Re: Making the case for smart cards for the average user

2015-03-14 Thread Joey Castillo
I'll concede the first point: some minority of people won't get it even if we make it simpler. As to the second one: even with a password manager, the security of that still depends on choosing and guarding a complex password to secure the password store. It's passwords all the way down. With a

Re: Making the case for smart cards for the average user

2015-03-14 Thread Joey Castillo
On 14/03/15 17:52, Philip Jackson wrote: https://www.kickstarter.com/projects/joeycastillo/signet-simple-online-privacy-cards Geographic distribution of the product seems to be limited to US only - at least for your sponsors. I desperately wanted to make it worldwide, but feared running afoul

Re: Making the case for smart cards for the average user

2015-03-14 Thread Joey Castillo
On 13/03/15 17:20, Robert J. Hansen wrote: (ObWarning: no facts, just opinions.) I think the biggest problem we face, to be honest, is our conviction that there's an answer out there and we just have to find it. ... Thanks for your thoughtful response. I think it's absolutely true that

Re: Enigmail speed geeking

2015-03-14 Thread Peter Lebbing
On 13/03/15 22:33, Robert J. Hansen wrote: And if you don't trust /dev/urandom, I'd suggest using a different operating system, because that's a game-over compromise. I trust both /dev/random and the sanity of the default settings of GnuPG. And when I'm generating a key in GnuPG, I put my

Re: Making the case for smart cards for the average user

2015-03-14 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Friday 13 March 2015 at 8:13:38 PM, in mid:CAAocvpv5ChY9NKpkz0utkiyuNQay2n=dppwcp1z7a0covf6...@mail.gmail.com, Joey Castillo wrote: Unlocking a card with a PIN is a metaphor that people already know and use with bank cards. Yes, and a

Re: gpg in a cybercafé

2015-03-14 Thread flapflap
Jonathan Schleifer: On Thu, 05 Mar 2015 22:27:36 +, flapflap flapf...@riseup.net wrote: The current version (1.3) of Tails comes with GnuPG 1.4.12. That's just not true. Not only is the gpg2 command available, but the change log even explicitly states that GnuPG 2 was added to improve

Re: Making the case for smart cards for the average user

2015-03-14 Thread Philip Jackson
On 13/03/15 21:13, Joey Castillo wrote: Hi there, I'm working on a Kickstarter right now that aims to popularize smart cards as an easier way for the average user to adopt GnuPG. https://www.kickstarter.com/projects/joeycastillo/signet-simple-online-privacy-cards Geographic distribution