Re: German ct magazine postulates death of pgp encryption

2015-03-03 Thread Hans of Guardian
On Feb 27, 2015, at 8:56 PM, Werner Koch wrote: On Fri, 27 Feb 2015 17:26, patr...@enigmail.net said: that anyone can upload _every_ key to a keyserver is an issue. If keyservers would do some sort of verification (e.g. confirmation of the email addresses) then this would lead to much more

Re: German ct magazine postulates death of pgp encryption

2015-03-03 Thread Hans of Guardian
On Feb 27, 2015, at 1:11 PM, Kristian Fiskerstrand wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 02/27/2015 12:43 PM, Hauke Laging wrote: Am Fr 27.02.2015, 12:27:40 schrieb gnupgpacker: Maybe implementation with an opt-in could preserve publishing of faked keys on public

Re: Thoughts on GnuPG and automation

2015-03-03 Thread Hans of Guardian
On Feb 27, 2015, at 3:09 PM, Peter Lebbing wrote: On 27/02/15 12:02, Hans-Christoph Steiner wrote: For example, I think that `gpg --json` is great idea. I ended up using a Java wrapper of GPGME, which is in turn a wrapper of GnuPG. I think it makes a lot more sense to have `gpg --json`

Re: Thoughts on GnuPG and automation

2015-03-03 Thread Hans of Guardian
On Feb 27, 2015, at 1:19 PM, Bjarni Runar Einarsson wrote: Hi Hans-Christoph! Hans-Christoph Steiner h...@guardianproject.info wrote: With all the recent attention to GnuPG and Werner's work, I have begun to think about things differently. GnuPG has an amazing security track record. It

Re: Thoughts on GnuPG and automation

2015-03-03 Thread Hans of Guardian
Yeah, mailpile has a very unusual architecture, so its no surprise it'll need some unusual tricks. Unusual tricks in software that aims to be secure generally make me nervous since it is important to keep code readable and understandable for both the core devs, but also contributors,

Re: Thoughts on GnuPG and automation

2015-03-03 Thread Hans of Guardian
On Mar 3, 2015, at 4:43 PM, Peter Lebbing wrote: On 03/03/15 14:29, Hans of Guardian wrote: It is actually more difficult to wrap GPGME in Java than to have just rewritten GPGME in Java. In my opinion, if this is the case, then that is indeed the proper solution: write a general-purpose

Re: Thoughts on GnuPG and automation

2015-03-03 Thread Hans of Guardian
On Mar 3, 2015, at 7:09 PM, Peter Lebbing wrote: On 03/03/15 18:29, Hans of Guardian wrote: Android has an installed base of hundreds of millions. Desktop UNIX is the exotic system here as compared to Windows, Android, etc. I have no idea about how difficult it is to launch the gpg binary

Re: Thoughts on GnuPG and automation

2015-03-03 Thread Hans of Guardian
On Mar 3, 2015, at 7:09 PM, Peter Lebbing wrote: On 03/03/15 18:29, Hans of Guardian wrote: Android has an installed base of hundreds of millions. Desktop UNIX is the exotic system here as compared to Windows, Android, etc. I have no idea about how difficult it is to launch the gpg binary

Re: Thoughts on GnuPG and automation

2015-03-03 Thread Hans of Guardian
On Mar 3, 2015, at 8:52 PM, Werner Koch wrote: On Tue, 3 Mar 2015 14:29, h...@guardianproject.info said: It is actually more difficult to wrap GPGME in Java than to have just rewritten GPGME in Java. GPGME is a fine API for C/C++, it is a bad Sorry, but that is not your problem. The

Re: Thoughts on GnuPG and automation

2015-03-03 Thread Hans of Guardian
On Mar 3, 2015, at 7:31 PM, Robert J. Hansen wrote: This is definitely public information from the Snowden leaks. There is also quite a bit of information about other governments doing similar things. Here's one example article: If all encrypted traffic is deemed suspicious, then

Re: Thoughts on GnuPG and automation

2015-03-03 Thread Hans of Guardian
On Mar 3, 2015, at 5:01 PM, Robert J. Hansen wrote: Hans, please trim your quoted material. They would need to use a specialized system, and that specialized system might then be a marker of suspicion (for example, lots of governments, including the NSA, already mark all PGP messages as

Re: Thoughts on GnuPG and automation

2015-03-03 Thread Hans of Guardian
On Mar 3, 2015, at 5:49 PM, Robert J. Hansen wrote: Different programming languages and operating systems can have very different ways of launching and handling external processes. Eh. Different operating systems, sure: that's the nature of kernels. They provide different syscalls, and

Circumvention Tech Summit in Valencia

2015-03-03 Thread Hans of Guardian
Are any GnuPG dev people at the Circumvention Tech Summit in Valencia, that is now until Saturaday? I'm arriving today. It could be useful to have a little GnuPG chat in person. .hc ___ Gnupg-users mailing list Gnupg-users@gnupg.org

Re: hkps ssl problem

2014-05-01 Thread Hans of Guardian
Looks like you need to get this file and point the config to the real path: keyserver-options ca-cert-file=/pathto/.gnupg/sks-keyservers.netCA.pem .hc On Apr 29, 2014, at 4:41 AM, labrani wrote: Hello I'm having some problem while trying to use an hkps pool server as keyserver. i am