Re: A Quick Supplement

2017-07-16 Thread Daniel Villarreal
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/14/17 13:56, Peter Lebbing wrote: > There's an option missing that could cause data loss in its > absence: > > $ gpg --armor --export > pub.asc > > I'd make that: > > $ gpg --armor --export-options export-local-sigs --export >pub.asc > > I

Re: gpg-agent/pinentry: How to verify calling application

2017-07-16 Thread Hartmut Knaack
Werner Koch schrieb am 16.07.2017 um 21:17: > On Sun, 16 Jul 2017 09:30, d...@fifthhorseman.net said: > >> I don't think there's currently any plan to do anything like this, but > > Actually this is implemented since GnuPG 2.1.19 (Debian has 2.1.18, > though) when used withwith a pinentry from Gi

Re: gpg-agent/pinentry: How to verify calling application

2017-07-16 Thread Hartmut Knaack
Shawn K. Quinn schrieb am 16.07.2017 um 09:48: > On 07/15/2017 09:02 AM, Hartmut Knaack wrote: >> Hi, >> on my machine running Linux and a recent KDE/Plasma, pinentry-qt >> occasionally starts right after logging in and asks for my passphrase. >> Is there any way to track down, which process asks g

Re: use policy of the GnuPG-card

2017-07-16 Thread Peter Lebbing
On 16/07/17 21:25, Matthias Apitz wrote: > Why we only have a counter for the signing key? I don't think a decryption counter makes sense as you'll decrypt the same data multiple times (a signature is made only once). An authentication counter would make more sense. However, you can't collect all

Re: gpg-agent/pinentry: How to verify calling application

2017-07-16 Thread Werner Koch
On Sun, 16 Jul 2017 09:30, d...@fifthhorseman.net said: > I don't think there's currently any plan to do anything like this, but Actually this is implemented since GnuPG 2.1.19 (Debian has 2.1.18, though) when used withwith a pinentry from Git after 2017-02-03. There you will see in the titlebar

Re: use policy of the GnuPG-card

2017-07-16 Thread Matthias Apitz
El día jueves, julio 13, 2017 a las 03:57:47p. m. +0200, Werner Koch escribió: > ... > > For the signing key we have a signature counter and if you can memorize > the count and the number of signatures you did, you have a way to detect > malicious use of that key. Better malware could of course

Re: How to use a the same generated keypair on enigmail/thunderbird and iOS Mail

2017-07-16 Thread Jürgen Polster
As said by Fabian, IOS natively only supports S/ MIME keys. This works rather seamlessly. You nearly do not notice it. However to exchange or DELETE outdated S/MIME certificates of others is a real pain and made me stop working with it. The IOS apps for working with openpg encryption are iPGMail

Re: How to use a the same generated keypair on enigmail/thunderbird and iOS Mail

2017-07-16 Thread Fabian A. Santiago
July 16, 2017 11:41 AM, "E.Keen" wrote: > Dear community, > > I am very passionate about cyber security and working against mass > surveillance. I therefore try to stay informed about security > measurements and encryption. > > Nevertheless, I do have a problem which I cannot solve by myself. >

How to use a the same generated keypair on enigmail/thunderbird and iOS Mail

2017-07-16 Thread E.Keen
Dear community, I am very passionate about cyber security and working against mass surveillance. I therefore try to stay informed about security measurements and encryption. Nevertheless, I do have a problem which I cannot solve by myself. I generated a keypair using enigmail on thunderbird fo

Re: gpg-agent/pinentry: How to verify calling application

2017-07-16 Thread Shawn K. Quinn
On 07/15/2017 09:02 AM, Hartmut Knaack wrote: > Hi, > on my machine running Linux and a recent KDE/Plasma, pinentry-qt > occasionally starts right after logging in and asks for my passphrase. > Is there any way to track down, which process asks gpg-agent for my private > key? Preferably, I would li

Re: gpg-agent/pinentry: How to verify calling application

2017-07-16 Thread Daniel Kahn Gillmor
On Sat 2017-07-15 16:02:22 +0200, Hartmut Knaack wrote: > on my machine running Linux and a recent KDE/Plasma, pinentry-qt > occasionally starts right after logging in and asks for my passphrase. > Is there any way to track down, which process asks gpg-agent for my private > key? Preferably, I woul