Re: Access to www.gnupg.org only via TLS

2014-04-30 Thread Martin Gollowitzer
* Doug Barton do...@dougbarton.us [140430 10:05, mID 5360ae82.6070...@dougbarton.us]: On 04/30/2014 12:41 AM, Werner Koch wrote: Hi, I have changed the website setup so that any plain text access to www.gnupg.org is redirected to https://www.gnupg.org . Strict Transport Security (HSTS)

Re: [Announce] GnuPG launches crowdfunding campaign

2013-12-19 Thread Martin Gollowitzer
* Richard Ulrich ricu...@gmail.com [131219 13:47, mID 1387457142.1836.18.camel@XPS13dev]: As this is about a crypto project, wouldn't it be adequate to accept payments in crypto currencies? I wouldn't consider this a priority. Bitcoin violates one of the fundamental laws of economics and is

Re: Quotes from GPG users

2013-10-30 Thread Martin Gollowitzer
* Sam Tuke samt...@gnupg.org [131030 13:18, mID 5270e670.3070...@gnupg.org]: Hi all, I'm working with Werner to promote GnuPG and raise awareness. To that end we're collecting quotes from users - endorsements from people who know and trust GPG, people like you. If you want to help

Sending signed e-mail via shell script

2012-02-22 Thread Martin Gollowitzer
Hi, I'm currently trying to do a smal script that sends automated e-mail messages on a regular basis. I want to sign those e-mails and since mutt does not allow to use it's OpenPGP features in non-interactive mode, I try to at least have these messages signed using inline PGP. For this, I use the

Re: Trying to create auth key on GPF CryptoStick

2012-01-03 Thread Martin Gollowitzer
* Paul Hartman paul.hart...@gmail.com [120102 19:35, mID CAEH5T2P7yFKf1aZt8aFGb=tm_8bu3odwpro36mwxrecngg0...@mail.gmail.com]: Crypto-Stick website states that it supported 4096-bit keys when using gnupg 2.0.18, and my signing and encryption subkeys on the card are in fact already 4096 bits,

Re: Trying to create auth key on GPF CryptoStick

2012-01-02 Thread Martin Gollowitzer
* Paul Hartman paul.hart...@gmail.com [120102 08:52, mID caeh5t2o4hfyoftki8bm16gxwczhbptmvqz7nqiqbw3ykmh5...@mail.gmail.com]: Hi, I got a GPF CryptoStick 1.2 yesterday and have successfully added my new signing and encrypting subkeys to the card using GPG 2.0.18 and using it without

Re: STEED - Usable end-to-end encryption

2011-10-18 Thread Martin Gollowitzer
* Robert Holtzman hol...@cox.net [111018 21:43, mID 20111018185035.gb4...@cox.net]: The greatest hindrance to widespread adoption is the phrase I often hear...I've got nothing to hide It drives me up a wall. +1 Martin smime.p7s Description: S/MIME cryptographic signature

Re: OpenPGP card not working

2011-09-03 Thread Martin Gollowitzer
* David Robertson djpeterrobert...@gmail.com [110903 11:18, mID 4e61eaae.20...@gmail.com]: Hello, I've just bought myself a Gemplus/Gemalto GemPC twin USB smartcard reader and a V2.0 OpenPGP card. I'm running Debian Squeeze. I've set up udev rules as described here

Re: Migrating to Smartcards

2011-08-31 Thread Martin Gollowitzer
* Werner Koch w...@gnupg.org [110831 08:45, mID 877h5uozaa@vigenere.g10code.de]: On Tue, 30 Aug 2011 20:40, go...@fsfe.org said: AFAIR, 3072 bit keys have to be generated on the card. If you use off-card generation, you are limited to 2048 bits. Really? That would be a bug. I

Re: Migrating to Smartcards

2011-08-30 Thread Martin Gollowitzer
Dear Richard, * Richard rich...@r-selected.de [110830 20:30, mID ca+wmqonz0asssnxzh4fgqrofevhqz2gj9xw5p0a0eq55mu-...@mail.gmail.com]: Hello, for security reasons, I have decided to migrate my most important subkeys to smartcards. I have a number of questions regarding the

Re: Offline Master Key

2011-05-02 Thread Martin Gollowitzer
Hi, * patric...@lavabit.com patric...@lavabit.com [110502 16:50, mID 7206.205.174.22.25.1304347651.squir...@lavabit.com]: Hi, I have question on key management and was looking for some feedback. My issue is that I like the idea of having a Master signing key with no expiration date and

Re: GPG not retrieving keys when verifying

2011-04-17 Thread Martin Gollowitzer
* Todd A. Jacobs codegnome.consulting+gnupg@gmail.com [110417 17:14, mID BANLkTin=uajdgvq_ayu6hm_ikrcvdrv...@mail.gmail.com]: I'm not sure how I'm supposed to get GPG to automatically retrieve keys for signatures when validating a key. I'm currently running: gpg

Re: Keyservers

2011-03-21 Thread Martin Gollowitzer
Hi, * Remco Rijnders re...@webconquest.com [110321 07:35, mID 412.a...@winter.webconquest.com]: While I fully agree on bottom posting being preferred, I wonder if it's not a lost battle already. People quoting 'properly' are in such a minority that I don't think this can be changed

Re: Revoke signature from key

2011-03-21 Thread Martin Gollowitzer
* David Shaw ds...@jabberwocky.com [110321 20:28, mID 387f8326-47af-419e-a9a7-7c37d048a...@jabberwocky.com]: On Mar 21, 2011, at 3:02 PM, Mike Acker wrote: Scenario thus far: • Tom Newguy joined my group • Tom created a keypair and sent his PUBLIC key to me • I have

