Re: GPG on Android

2018-11-04 Thread john doe 
On 11/4/2018 10:55 PM, Roland wrote:
> Hello list,
> 
> I share the wish for encrypted email on Android, but I am afraid of storing a 
> secret key on my android phone. (theft, hacking, loss, etc) 

In case of theft/lost using subkey is somewhat easier because you can
revoke that subkey only.

-- 
John Doe

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: GPG on Android

2018-11-04 Thread vedaal via Gnupg-users 



On 11/4/2018 at 4:58 PM, "Roland"  wrote:
>
>Hello list,
>
>I share the wish for encrypted email on Android, but I am afraid 
>of storing a secret key on my android phone. (theft, hacking, 
>loss, etc) 
>
>How do you feel about that?

=

Exactly the same way.

Android phones (software) are made by Google.
Google archives data from every source connecting to one of its applications, 
Chrome, search engine, gmail, etc.

I don't trust them, and have no way of verifying any claim of what they do, or 
do not, store.

Also, if you have any app that required 'rooting' of your phone, then even 
Google doesn't trust it, and expressly says that it will not guarantee false 
(malicious) expenditures by Google Wallet. 

So the 'rooted' app probably does have access to your android gnupg data.


Annoying, I know,  to not use gnupg on android, but prudently safe.

fwiw,  the gnupg apps work well on android, but I just don't trust the phone.


vedaal





___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: GPG on Android

2018-11-04 Thread Juergen Bruckner 
Hello Roland,

I for myself did configure MailDroid that way, that for each
crypto-operation, decrypt, sign, encrypt I have to enter my passwort
each time.

With pincards on Android I have absolutely NO experience, but im sure,
one of our fellow list members can give you a answer on this specific
question.

best regards
Juergen

Am 04.11.18 um 22:55 schrieb Roland:
> Hello list,
> 
> I share the wish for encrypted email on Android, but I am afraid of storing a 
> secret key on my android phone. (theft, hacking, loss, etc) 
> 
> How do you feel about that?
> 
> Could a pincard be connected via micro USB? And made to work?
> 
> Greetz
> Roland 
> 
> 
> ___
> Gnupg-users mailing list
> Gnupg-users@gnupg.org
> http://lists.gnupg.org/mailman/listinfo/gnupg-users
> 

-- 
Juergen M. Bruckner
juer...@bruckner.tk



smime.p7s
Description: S/MIME Cryptographic Signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

GPG on Android

2018-11-04 Thread Roland 
Hello list,

I share the wish for encrypted email on Android, but I am afraid of storing a 
secret key on my android phone. (theft, hacking, loss, etc) 

How do you feel about that?

Could a pincard be connected via micro USB? And made to work?

Greetz
Roland 
-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Slightly OT - i need the proper wording for a signed document

2018-11-04 Thread Stefan Claas 
On Sat, 3 Nov 2018 17:48:41 +0100, Stefan Claas wrote:

> I think this may be also a good thing if it would be accepted
> by the PGP community, say if someone lost his/her GnuPG
> revocation certificate and passphrase for his/her secret key
> that one could sign a document too containing the key data
> etc., like i proposed with my intial posting.

And i just did that, as little example, of how a document could
look like. The files can be downloaded from my keybase account.



First i signed the document with my qualified certificate and then gave
it a qualified time stamp. Finally i detached signed the .pdf with my
current key and after this i time stamped the detached sig with the
opentimestamp.org service.

Please note the attestation on opentimestamp.org is currently pending.

Maybe this example could be useful for other people too.

Critics and comments are welcome!

Regards
Stefan

-- 
https://www.behance.net/futagoza
https://keybase.io/stefan_claas


pgpWxswLxkjeO.pgp
Description: Digitale Signatur von OpenPGP
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: GPG on Android

2018-11-04 Thread Juergen Bruckner 
Hello All,

in this topic I forgot to mention another android-mail-app.
Thanks to Chris for the hint!

This app is from an austria developer (rundquadarat OG) and called
"R2Mail 2" [1]. It has fully GPG and X.509 (aka S/MIME) support.
This app comes in a test version with limited functions and has a
licence key [2] to buy for full functions. With a price around 5 EUR it
is not that expensive.

The developer was in a parental leave - which i knewed - and should be
back to office now.

best regards
Juergen


[1]
https://play.google.com/store/apps/details?id=at.rundquadrat.android.r2mail2
[2]
https://play.google.com/store/apps/details?id=at.rundquadrat.android.r2mail2license

-- 
Juergen M. Bruckner
juer...@bruckner.tk



smime.p7s
Description: S/MIME Cryptographic Signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: GPG on Android

2018-11-04 Thread Juergen BRUCKNER 
Hello!

Sorry for late reply, your message was classified as spam :(

Am 04.11.18 um 10:04 schrieb gnupgpac...@on.yourweb.de:
> 
> Hello Juergen,
> thanks for kind explanation about MailDroid :)
> 
Youre very welcome

> Does MailDroid support several different mail accounts using GPG and/or
> S/Mime?
> 
Yes, MailDroid does support several different mail accounts.
You can mix the crypto functions with each account, means you can use
GPG for account A and C, S/MIME for B and combine GPG and S/MIME for D.

