Re: a step in the right direction

2018-01-15 Thread listo factor via Gnupg-users
On 01/16/2018 01:17 AM, Robert J. Hansen - r...@sixdemonbag.org wrote: The SKS community has been discussing a considerably worse nightmare scenario for the past seven years. Considering the possibility that this particular system will be forced to conform to a more contemporary (and I would

Re: a step in the right direction

2018-01-15 Thread Robert J. Hansen
> I would never allow my opinion of what are the "good places" and what > are the "bad places" to enter into a technical discussion. > (On immigration, or on security engineering). I think you'll have a hard time convincing people that when speaking about human rights activists in North Korea,

Re: a step in the right direction

2018-01-15 Thread listo factor via Gnupg-users
On 01/15/2018 10:45 PM, Robert J. Hansen - r...@sixdemonbag.org wrote: Which would be step in the right direction when compared with the current situation. ..> First, people in bad places like Syria and Iran lose the ability to... I would never allow my opinion of what are the "good places"

Re: Hide UID From Public Key Server By Poison Your Key?

2018-01-15 Thread Robert J. Hansen
> Just an idea, it might be more efficient if I just > commit online suicide (throw away my current > identity). I should also add: in addition to being a dick move, this approach doesn't work. It's genuinely counterproductive. If I were to see a certificate with a hundred different UIDs, I'd

Re: Remove public key from keyserver

2018-01-15 Thread Robert J. Hansen
(Responding here because Stefan's message hasn't hit my mail server yet) >>> It's from 2003. It doesn't need modernization. >> >> No? I for one would like to be sure that i am the only person who can >> upload my public key to a key server directory. Which is not a modernization issue. It's a

Re: Remove public key from keyserver

2018-01-15 Thread Andrew Gallagher
> On 15 Jan 2018, at 21:13, Matthias Mansfeld > wrote: > > could this be implemented in a way that the _upload_ (not the > spreading between keyservers) requires signing? (unless it is a > revocation certificate)? So long as there is one keyserver

Re: a step in the right direction

2018-01-15 Thread Robert J. Hansen
> Which would be step in the right direction when compared > with the current situation. ... shutting down a keyserver network relied on by literally tens of thousands of people, to say nothing about OS distributions, is a "step in the right direction"? Okay. Fine. Let's say you wave a magic

Re: Remove public key from keyserver

2018-01-15 Thread Matthias Mansfeld
On 15 Jan 2018 at 21:23, Stefan Claas wrote: > On Mon, 15 Jan 2018 15:00:34 -0500, Robert J. Hansen wrote: > > > How long do we have now those old fashioned key servers > > > > SKS came out in 2003. It largely replaced PKS, which was widely > > considered old and broken. SKS was Yaron

a step in the right direction

2018-01-15 Thread listo factor via Gnupg-users
On 01/15/2018 06:53 PM, Andrew Gallagher wrote: On 15 Jan 2018, at 16:39, Stefan Claas wrote: Maybe we need (a court) case were a PGP user requests the removal of his / her keys until the operators and code maintainers wake up? You also need to prove that removal is

Re: Remove public key from keyserver (was: Hide UID From Public Key Server By Poison Your Key?)

2018-01-15 Thread Matthias Mansfeld
On 15 Jan 2018 at 18:53, Andrew Gallagher wrote: > > > On 15 Jan 2018, at 16:39, Stefan Claas > > wrote: > > > > Maybe we need (a court) case were a PGP user requests the removal of > > his / her keys until the operators and code maintainers wake up? > > You also need

Re: Hide UID From Public Key Server By Poison Your Key?

2018-01-15 Thread Jason Lawrence
> Uh -- how?  Because I have associate not only my real name, but also my working email, and it is listed in my company's home page. If people are trying to follow you, they are not going with presumption of innocence, and too many things can help them justify their doubt -- such as your

Re: Remove public key from keyserver

2018-01-15 Thread Stefan Claas
On Mon, 15 Jan 2018 15:00:34 -0500, Robert J. Hansen wrote: > > How long do we have now those old fashioned key servers > > SKS came out in 2003. It largely replaced PKS, which was widely > considered old and broken. SKS was Yaron Minsky's Ph.D thesis, > wherein he developed some really

Re: Remove public key from keyserver

2018-01-15 Thread Robert J. Hansen
> Correct, but would it be really a big loss if we would loose all the > old fashioned key servers tomorrow? For me not. I personally know Syrians and Iranians who have given me bear hugs at conferences when they hear I'm involved with GnuPG, Enigmail, and am on the periphery of SKS. A common

Re: Remove public key from keyserver

2018-01-15 Thread Robert J. Hansen
> How long do we have now those old fashioned key servers SKS came out in 2003. It largely replaced PKS, which was widely considered old and broken. SKS was Yaron Minsky's Ph.D thesis, wherein he developed some really cutting-edge math to make key sync fast and reliable. "Old-fashioned" is not

