Re: FAQ: seeking consensus

2019-10-18 Thread Tony Lane via Gnupg-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 10/18/19 2:12 PM, Steffen Nurpmeso wrote: > (redacted)... there are drugs and other specialists which > can make you talk and reveal that presence. At some later time > i would expect a court order to access log etc. data in and of the > brain

Re: FAQ: seeking consensus

2019-10-18 Thread Steffen Nurpmeso
Tony Lane via Gnupg-users wrote in : |-BEGIN PGP SIGNED MESSAGE- |Hash: SHA512 That seems to be a good choice. |On 10/17/19 3:38 PM, Steffen Nurpmeso wrote: |> You know, i would say people should be advised to use the most |> compatible, most secure keys available for their "very

Re: Future OpenPGP Support in Thunderbird

2019-10-18 Thread Jeff Allen via Gnupg-users
On Thu, 2019-10-17 at 17:40 +0200, Patrick Brunschwig wrote: > In all cases, we certainly won't re-write GnuPG or similar. The > question > on the table is: do we continue to use GnuPG (be it directly or via > gpgme), or do we use a different OpenPGP implementation (and if yes > which one). There

Re: SSH CA + gpg-agent + gnuk => error

2019-10-18 Thread NIIBE Yutaka
Brennecke, Simon wrote: > I have a question regarding the interaction of SSH with gpg-agent > (and possibly also gnuk). [...] > So I generated a new ECC key in gnuk, imported the public keys in gpg. > Added the keygrip everything to "~/.gnupg/sshcontrol" Just FYI, for smartcard, adding a keygrip

Re: FAQ: seeking consensus

2019-10-18 Thread Stefan Claas via Gnupg-users
Vincent Breitmoser wrote: > > It would be nice if you can add to the keyserver list also the > > mailvelope.com keyserver, > > I concur keys.mailvelope.com is a fine keyserver today. However, you might > want to consider: > > > because it requires users to authenticate their keys against the

Re: FAQ: seeking consensus

2019-10-18 Thread Vincent Breitmoser via Gnupg-users
> It would be nice if you can add to the keyserver list also the > mailvelope.com keyserver, I concur keys.mailvelope.com is a fine keyserver today. However, you might want to consider: > because it requires users to authenticate their keys against the keyserver > with an received encrypted

Re: FAQ: seeking consensus

2019-10-18 Thread Michał Górny via Gnupg-users
On Fri, 2019-10-18 at 09:19 +0200, Stefan Claas via Gnupg-users wrote: > Robert J. Hansen wrote: > > > 1. How should we handle the SKS keyserver attacks? > > I would list in the FAQ the kind of attacks possible, > to educate users, before they choose one for uploading > their key. > > > One

Re: FAQ: seeking consensus // SKS plans

2019-10-18 Thread Vincent Breitmoser via Gnupg-users
> 1. How should we handle the SKS keyserver attacks? Worth mentioning that at the openpgp summit recently, Kristian announced some plans that the SKS pool would: 1) Move implementation from SKS to Hockeypuck 2) Disable search by user id entirely 3) Filter out third party signatures, at least

Re: FAQ: seeking consensus

2019-10-18 Thread Stefan Claas via Gnupg-users
Robert J. Hansen wrote: > 1. How should we handle the SKS keyserver attacks? I would list in the FAQ the kind of attacks possible, to educate users, before they choose one for uploading their key. > One school of thought says "SKS is tremendously diminished as a > resource, because using it

Re: FAQ: seeking consensus

2019-10-18 Thread Michał Górny via Gnupg-users
On Thu, 2019-10-17 at 15:18 -0400, Robert J. Hansen wrote: > 1. How should we handle the SKS keyserver attacks? > > One school of thought says "SKS is tremendously diminished as a > resource, because using it can wedge older GnuPG installations and we > can't make people upgrade. We should

2FA gpg authentification?

2019-10-18 Thread trap trip via Gnupg-users
Hello I use linux, ubuntu budgie.For my mail i use thunderbird 60.3.0 and also mailfence, would like to know how to use gnupg in case of 2FA gpg authentification? Let me explain, i need to read a message crypted with my public key,i didn' receved this message by email it is online and i just