Re: Signing (and Encrypting) Mails with gpg like DKIM

2024-08-31 Thread Stuart Longland via Gnupg-users
[Re-send with correct from: address… apologies to the moderators for the noise] On 1/9/24 15:55, Marco Moock via Gnupg-users wrote: Is there a limit for DNS records? In theory, probably not. In practice, most definitely, especially if you don't "own" the DNS server. I don't see a problem

Re: Signing (and Encrypting) Mails with gpg like DKIM

2024-08-31 Thread Stuart Longland via Gnupg-users
On 1/9/24 15:42, Marco Moock wrote: It would be possible to sign DKIM at the MUA, but this is not common. With the selectors, each user could have its own selector and private key. Given the public key is published in DNS records, could you imagine the hot mess that'd create for domains with

Re: Signing (and Encrypting) Mails with gpg like DKIM

2024-08-31 Thread Stuart Longland via Gnupg-users
On 1/9/24 02:29, T. S. wrote: after looking into DKIM details, I started searching, why the same procedure cannot be used for gpg? DKIM signs emails that are sent server-to-server. It does not perform encryption of the email (that is done by the sending server sending the `STARTTLS` SMTP com

Re: Clearsign

2024-03-07 Thread Stuart Longland via Gnupg-users
On 8/3/24 01:24, mr_shortchange wrote: It's very kind of you. I try to answer your questions down below. Please help me. Thank you. To: Stuart Longland From: mr_shortchange You forgot to include the list. To or CC should include: gnupg-users@gnupg.org Using "Reply All" should fix that.

Re: Clearsign

2024-03-07 Thread Stuart Longland via Gnupg-users
On 7/3/24 03:31, mr_shortchange via Gnupg-users wrote: Dear Fellows! Importing my private key is flawless but signing is faulty. May I ask for your help? Okay, a big tip… don't ask to ask, just ask. All we know is you have a problem with generating signatures, and apparently your key is "fla

Re: Dear sirs and ladies

2023-08-23 Thread Stuart Longland via Gnupg-users
On 23/8/23 23:57, isp_stream via Gnupg-users wrote: I need to generate a: -CA Certificate -User certificate - Private key For jami. Is this possible woth gnupg? No, you need `openssl` for that. -- Stuart Longland (aka Redhatter, VK4MSL) I haven't lost my mind... ...it's backed up on a ta

Re: Gnupg-users Digest, Vol 227, Issue 11

2022-08-17 Thread Stuart Longland via Gnupg-users
On Wed, 17 Aug 2022 12:42:29 -0400 Rhett via Gnupg-users wrote: > Please Help me get off this > I have tried but not working > Please On your behalf, I have visited https://lists.gnupg.org/mailman/options/gnupg-users - entered your email address and clicked Unsubscribe. There should be a confir

Re: Backing up your PGP key by hand

2022-05-22 Thread Stuart Longland via Gnupg-users
On Tue, 03 May 2022 19:52:21 + (UTC) Matt Borja wrote: > Does exporting your private key (which already comes encrypted and requires > password authentication) to encrypted USB flash drive then placed under > lock and key not suffice as an offline backup? If the USB flash drive does not fail

Re: Digital Signature Verification

2022-04-05 Thread Stuart Longland via Gnupg-users
On Wed, 6 Apr 2022 10:47:07 +0530 Vishal Rana via Gnupg-users wrote: > But not sure how to decode imported ascii armor public key in above format. > I tried to find in gnupg documents but not able to get information. > Please suggest. https://datatracker.ietf.org/doc/html/rfc4880#section-6.2 des

Re: GnuPG - signed Telefax communication

2022-01-14 Thread Stuart Longland via Gnupg-users
On Fri, 14 Jan 2022 22:32:49 + Стефан Васильев wrote: > Ah ok, you referred to encoding key material. Not explicitly… as I said, you may be able to adapt that other project to store other things (e.g. the digitally signed documents discussed). > I just did a quick look and found this, which

Re: GnuPG - signed Telefax communication

2022-01-14 Thread Stuart Longland via Gnupg-users
On Fri, 14 Jan 2022 20:50:57 + Стефан Васильев wrote: > Stuart Longland wrote: > > > On Fri, 14 Jan 2022 17:54:56 + > > Стефан Васильев via Gnupg-users wrote: > > > >> > If QR is an option, why not encode the entire message in QR? > >> > >> I thought about that too, but in case th

Re: GnuPG - signed Telefax communication

2022-01-14 Thread Stuart Longland via Gnupg-users
On Fri, 14 Jan 2022 17:54:56 + Стефан Васильев via Gnupg-users wrote: > > If QR is an option, why not encode the entire message in QR? > > I thought about that too, but in case the document would be several > pages long and would not fit into a QR-code. Ok, one can split the > large docume

Re: Translation: Key Management - BSI had send private key instead of public key

2021-11-18 Thread Stuart Longland via Gnupg-users
On Thu, 18 Nov 2021 08:58:05 +0100 Keine Eile wrote: > BSI was still using keys months after the incident > At first, the incident was not taken seriously at the BSI. The person to whom > the key was sent immediately informed the authorities. But the BSI continued > to use the key for several m

[OT] English [was Re: Key Management - BSI had send private key instead of public key]

2021-11-18 Thread Stuart Longland via Gnupg-users
On Thu, 18 Nov 2021 10:48:55 +0100 Rainer Fiebig via Gnupg-users wrote: > That's kind of a misconception: as English is a western germanic > language it's not that German made its way into English but English is > *based* on German. Ahh true, to the purists, English is not a language… it's a com

Re: Key Management - BSI had send private key instead of public key

2021-11-17 Thread Stuart Longland via Gnupg-users
On Tue, 16 Nov 2021 23:17:58 + Стефан Васильев via Gnupg-users wrote: > [1] > https://www.golem.de/news/verschluesselung-bsi-verschickt-privaten-pgp-schluessel-2111-161073.html Is there an English translation of this article somewhere? I never learned German beyond what made its way into t

Using gpgsm+scute with p11tool

2021-11-07 Thread Stuart Longland via Gnupg-users
Hi all, I'm trying to get 2FA HTTP client authentication working with a YubiKey 5 hardware token at my workplace. I currently already have the YubiKey working successfully with GnuPG 2.2 in OpenPGP mode for two-factor SSH authentication and git code signing. Aside from a few niggles (like not be

Getting OpenSC PKCS#11 and GnuPG to play nice with a YubiKey 5

2021-10-30 Thread Stuart Longland via Gnupg-users
Hi all, At my workplace, we've recently adopted YubiKeys as a means for doing 2FA, I've been using mine for 2FA-based authentication with OpenSSH servers (using `gpg-agent` and the YubiKey OpenPGP applet), and we plan to use the PIV component of these keys to authenticate with some HTTPS services.

Re: Using gpg to add digital signature to a linux executable

2021-10-26 Thread Stuart Longland via Gnupg-users
On Tue, 26 Oct 2021 16:08:56 +0100 Andrew Marlow via Gnupg-users wrote: > For some time now where I work there has been a rule saying "thou shalt add > a digital signature to every executable and shared library when shipping > software designed to run on Windows". This is quite doable and all is

Re: Using GnuPG on Linux desktops with GUI

2021-10-14 Thread Stuart Longland via Gnupg-users
On Thu, 14 Oct 2021 22:06:03 +0800 Turritopsis Dohrnii Teo En Ming via Gnupg-users wrote: > I am using Linux desktops with GUI and GUI mail clients as well. > > I understand GNU Privacy Guard (GnuPG) is a free and open source > command line tool. > > How do I use it with a GUI mail client to si