Re: Remove public key from keyserver

2018-01-15 Thread Robert J. Hansen
> Maybe we need (a court) case were a PGP user requests the removal > of his / her keys until the operators and code maintainers wake up? Already happened back in 2010. https://lists.nongnu.org/archive/html/sks-devel/2010-09/msg9.html ___

Re: Remove public key from keyserver

2018-01-15 Thread Robert J. Hansen
> I was just thinking, would it be possible to have a tag (a UID with > special meaning, like “please-remove...@srs-keyservers.net”?) for which > the signature would be verified by the keyserver, and that would cause > it to drop everything from its storage apart from this tag? Nope. SKS has no

Re: Remove public key from keyserver

2018-01-15 Thread Stefan Claas
On Mon, 15 Jan 2018 18:53:26 +, Andrew Gallagher wrote: > > On 15 Jan 2018, at 16:39, Stefan Claas > > wrote: > > > > Maybe we need (a court) case were a PGP user requests the removal > > of his / her keys until the operators and code maintainers wake > > up? > >

Re: Remove public key from keyserver

2018-01-15 Thread Stefan Claas
On Mon, 15 Jan 2018 19:47:39 +0100, Peter Lebbing wrote: > On 15/01/18 17:39, Stefan Claas wrote: > > Maybe we need (a court) case were a PGP user requests the removal > > of his / her keys until the operators and code maintainers wake > > up? > > Wow, you're entertaining an interesting notion

Re: Remove public key from keyserver (was: Hide UID From Public Key Server By Poison Your Key?)

2018-01-15 Thread Andrew Gallagher
> On 15 Jan 2018, at 16:39, Stefan Claas wrote: > > Maybe we need (a court) case were a PGP user requests the removal > of his / her keys until the operators and code maintainers wake up? You also need to prove that removal is technically possible. Otherwise all that

Re: Remove public key from keyserver

2018-01-15 Thread Peter Lebbing
On 15/01/18 17:39, Stefan Claas wrote: > Maybe we need (a court) case were a PGP user requests the removal > of his / her keys until the operators and code maintainers wake up? Wow, you're entertaining an interesting notion of what is "needed"! Let's hope most people will just let keyserver

Re: Remove public key from keyserver (was: Hide UID From Public Key Server By Poison Your Key?)

2018-01-15 Thread Stefan Claas
On Mon, 15 Jan 2018 17:14:40 +0100, Jason Lawrence wrote: > > That said I guess ideas like this have already > > likely been discussed before? > > Good luck with that, the similar discussing has > been hold years and nothing ever changed. Last > time I checked, a discussing in 2005 was labeled

Re: Remove public key from keyserver (was: Hide UID From Public Key Server By Poison Your Key?)

2018-01-15 Thread Jason Lawrence
> That said I guess ideas like this have already > likely been discussed before? Good luck with that, the similar discussing has been hold years and nothing ever changed. Last time I checked, a discussing in 2005 was labeled as "Remove public key from keyserver No.74"   Sent: Monday, January 15,

LWN 'Future directions for PGP' 2018-01-03

2018-01-15 Thread Bernhard Reiter
LWN has an article that mentions NetPGP, NeoPG, GnuPG and key distribution idea. January 3, 2018 contributed by J. B. Crawford https://lwn.net/Articles/742542/ I've added some comments about recent advancements of concepts, especially WKD. Also I've added Netpgp and NeoPG to

Re: skipped: Unusable public key error

2018-01-15 Thread Bernhard Reiter
Am Mittwoch 10 Januar 2018 14:51:24 schrieb Rajireddy Saddi (OSV): > I used below command for encryption but I am getting below error > skipped: Unusable public key error Try the same command with more verbosity, e.g. by adding the following options, try to get more verbose if you do not see the

Re: GPG public key HELP

2018-01-15 Thread dirk1980ac via Gnupg-users
Hi. What are you trying to do? Do you just want to transfer you public key via email or anything like that? Then try: gpg2 -a --eyport > filename.asc This gives you an ascii armored key that you can transfer in any way you want. Regards, Dirk Am Sonntag, den 14.01.2018, 22:57 +

Remove public key from keyserver (was: Re: Hide UID From Public Key Server By Poison Your Key?)

2018-01-15 Thread Leo Gaspard
On 01/15/2018 08:13 AM, Robert J. Hansen wrote:>> Since you can never remove >> anything from the public key server, You are >> wondering if you can add something to it -- for >> example, add another 100 of UIDs with other >> people's real name and emails so people can not >> find out which one is

GPG public key HELP

2018-01-15 Thread Ryan Scarr
I#m trying to convert it into an alrogrithim by opening it with the note pad so I can purchase, but it doesn’t change it into the correct one so that other people know my certification? How do I change my public file into a format that I can ive to other users?

Hide UID From Public Key Server By Poison Your Key?

2018-01-15 Thread Jason Lawrence
Hi all, For of all, I am sorry for using a temporary email address. Let's say, you have accidentally associated your real name to the key under your online name and upload it to public key server, which allows anyone to connect your online identity to the person in real life. Since you can never