RE: New GUI frontend for windows

2013-12-26 Thread Alice Bob
> Maybe you have written this for a newer Windows version than my XP.I did try > it on XP without noticeable problems. Besides the 'unexpected' behavior, did > you have any other issues? > But the key has the > unexpected UID Yes, if you don't specify a name a 'random' one will be chosen for you,

Re: New GUI frontend for windows

2013-12-26 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Wednesday 25 December 2013 at 12:49:47 PM, in , Alice Bob wrote: > I wanted > something to quickly load the key, encrypt the message, > and send it away. It is closed source, unlimited > trialware. Ty. Maybe you have written this for a n

Re: Possible to combine smartcard PIN with key password?

2013-12-26 Thread adrelanos
Peter Lebbing: > The result is that the on-disk key again adds nothing, > because an adversary that can physically access the smartcard can also > physically access the computer. The latter often requires breaking into a flat or an office. While smartcards are carried around. Breaking into a a fla

Re: Possible to combine smartcard PIN with key password?

2013-12-26 Thread adrelanos
NdK: > Il 24/12/2013 02:41, adrelanos ha scritto: > >> Adversary capabilities: >> - Can physically steal the smartcard. >> - Capable of dismantling a smartcard to extract the key its holing. >> [Maybe not now, but maybe in a few years the tool required to so so will >> be available. Only making up

Re: New GUI frontend for windows

2013-12-26 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Wednesday 25 December 2013 at 10:05:43 PM, in , Doug Barton wrote: > Not to mention it's dramatically more difficult (some > would argue impossible) to develop trust in a > pseudonym. I say it makes no difference whether somebody goes by

Re: Possible to combine smartcard PIN with key password?

2013-12-26 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Tuesday 24 December 2013 at 10:23:14 AM, in , Peter Lebbing wrote: > Even if you keep a tiny computer on your > lanyard (easy to realise these days), that still leaves > the keyboard. Some of the laser projection virtual keyboard units are

Re: Printing PGP Businesscard

2013-12-26 Thread Daniel Kahn Gillmor
On 12/26/2013 03:01 PM, Avi wrote: > Would having the e-mail address and name in the QR code adversely affect > compatibility with monkeysign? > For example, see the attached code which is similar to what I was playing > with for key-signing purposes, although I was going to print them on > mailing

Trustworthy encryption - step one...

2013-12-26 Thread Erik Josefsson
It has taken 6 months to get here, but now it is happening! Please propagate: http://www.greens-efa.eu/software-procurement-11372.html Anyone at CCC interested in this, please ping me. God Jul! :-) //Erik Erik Josefsson BE GSM: +32484082063 SE GSM: +46707696567 __

Re: Printing PGP Businesscard

2013-12-26 Thread Avi
Would having the e-mail address and name in the QR code adversely affect compatibility with monkeysign? For example, see the attached code which is similar to what I was playing with for key-signing purposes, although I was going to print them on mailing labels. [image: Inline image 2] Avi

Re: Rosetta CryptoPad released

2013-12-26 Thread Robert J. Hansen
- as far as I see the Rosetta CryptoPad tool is open source, why do you spread wrong info. Because I had it conflated with Encreep, a similar tool that was also recently posted here. That's the closed-source one. My apologies to those who feel I've misled them. - if I understood it righ

Re: Printing PGP Businesscard

2013-12-26 Thread Daniel Kahn Gillmor
On 12/24/2013 01:02 PM, Johan Wevers wrote: > You think someone will type it over? KeyID plus a URL would be more > usefull IMO (perhaps a QR code with the URL?) Please use a QR code that contains the full fingerprint (no spaces) prefixed with OPENPGP4FPR: -- this is the mechanism used by the monk

Re: Rosetta CryptoPad released

2013-12-26 Thread Randolph
Hi Rob, okay, one short reply: - if I understood it right, both use the same lib? and similar principle - communities appreciates to learn for and from each other, exchange and dialogue is the goal of a mailinglist - as far as I see the Rosetta CryptoPad tool is open source, why do you spread wrong

Re: Rosetta CryptoPad released

2013-12-26 Thread Robert J. Hansen
it is not about the tool, it is about the method, if you look at session based D/H key Exchange... So what? How is GoldBug relevant to GnuPG? As near as I can tell it has no relevance, which causes me to wonder why the author(s) of it keep on introducing messages that refer to it. It has

Re: Fwd: Rosetta CryptoPad released

2013-12-26 Thread Randolph
Hi Peter and Robert, it is not about the tool, it is about the method, if you look at session based D/H key Exchange.. , with the Exchange of the public key in the past you easily can copy paste the ciphertext to any chat and such a crypt tool is a universal thing to use in any chat or email progra

Re: Fwd: Rosetta CryptoPad released

2013-12-26 Thread Randolph
Hi Peter and Robert, Ist not ab > I really wouldn't mind never reading about this CryptoPad thingy in this > mailing list. I can't shake the feeling it's only discussed to give it a > podium in the mailing list of a reputable cryptography tool. > > Peter. >

Re: New GUI frontend for windows

2013-12-26 Thread Robert J. Hansen
I really wish people would read my emails before responding to them. > I certainly don't want to start a flame war here; however, if you > are so unequivocally anti proprietary software... I'm not, as I said in that message -- a part which you quoted, even: >> I don't find closed-source software

Re: The Presidential Commission

2013-12-26 Thread Robert J. Hansen
On 12/26/2013 7:23 AM, Johan Wevers wrote: > OK, and are changes made? Or is this just another promise like the one > to close the torture prison at Guantanamo Bay? I'm not going to dignify that last one with an answer. As to your first question, no changes have been made yet. It's only been a c

Re: The Presidential Commission

2013-12-26 Thread Johan Wevers
On 21-12-2013 2:43, Robert J. Hansen wrote: > The President's commission on the NSA was expected to give a whitewash > of the program. They definitely didn't. When the recently-retired #2 > at the CIA tells the President, "you're screwing up and reforms need to > be made immediately over at NSA,

Re: New GUI frontend for windows

2013-12-26 Thread Johan Wevers
On 26-12-2013 13:00, Jerry wrote: > I certainly don't want to start a flame war here; however, if you are so > unequivocally anti proprietary software, then why do you even allow a > version of your product to be created that will run on it. That is > certainly not a consistent approach. Most peo

Re: New GUI frontend for windows

2013-12-26 Thread Jerry
On Wed, 25 Dec 2013 19:04:22 -0500, Ryan Sawhill stated: > > I wanted to create an easy to use gui for GnuPG. Without installing, > > choosing options, and just working from the get-go. > > I appreciate your sentiment but I absolutely agree with what everyone > else has said. Expecting people to

Re: New GUI frontend for windows

2013-12-26 Thread Jerry
On Wed, 25 Dec 2013 12:50:50 -0500, Robert J. Hansen stated: > On 12/25/2013 7:49 AM, Alice Bob wrote: > > It is closed source, unlimited trialware. > > (a) If you're asking people to provide feedback and bug reports for > closed-source software, you're asking people to help you make a buck > wit