, > > I'm considering working on a project that has only for now a couple of > developers. > As part of that project everything that will be released will need to be > gpg signed. > > What is the best way forward? > - One signing key accessible on the

Re: PGP Anonymous Board Idea

2019-03-08 Thread Ralph Seichter
* Stefan Claas: > Well, mail in a "forum" like a Usenet group is there a prefered delivery > method, thanks to mail2news gateways. [...] a) We're moving ever further off topic in terms of GnuPG. b) Once again, the OP wrote about "an anonymous PGP messaging board". I happen to have created and

Re: Multiple dev one signing key

2019-03-08 Thread Konstantin Ryabitsev
On Fri, Mar 08, 2019 at 08:05:53PM +0100, john doe wrote: Hi, I'm considering working on a project that has only for now a couple of developers. As part of that project everything that will be released will need to be gpg signed. What is the best way forward? - One signing key accessible on

Re: user id question

2019-03-08 Thread john doe
On 3/8/2019 9:15 AM, Werner Koch wrote: > On Sun, 24 Feb 2019 10:09, johndoe65...@mail.com said: > >> What I understand is that there is no clear convention. > 'Consensus' and not 'convention'! :) > Meanwhile I would suggest to only use the mail address, that is > > j...@example.org > > and

Multiple dev one signing key

2019-03-08 Thread john doe
Hi, I'm considering working on a project that has only for now a couple of developers. As part of that project everything that will be released will need to be gpg signed. What is the best way forward? - One signing key accessible on the release system - Eatch dev having a copy of the key to be

Re: PGP Anonymous Board Idea

2019-03-08 Thread Stefan Claas
Am Thu, 07 Mar 2019 16:01:05 +0100 schrieb Ralph Seichter : > * Aleksandar Lazic: > > I think the mixmaster approach should be still in place also when > > you use Tor, IMHO. > > I wrote "using the Tor Network as a foundation", but in this case it > might actually be enough. The OP presented

Default trust-model TOFU

2019-03-08 Thread Teemu Likonen
Werner Koch [2019-03-08 09:15:43+01] wrote: > If you plan to take part in that nerdy key signing game, [...] Maybe you refer only to key signing parties as nerdy things but I think the whole social web of trust concept is very nerdy. It's useless for most people and I'd say that TOFU model would

Re: user id question

2019-03-08 Thread Werner Koch
On Sun, 24 Feb 2019 10:09, johndoe65...@mail.com said: > What I understand is that there is no clear convention. Meanwhile I would suggest to only use the mail address, that is j...@example.org and leave out all other parts. There are even mail providers which demand this for data privacy

Re: OPENPGPKEY on DANE

2019-03-08 Thread Werner Koch
On Wed, 6 Mar 2019 21:58, gnupg-users@gnupg.org said: > 2019-03-06 21:25:50 dirmngr[2855.6] DBG: chan_6 -> OK Dirmngr 2.2.4 at > your service Between 2.2.4 and 2.2.10 we fixed a couple of bugs in the DNS resolver. This should explain why it works on macOS, where you use 2.2.10. Salam-Shalom,