Re: Working with a system-shared keyring
On Thu, 18 Aug 2011 10:41, sat...@pgpru.com said: > Same here. Maybe i'm missing something, but it seems without the ability > to have multiple keyrings in GPG configuration one will lose an ability > to use detached subkeys (or actually any private keys) stored on a I am using offline key parts for a long time and iirc, I even implemeented that. With 2.1 it is even much easier - there is no more secring.gpg. All secret keys are stored as separate files in .gnupg/private-key-v1.d. If you want to take a key offline, you only need to remove that. It is way easier than what we have now. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: OpenPGP parts and plain text in the same email
Hi there, On 18.08.2011, at 20:39, Ingo Klöcker wrote: > why should it support something strange like a multipart/alternative message > with a text/plain part and a PGP/MIME part. isn't this what the message "This is an OpenPGP/MIME signed message (RFC 2440 and 3156)" is about? If this text is shown by an incompatible client it could be replaced by the original text. > Apart from that I'm pretty sure that only very old versions of Outlook > [Express] have those problems. Is there a (reliable) list of incompatible clients? Best regards, Alex -- http://gpgtools.org ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: OpenPGP parts and plain text in the same email
On Thursday 18 August 2011, Hauke Laging wrote: > Hello, > > probably all of you know the problem that users of that one *** > kind of mail client tell you that they cannot read your emails like > the ones from other people. There was just an "attachment" which > they have to open in order to read the text. And of course, that > other one attachment with nonsense data... > > This is more an email question than a GnuPG question: Mail clients > are capable of sending both an HTML and a plain text version of the > content within one email. I wonder whether it is possible to send > emails in the same way with a plain text part and an alternative > PGP/MIME part. "Solving" the outlook problem this way might increase > the acceptance of OpenPGP. It is certainly possible to do this, but - I doubt that any existing mail client supports this out-of-the box - it might not help because apparently this one mail client does not handle multipart-mime correctly, so why should it support something strange like a multipart/alternative message with a text/plain part and a PGP/MIME part. I don't think it's worth the effort thinking about this. In fact, it might be better to ignore the problem because everytime a user of such a mail client asks you why you've sent him such a strange message you can tell him that his mail client is broken and that he'd be much better off with standard-compliant mail client . Apart from that I'm pretty sure that only very old versions of Outlook [Express] have those problems. Regards, Ingo signature.asc Description: This is a digitally signed message part. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Working with a system-shared keyring
Doug Barton: > On 08/09/2011 02:38, Werner Koch wrote: >> On Fri, 10 Jun 2011 20:43, do...@dougbarton.us said: >> But fixes a lot of problems. The keyring is a database and if we distribute this database to several files without a way to sync them; this leads to problems. You may have not been affected by such problems but only due to the way you use gpg. >>> >>> Can you elaborate on those problems? I can think of several examples >>> of databases whose contents are stored in multiple files without any >>> difficulty, so I'm curious. >> >> But in those cases the files are either under the control of the >> database or partitioned using a well defined scheme. With the --keyring >> option this is different: You may add several keyrings to GnuPG and >> remove them later. There is no way GPG can tell whether there are >> duplicates or which instances of a duplicated entry it needs to update. >> Sure, we could make this working but I it will get really complex. Thus >> it is far easier to have one file or set of files which are under the >> sole control of GPG. > > Easier to code maybe. But I still maintain that losing the ability to > have multiple keyrings will be a significant loss of functionality for > the user. Significant enough for me that I would likely go back to the > 1.4 branch (with regrets, since I like some of the functionality that is > provided in 2.x now). Same here. Maybe i'm missing something, but it seems without the ability to have multiple keyrings in GPG configuration one will lose an ability to use detached subkeys (or actually any private keys) stored on a removable USB drive for example. Does smartcards become the only approved and *supported* way for non-local storage of private keys? -- Vlad "SATtva" Miller 3d viz | security & privacy consulting www.vladmiller.info | www.pgpru.com ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
OpenPGP parts and plain text in the same email
Hello, probably all of you know the problem that users of that one *** kind of mail client tell you that they cannot read your emails like the ones from other people. There was just an "attachment" which they have to open in order to read the text. And of course, that other one attachment with nonsense data... This is more an email question than a GnuPG question: Mail clients are capable of sending both an HTML and a plain text version of the content within one email. I wonder whether it is possible to send emails in the same way with a plain text part and an alternative PGP/MIME part. "Solving" the outlook problem this way might increase the acceptance of OpenPGP. Hauke -- PGP: D44C 6A5B 71B0 427C CED3 025C BD7D 6D27 ECCB 5814 signature.asc Description: This is a digitally signed message part. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users