I personally recommend the paid version of MailDroid, named "MailDroid
pro" as it has a bit more functions than the free app.
The costs are around 8-10 EUR.

Be aware that you need also the Flipdog CryptoPlugin, in which you
manage keys and certs. It has its own certificate store and acess the
device store as well.

> I am using K9-Mail in conjunction with CipherMail for S/Mime, but CiperMail
> only supports *one* S/Mime account...

Yes this problem is well known

> Thx and regards!
> 
> 

If you have any questions please do not hesitate to write me. you can
also write directly if you prefer.

best regards from Austria
Juergen



>> --
>>
>> Message: 5
>> Date: Sat, 3 Nov 2018 19:13:52 +0100
>> From: Juergen BRUCKNER 
>> To: gnupg-users@gnupg.org
>> Subject: Re: GPG on Android
>> Message-ID: 
>> Content-Type: text/plain; charset="utf-8"
>>
>> Hello Masha,
>>
>> as you are new to this whole topic, I guess the easiest way to use
>> encrypted mail (either GPG and/or S/MIME) on a Android device would be
>> the app "MailDroid".
>> It comes in a free version[1] (with advertisings) and in a "pro"
>> version[2] (without advertisings) and supports both GPG and S/MIME.
>> MailDroid also supports POP and IMAP, and works fine with Googlemail.
>>
>> You need to install the additional Flipdog CryptoPlugin[3] on your
>> device, where you import and manage the keys.
>> You have to create the keys for example on a desktop computer and import
>> it to your android device and into the CryptoPlugin.
>>
>> I use MailDroid since several years without any problems, and can fully
>> recommend it for beginners.
>>
>> There is also a app named "K-9 Mail"[4], which supports GPG (but not
>> S/MIME). As far I know you also need several additional software for K-9
>> Mail.
>> In my eyes its not really recommendable for beginners. I tried it years
>> ago and found it a bit complicated to use for myself. But thats a
>> personal opinion.
>>
>> The best would be to try both, MailDroid and K-9 Mail and then make your
>> personal choice.
>> If you need help with MailDroid you can contact me. For K-9 Mail I am
>> sure that here are also some people who can help you with it.
>>
>> best regards
>> Juergen
>>
>> [1] https://play.google.com/store/apps/details?id=com.maildroid
>> [2] https://play.google.com/store/apps/details?id=com.maildroid.pro
>> [3]
>> https://play.google.com/store/apps/details?id=com.flipdog.crypto.plugin
>> [4] https://play.google.com/store/apps/details?id=com.fsck.k9
>>
> 

-- 
Juergen M. Bruckner
juer...@bruckner.tk



smime.p7s
Description: S/MIME Cryptographic Signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

GPG on Android

2018-11-04 Thread gnupgpacker 


Hello Juergen,
thanks for kind explanation about MailDroid :)

Does MailDroid support several different mail accounts using GPG and/or
S/Mime?

I am using K9-Mail in conjunction with CipherMail for S/Mime, but CiperMail
only supports *one* S/Mime account...

Thx and regards!


> --
> 
> Message: 5
> Date: Sat, 3 Nov 2018 19:13:52 +0100
> From: Juergen BRUCKNER 
> To: gnupg-users@gnupg.org
> Subject: Re: GPG on Android
> Message-ID: 
> Content-Type: text/plain; charset="utf-8"
> 
> Hello Masha,
> 
> as you are new to this whole topic, I guess the easiest way to use
> encrypted mail (either GPG and/or S/MIME) on a Android device would be
> the app "MailDroid".
> It comes in a free version[1] (with advertisings) and in a "pro"
> version[2] (without advertisings) and supports both GPG and S/MIME.
> MailDroid also supports POP and IMAP, and works fine with Googlemail.
> 
> You need to install the additional Flipdog CryptoPlugin[3] on your
> device, where you import and manage the keys.
> You have to create the keys for example on a desktop computer and import
> it to your android device and into the CryptoPlugin.
> 
> I use MailDroid since several years without any problems, and can fully
> recommend it for beginners.
> 
> There is also a app named "K-9 Mail"[4], which supports GPG (but not
> S/MIME). As far I know you also need several additional software for K-9
> Mail.
> In my eyes its not really recommendable for beginners. I tried it years
> ago and found it a bit complicated to use for myself. But thats a
> personal opinion.
> 
> The best would be to try both, MailDroid and K-9 Mail and then make your
> personal choice.
> If you need help with MailDroid you can contact me. For K-9 Mail I am
> sure that here are also some people who can help you with it.
> 
> best regards
> Juergen
> 
> [1] https://play.google.com/store/apps/details?id=com.maildroid
> [2] https://play.google.com/store/apps/details?id=com.maildroid.pro
> [3]
> https://play.google.com/store/apps/details?id=com.flipdog.crypto.plugin
> [4] https://play.google.com/store/apps/details?id=com.fsck.k9
> 


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users