Re: Working with a system-shared keyring

2011-08-18 Thread Werner Koch
On Thu, 18 Aug 2011 10:41, sat...@pgpru.com said:

> Same here. Maybe i'm missing something, but it seems without the ability
> to have multiple keyrings in GPG configuration one will lose an ability
> to use detached subkeys (or actually any private keys) stored on a

I am using offline key parts for a long time and iirc, I even
implemeented that.

With 2.1 it is even much easier - there is no more secring.gpg.  All
secret keys are stored as separate files in .gnupg/private-key-v1.d.  If
you want to take a key offline, you only need to remove that.  It is way
easier than what we have now.


Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: OpenPGP parts and plain text in the same email

2011-08-18 Thread Alex (via GPGTools)
Hi there,

On 18.08.2011, at 20:39, Ingo Klöcker wrote:
> why should it support something  strange like a multipart/alternative message 
> with a text/plain part and  a PGP/MIME part.

isn't this what the message "This is an OpenPGP/MIME signed message (RFC 2440 
and 3156)" is about? If this text is shown by an incompatible client it could 
be replaced by the original text.

> Apart from that I'm pretty sure that only very old versions of Outlook 
> [Express] have those problems.

Is there a (reliable) list of incompatible clients?

Best regards, Alex

--
http://gpgtools.org


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: OpenPGP parts and plain text in the same email

2011-08-18 Thread Ingo Klöcker
On Thursday 18 August 2011, Hauke Laging wrote:
> Hello,
> 
> probably all of you know the problem that users of that one ***
> kind of mail client tell you that they cannot read your emails like
> the ones from other people. There was just an "attachment" which
> they have to open in order to read the text. And of course, that
> other one attachment with nonsense data...
> 
> This is more an email question than a GnuPG question: Mail clients
> are capable of sending both an HTML and a plain text version of the
> content within one email. I wonder whether it is possible to send
> emails in the same way with a plain text part and an alternative
> PGP/MIME part. "Solving" the outlook problem this way might increase
> the acceptance of OpenPGP.

It is certainly possible to do this, but
- I doubt that any existing mail client supports this out-of-the box
- it might not help because apparently this one mail client does not 
handle multipart-mime correctly, so why should it support something 
strange like a multipart/alternative message with a text/plain part and 
a PGP/MIME part.

I don't think it's worth the effort thinking about this. In fact, it 
might be better to ignore the problem because everytime a user of such a 
mail client asks you why you've sent him such a strange message you can 
tell him that his mail client is broken and that he'd be much better off 
with standard-compliant mail client .

Apart from that I'm pretty sure that only very old versions of Outlook 
[Express] have those problems.


Regards,
Ingo


signature.asc
Description: This is a digitally signed message part.
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Working with a system-shared keyring

2011-08-18 Thread Vlad "SATtva" Miller
Doug Barton:
> On 08/09/2011 02:38, Werner Koch wrote:
>> On Fri, 10 Jun 2011 20:43, do...@dougbarton.us said:
>>
 But fixes a lot of problems.  The keyring is a database and if we
 distribute this database to several files without a way to sync them;
 this leads to problems.  You may have not been affected by such problems
 but only due to the way you use gpg.
>>>
>>> Can you elaborate on those problems? I can think of several examples
>>> of databases whose contents are stored in multiple files without any
>>> difficulty, so I'm curious.
>>
>> But in those cases the files are either under the control of the
>> database or partitioned using a well defined scheme.  With the --keyring
>> option this is different: You may add several keyrings to GnuPG and
>> remove them later.  There is no way GPG can tell whether there are
>> duplicates or which instances of a duplicated entry it needs to update.
>> Sure, we could make this working but I it will get really complex.  Thus
>> it is far easier to have one file or set of files which are under the
>> sole control of GPG.
> 
> Easier to code maybe. But I still maintain that losing the ability to
> have multiple keyrings will be a significant loss of functionality for
> the user. Significant enough for me that I would likely go back to the
> 1.4 branch (with regrets, since I like some of the functionality that is
> provided in 2.x now).

Same here. Maybe i'm missing something, but it seems without the ability
to have multiple keyrings in GPG configuration one will lose an ability
to use detached subkeys (or actually any private keys) stored on a
removable USB drive for example. Does smartcards become the only
approved and *supported* way for non-local storage of private keys?


-- 
Vlad "SATtva" Miller
3d viz | security & privacy consulting
www.vladmiller.info | www.pgpru.com


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


OpenPGP parts and plain text in the same email

2011-08-18 Thread Hauke Laging
Hello,

probably all of you know the problem that users of that one *** kind of 
mail client tell you that they cannot read your emails like the ones from 
other people. There was just an "attachment" which they have to open in order 
to read the text. And of course, that other one attachment with nonsense 
data...

This is more an email question than a GnuPG question: Mail clients are capable 
of sending both an HTML and a plain text version of the content within one 
email. I wonder whether it is possible to send emails in the same way with a 
plain text part and an alternative PGP/MIME part. "Solving" the outlook 
problem this way might increase the acceptance of OpenPGP.


Hauke
-- 
PGP: D44C 6A5B 71B0 427C CED3 025C BD7D 6D27 ECCB 5814


signature.asc
Description: This is a digitally signed message part.
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users