Re: A place for discussing WKD spec clarifications?

2019-10-16 Thread Daniel Kahn Gillmor via Gnupg-users
On Tue 2019-10-15 23:01:33 +0200, Werner Koch via Gnupg-users wrote: > On Tue, 15 Oct 2019 09:06, Bjarni Runar Einarsson said: > >> Would the GnuPG issue tracker be a good place to file "bug >> reports" against the spec, to work towards clarifications? > > That is okay for bug reports, but often

Re: GPG Agent discarding cache before ttl/max ttl

2019-10-16 Thread Daniel Kahn Gillmor via Gnupg-users
On Tue 2019-10-15 22:57:16 +0200, Werner Koch via Gnupg-users wrote: > If your system has a method to run a script > on suspend or lid closing it may already do just that. I consider this > a good idea but we can't do that by default in GnuPG because systems > differ to much on how to detect a

Fwd: Cannot decrypt from smartcard using gnupg-2.2, can from 2.0

2019-10-16 Thread alejandro Cortez via Gnupg-users
I just realized my reply did not go to the list. -- Forwarded message - From: alejandro Cortez Date: Tue, Oct 15, 2019 at 9:43 AM Subject: Re: Cannot decrypt from smartcard using gnupg-2.2, can from 2.0 To: Niibe Yutaka On Mon, Oct 14, 2019 at 12:18 AM Niibe Yutaka wrote: >

Re: Android

2019-10-16 Thread Burkhard Schroeder
Am 16.10.19 um 13:02 schrieb Daniel Bossert: > Is anybody using pgp on Android? I did some years ago, would like to, > but am afraid of security reason. > > I have safed my keys on my laptop only. > > How are you handling it in ages of mobiles? I use K-Mail and Openkeychain

Re: are angle brackets around email address allowed for auto-key-locate?

2019-10-16 Thread David Hebbeker
On Wed, 2019-10-16 at 14:19 +0200, Werner Koch wrote: > On Tue, 15 Oct 2019 22:23, David Hebbeker said: > > The manual [1] says that GnuPG can automatically retrieve keys for > > emails in the "u...@example.com" form. Does this exclude emails > > wrapped by angle brackets like ""? > > That is

Re: Android

2019-10-16 Thread john doe
On 10/16/2019 3:45 PM, Michał Górny via Gnupg-users wrote: > On Wed, 2019-10-16 at 13:02 +0200, Daniel Bossert wrote: >> Hi >> >> Is anybody using pgp on Android? I did some years ago, would like to, but am >> afraid of security reason. >> >> I have safed my keys on my laptop only. >> >> How are

Re: Future OpenPGP Support in Thunderbird

2019-10-16 Thread Binarus
On 16.10.2019 13:07, Patrick Brunschwig wrote: > worry for me. The main problem is the additional complexity that it > brings if you require an external component that you cannot *fully* > control. This covers topics like different behavior of different > versions, but also configuration

Re: Android

2019-10-16 Thread Michał Górny via Gnupg-users
On Wed, 2019-10-16 at 13:02 +0200, Daniel Bossert wrote: > Hi > > Is anybody using pgp on Android? I did some years ago, would like to, but am > afraid of security reason. > > I have safed my keys on my laptop only. > > How are you handling it in ages of mobiles? > Get yourself a hardware

Re: Android

2019-10-16 Thread Juergen Christoffel
On Wed, Oct 16, 2019 at 01:02:10PM +0200, Daniel Bossert wrote: Is anybody using pgp on Android? I did some years ago, would like to, but am afraid of security reason. Hi Daniel, I'm using gnupg with Termux (Linux as app) on Android. And ssh for file transfers too. Works for me, as I'm

Re: Android

2019-10-16 Thread Chris Narkiewicz via Gnupg-users
YubiKeys are supported. You can use NFC key to perform crypto gimmicks or plug USB one. OpenKeychain does support quite large palette of hardware tokens. Paired with K-9 it actually provides relatively good UX.___ Gnupg-users mailing list

Re: Future OpenPGP Support in Thunderbird

2019-10-16 Thread Patrick Brunschwig
Werner Koch wrote on 16.10.2019 13:54: > On Wed, 16 Oct 2019 13:07, Patrick Brunschwig said: > >> something on their PC and more. Gpgme may handle some of these issues, >> but the fact remains: an external component makes things a lot more >> complex, especially for support. > > Right GPGME

SSH CA + gpg-agent + gnuk => error

2019-10-16 Thread Brennecke, Simon via Gnupg-users
Hi guys, I have a question regarding the interaction of SSH with gpg-agent (and possibly also gnuk). I started out with the following setup: Every admin has his own ssh private key. All private keys are signed with an SSH CA. The server trust the CA, and thus the admins can login. No need to

Re: Android

2019-10-16 Thread Johan Wevers
On 16-10-2019 13:02, Daniel Bossert wrote: > Is anybody using pgp on Android? I did some years ago, would like to, > but am afraid of security reason. I use APG for old pgp 2.x keys and OpenKeyChain integrated in k9 mail for modern keys. The secret keys are protected by a password, that's my key

Re: are angle brackets around email address allowed for auto-key-locate?

2019-10-16 Thread Werner Koch via Gnupg-users
On Tue, 15 Oct 2019 22:23, David Hebbeker said: > The manual [1] says that GnuPG can automatically retrieve keys for > emails in the "u...@example.com" form. Does this exclude emails wrapped > by angle brackets like ""? That is fine. Find below our test addresses. Salam-Shalom, Werner

Re: Future OpenPGP Support in Thunderbird

2019-10-16 Thread Werner Koch via Gnupg-users
On Wed, 16 Oct 2019 10:46, Martijn Brinkers said: > I actually spend a lot of time investigating the impact of EFAIL on > S/MIME and it's my opinion that the real impact has been overblown. In > all my experiments, and I can tell you I have done a lot of them, I have > not been able to force a

Re: Future OpenPGP Support in Thunderbird

2019-10-16 Thread Patrick Brunschwig
Binarus wrote on 16.10.2019 10:47: > > On 14.10.2019 16:15, Jeff Allen via Gnupg-users wrote: >>> I don't know either, but perhaps it is in the debug logs the Enigmail >>> team analyzes? >> >> I have used Enigmail since its inception and have never knowingly >> submitted a log or answered a

Android

2019-10-16 Thread Daniel Bossert
Hi Is anybody using pgp on Android? I did some years ago, would like to, but am afraid of security reason. I have safed my keys on my laptop only. How are you handling it in ages of mobiles? Regards Daniel ___ Gnupg-users mailing list

Re: Future OpenPGP Support in Thunderbird

2019-10-16 Thread Martijn Brinkers via Gnupg-users
> Efail-1 was what Werner is talking about here. It was a pretty bad > blow to S/MIME, but far less so to OpenPGP, since OpenPGP has had > countermeasures in place for almost twenty years. Efail-1's impact > on OpenPGP was, is, minimal. I actually spend a lot of time investigating the impact of

Re: Future OpenPGP Support in Thunderbird

2019-10-16 Thread Binarus
On 14.10.2019 16:15, Jeff Allen via Gnupg-users wrote: >> I don't know either, but perhaps it is in the debug logs the Enigmail >> team analyzes? > > I have used Enigmail since its inception and have never knowingly > submitted a log or answered a survey and have always assumed Enigmail > does