Re: Key Management - BSI had send private key instead of public key

2021-11-17 Thread Keine Eile
Am 17.11.21 um 00:17 schrieb Стефан Васильев via Gnupg-users: [...] My question is what can cause this, let's say if you have a busy and stressful day and would accidentally carry out such operation, as security professional knowing such a cryptographic tool for a long time, I assume. If this ca

Re: Key Management - BSI had send private key instead of public key

2021-11-17 Thread Keine Eile
Actually, there is a post in the forum Golem article, how this really happened: t.ly/1n0V ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Key Management - BSI had send private key instead of public key

2021-11-17 Thread Bernhard Reiter
Am Mittwoch 17 November 2021 00:17:58 schrieb Стефан Васильев via Gnupg-users: > According to an article on the German site golem.de[1] > Germany's BSI[2] had sent its private key instead of > it's public key to a user via email, who requested its > public key. > https://www.golem.de/news/verschl

Re: User id's without person's name, only email

2021-11-17 Thread Bernhard Reiter
Am Dienstag 16 November 2021 18:06:02 schrieb Andrew Gallagher via Gnupg-users: > On Tue, 2021-11-16 at 18:20 +0200, Teemu Likonen wrote: > > Am I seeing a starting trend here? Do some people think that it is > > better practice to have only have email address as user id? Some email providers off

Re: User id's without person's name, only email

2021-11-17 Thread Teemu Likonen
* 2021-11-16 17:06:02+, Andrew Gallagher via Gnupg-users wrote: > The "Real Name" and "Comment" portions of the userID are mere > conventions and, if you have an address book, entirely redundant. Thanks. That is rather technical point of view and correct in that sense. In my opinion it is a b

Re: User id's without person's name, only email

2021-11-17 Thread Andrew Gallagher via Gnupg-users
On 17/11/2021 14:40, Teemu Likonen wrote: 2. Second "address book" is my OpenPGP keyring. It groups persons' names, their email and other key data. If many keys don't have name in their user id it could be inconvenience. Computer programs can find keys but often we need also manu

Re: User id's without person's name, only email

2021-11-17 Thread Robert J. Hansen via Gnupg-users
Mapping a "Real Name" to an email address is a conceptually different thing from mapping an email address to a public key. Except that should we be mapping keys to email addresses in the first place? When we sign a certificate we make an assertion that this cryptographic material is controll

Re: User id's without person's name, only email

2021-11-17 Thread Andrew Gallagher via Gnupg-users
On 17/11/2021 18:15, Robert J. Hansen wrote: Mapping a "Real Name" to an email address is a conceptually different thing from mapping an email address to a public key. Except that should we be mapping keys to email addresses in the first place? > When we sign a certificate we make an assertio

Re: Key Management - BSI had send private key instead of public key

2021-11-17 Thread Stuart Longland via Gnupg-users
On Tue, 16 Nov 2021 23:17:58 + Стефан Васильев via Gnupg-users wrote: > [1] > https://www.golem.de/news/verschluesselung-bsi-verschickt-privaten-pgp-schluessel-2111-161073.html Is there an English translation of this article somewhere? I never learned German beyond what made its way into t

Re: Key Management - BSI had send private key instead of public key

2021-11-17 Thread Jonas Tobias Hopusch via Gnupg-users
> Is there an English translation of this article somewhere? No, I don't think so. To the best of my knowledge Golem.de publishes exclusively in German and I didn't find anything with a search engine. > If I go to the link, I get a rather large pop-up dialogue which doesn't > look much like an ar

Re: User id's without person's name, only email

2021-11-17 Thread raf via Gnupg-users
On Wed, Nov 17, 2021 at 04:40:46PM +0200, Teemu Likonen wrote: > * 2021-11-16 17:06:02+, Andrew Gallagher via Gnupg-users wrote: > > > The "Real Name" and "Comment" portions of the userID are mere > > conventions and, if you have an address book, entirely redundant. > > Thanks. That is rath

Re: User id's without person's name, only email

2021-11-17 Thread Teemu Likonen
* 2021-11-18 13:22:52+1100, raf via Gnupg-users wrote: > Real names aren't that useful. They're hardly unique, > even/especially within a single family. That continues the technical or nerdy point of view. "Real names are not unique. Therefore they are not (that) useful." Sometimes crypto nerds s