Re: Keyservers

2011-03-20 Thread Martin Gollowitzer
Hi, * Jonathan Ely thaj...@gmail.com [110320 22:18, mID 4d866ead.9080...@gmail.com]: Really? For me, it is much easier to access the newest reply instead of using the Down Arrow key to find it. Gmail always worked the same way for me. You might want to read [1,2,3]. [1]

Re: PGP/MIME considered harmful for mobile

2011-02-27 Thread Martin Gollowitzer
* Doug Barton do...@dougbarton.us [110227 05:30]: If you look at the characteristics of the actual messages encrypted mail is very similar whether it's in-line or MIME. It's signed messages that make things interesting because the signature in a MIME message is actually (sort of) an

Re: [SOLVED] SCR3310 reader working for root, but not scard group

2011-02-27 Thread Martin Gollowitzer
* Todd A. Jacobs codegnome.consult...@gmail.com [110227 04:02]: Here are the steps I needed to take under Ubuntu 10.10 to get this particular reader working properly as a mortal user. You could also have run the script [1] linked from the only up-to-date OpenPGP smartcard howto [2] I'm aware

Re: Smart Card Physical Best Practices?

2011-02-27 Thread Martin Gollowitzer
* Grant Olson k...@grant-olson.net [110227 04:11]: I usually just leave it in until I leave the computer for lunch or a meeting or whatever. Same here, but I always take the card with me if I leave the room. One thing I didn't realize at first, is that once you've unlocked either your

Re: PGP/MIME considered harmful for mobile

2011-02-27 Thread Martin Gollowitzer
* David Tomaschik da...@systemoverlord.com [110227 19:22]: How about inline confuses users who don't know anything about OpenPGP? 100% agreed. Thank you! Martin pgpOXtxwgzgho.pgp Description: PGP signature ___ Gnupg-users mailing list

Re: PGP/MIME considered harmful for mobile

2011-02-27 Thread Martin Gollowitzer
* Robert J. Hansen r...@sixdemonbag.org [110227 20:28]: How about inline confuses users who don't know anything about OpenPGP? 1. Why are you sending them signed emails anyway? I sign *all* my e-mail except for messages sent from my mobile (in that case, my signature tells the receiver why

Re: PGP/MIME considered harmful for mobile

2011-02-25 Thread Martin Gollowitzer
* Patrick Brunschwig patr...@mozilla-enigmail.org [110225 10:10]: On 25.02.11 07:43, Robert J. Hansen wrote: On 2/24/11 10:15 PM, Daniel Kahn Gillmor wrote: my colleague is using the application named email, version 2.2.2 on a stock 2.2.1 motorola droid. My problem is reproducible on a

Re: PGP/MIME considered harmful for mobile

2011-02-25 Thread Martin Gollowitzer
* Robert J. Hansen r...@sixdemonbag.org [110225 07:47]: There are good reasons to prefer a PGP/MIME and S/MIME signature standards over inline PGP. And vice-versa. In inline's defense, it *works*, and PGP/MIME often doesn't. Maybe one should think about *why* this is the case.

Re: PGP/MIME considered harmful for mobile

2011-02-25 Thread Martin Gollowitzer
* Daniel Kahn Gillmor d...@fifthhorseman.net [110225 18:31]: On 02/25/2011 12:11 PM, Martin Gollowitzer wrote: * Patrick Brunschwig patr...@mozilla-enigmail.org [110225 10:10]: The only mail client on Android I know of to handle OpenPGP messages is K9 (together with APG). But K9 only

Re: PGP/MIME considered harmful for mobile (Jameson Rollins)

2011-02-25 Thread Martin Gollowitzer
* Avi avi.w...@gmail.com [110225 19:21]: For those of us who use webmail, inline signatures are rather useful. There are webmail applications supporting PGP/MIME. If yours doesn't, it is not a good one. Inline signatures are not a good thing IMHO. Martin pgpPpk4wPE5Xj.pgp Description: PGP

Re: What is the benefit of signing an encrypted email

2011-01-19 Thread Martin Gollowitzer
Hi Werner, * Werner Koch w...@gnupg.org [110119 19:31]: I'd like to see a feature in MUAs to wrap the entire mail as presented in the composer into a message/rfc822 container and send the actual message out with the same headers as in the rfc822 container. This allows to sign the entire mail

Re: Prosecution based on memory forensics

2011-01-13 Thread Martin Gollowitzer
* freej...@is-not-my.name freej...@is-not-my.name [110113 11:35]: P.S. Robert, how about trimming your line lengths! Apple Mail sucks at this ;) Martin smime.p7s Description: S/MIME cryptographic signature ___ Gnupg-users mailing list

Re: What is the benefit of signing an encrypted email

2011-01-11 Thread Martin Gollowitzer
Hi, * jimbob palmer jimbobpal...@gmail.com [110111 12:05]: In Firefox I can sign or encrypt or encrypt+sign an e-mail. In what case would I want my encrypted emails also signed? Does it provide any additional benefit over a pure encrypted email? A digital signature is useful so the sender

Problems with pcsc-lite 1.6.6 and Cherry ST-2000U

2011-01-11 Thread Martin Gollowitzer
Hi all, Has anyone experienced problems with the most recent version of pcsc-lite (1.6.6) when using an OpenPGP smartcard with GnuPG? My card reader, a Cherry ST-2000U stopped working after I updated my Gentoo system recently (while my SCR335 still works). I tried to do some debugging and