Re: what is GPG's #1 objective: security or anti-patent stance ( Re: on the state of PGP compatibility (2nd try))

2002-04-04 Thread Peter Gutmann
Adam Back <[EMAIL PROTECTED]> writes: >Back in the days of pgp2.x I used to receive and send a fair proportion of >mail encrypted with pgp; these days it is a much lower proportion, and a >rather high proportion of those fail. It's not like I'm using old software or >failing to try what is reaso

Re: on the state of PGP compatibility (2nd try)

2002-04-01 Thread Curt Smith
Old software/source code should always be archived. I am also concerned when new versions of security or cryptography programs are introduced, especially if the source code is unavailable. This problem is very concerning when "subscription" and "live update" services attempt to force increme

Re: on the state of PGP compatibility (2nd try)

2002-04-01 Thread Tim May
On Sunday, March 31, 2002, at 03:08 PM, David Shaw wrote: (Adam Back's tale elided) > > I sympathize with your problems, but frankly (and I suspect you know > this, despite your justified irritation) some of the problems you had > are well beyond the scope of "PGP compatibility". It's not a flaw

Re: what is GPG's #1 objective: security or anti-patent stance ( Re: on the state of PGP compatibility (2nd try))

2002-04-01 Thread David Shaw
On Mon, Apr 01, 2002 at 01:34:35AM +0100, Adam Back wrote: > Hi > > I've trimmed the Cc line a bit as this is now focussing more on GPG > and not adding any thing new technically for the excluded set. > > On Sun, Mar 31, 2002 at 06:08:14PM -0500, David Shaw wrote: > > The OpenPGP spec handles co

RE: on the state of PGP compatibility (2nd try)

2002-04-01 Thread Lucky Green
Adam Back wrote: > So I was trying to decrypt this stored mail sent to me by a > GPG user, and lo pgp6.x failed to decrypt it. [Long story about PGP/gpg version incompatibility elided] If I understand you correctly, you are saying that the latest version of gpg has a bug in that it doesn't supp

what is GPG's #1 objective: security or anti-patent stance ( Re: on the state of PGP compatibility (2nd try))

2002-03-31 Thread Adam Back
Hi I've trimmed the Cc line a bit as this is now focussing more on GPG and not adding any thing new technically for the excluded set. On Sun, Mar 31, 2002 at 06:08:14PM -0500, David Shaw wrote: > The OpenPGP spec handles compatibility issues quite well. > The catch, of course, is that PGP 2.x

Re: on the state of PGP compatibility (2nd try)

2002-03-31 Thread David Shaw
On Sun, Mar 31, 2002 at 06:08:51PM +0100, Adam Back wrote: > [This is actually slightly more accurate and even worse than my first > mail which bounced to some of the lists as I had a typo, _and_ > separately encountered a mail hub outage at cyberpass.net -- apologies > to those who get duplicates

Re: on the state of PGP compatibility (2nd try)

2002-03-31 Thread Vipul Ved Prakash
Adam, See Crypt::OpenPGP. http://rhumba.pair.com/ben/perl/openpgp/ It reads/writes PGP 2.x, 5.x and GNUPG compatible packets, autodetects formats, contains support for almost all ciphers present in various implementations of PGP. cheers, vipul. On Sun, Mar 31, 2002 at 06:08:51PM +0100, Adam Ba

Re: on the state of PGP compatibility (2nd try)

2002-03-31 Thread Morlock Elloi
Getting caught in the upgrade scam is bad in itself. Doing this with crypto software is sin. There are no advances beyond 2.6.2 worth upgrading. If you must, use 5.5.3i and enable only IDEA and RSA/compatible. 2.6.2 runs on dos, integrates with pegasus on windoze, runs on unix and macs. Also, a

on the state of PGP compatibility (2nd try)

2002-03-31 Thread Adam Back
[This is actually slightly more accurate and even worse than my first mail which bounced to some of the lists as I had a typo, _and_ separately encountered a mail hub outage at cyberpass.net -- apologies to those who get duplicates]. So I was trying to decrypt this stored mail sent to me by a GPG