Re: How to deal with a 2nd OpenPGP Summit?

2015-09-21 Thread Hans-Christoph Steiner
I've attended all manner of conferences/meetings from big to small, invite-only to open doors, expensive to free, heavily organized to improvised. I think far and away the most productive conferences for groups of 20+ people are Unconference/Barcamp/"Gunner-style" conferences, which are totally o

Re: gnupg-for-java

2015-09-19 Thread Hans-Christoph Steiner
For the record, my work on GnuPG was largely funded by the US Government, via the State Department/Radio Free Asia/Open Technology Fund. So are other projects like Tor Project, Mailvelope, crypto.cat, NoScript, and many more. I don't think that being associated with the US Government automatical

Re: gnupg-for-java

2015-09-18 Thread Hans-Christoph Steiner
Antony Prince: > On 09/10/2015 05:17 PM, Antony Prince wrote: >> without gpgme installed). I'm not 100% sure how to test the >> functionality of the binary and library, so if anyone wants to give it a >> go, I'd be glad to hear the results. The ftp server[2] allows for >> anonymous download. >> [

Re: Facebook and OpenPGP

2015-06-04 Thread Hans-Christoph Steiner
MFPA: > > > On Monday 1 June 2015 at 5:37:33 PM, in > , > gnupg-us...@henk.geekmail.org wrote: > > >> A comment worth reading in case one does not see it >> oneself IMHO: >> https://blogs.fsfe.org/gerloff/2015/06/01/facebook-offers-to-send-you-encrypted-emails-this-wont-help-you/ > > Whateve

Re: Notes from the first OpenPGP Summit

2015-04-28 Thread Hans-Christoph Steiner
Werner Koch: > On Mon, 27 Apr 2015 01:31, b...@pagekite.net said: >> Thanks for the write-up, Werner! :-) > > Actually you have been much faster with your report > https://www.mailpile.is/blog/2015-04-20_OpenPGP_Email_Summit.html > >>> disappointed that many of the participants favored this c

GnuPG Summit news?

2015-04-22 Thread Hans-Christoph Steiner
Hey all, I was sorry to miss the GnuPG Summit. Now I'm eager to hear any news from it :) .hc -- PGP fingerprint: 5E61 C878 0F86 295C E17D 8677 9F0F E587 374B BE81 https://pgp.mit.edu/pks/lookup?op=vindex&search=0x9F0FE587374BBE81 ___ Gnupg-users m

Re: Article in Forbes.

2015-03-19 Thread Hans-Christoph Steiner
Sounds like you should report it directly to GPGTools.org. I'm sure they have a bug tracker or mailing address somewhere. Have you seen any technical details on this attack? Its hard to tell exactly what's happening from that article. .hc Eric F: > Perhaps not directly gnupg related, more OS

Re: Thoughts on GnuPG and automation

2015-03-09 Thread Hans-Christoph Steiner
or is far superior. If it is not your intent to convey that message then please review what you write before you send it, because that message was received loud and clear. > > Thanks, > > Bob Cavanaugh > > >> -Original Message- >> From: Hans-Christoph Steiner [

Re: Thoughts on GnuPG and automation

2015-03-09 Thread Hans-Christoph Steiner
Why do I get so many responses like this on this list? I've spent a ton of time solving our own problems with the Android port, we also made sure to take out a support contract with Werner to pay him to answer our questions. I only wish we'd had more so we could pay him for all the work he has d

cython wrapping gpgme WAS: Thoughts on GnuPG and automation

2015-03-09 Thread Hans-Christoph Steiner
Daniele Nicolodi: > On 03/03/15 14:29, Hans of Guardian wrote: >> It is actually more difficult to wrap GPGME in Java than to have just >> rewritten GPGME in Java. GPGME is a fine API for C/C++, it is a bad >> API for other languages. You end up with an API that feels like a C >> API forced into

Re: Thoughts on GnuPG and automation

2015-03-09 Thread Hans-Christoph Steiner
Werner Koch: > On Tue, 3 Mar 2015 21:29, h...@guardianproject.info said: > >> * Android will kill apps when it needs to, app lifecycle is automatically >> managed, >> the app has no control over it, and often zero warning is given > > That is the same as with Linux. Ever heard of the OOM kil

Re: gpgme and Java

2015-03-09 Thread Hans-Christoph Steiner
Werner Koch: > On Wed, 4 Mar 2015 00:57, h...@guardianproject.info said: > >> thread at this point. The bizarre Java wrapper of GPGME was not the >> biggest part of the problem of the GnuPG-for-Android port, but it was >> nonetheless a real problem. Sure it is possible to use GPGME with > > Y

Re: German ct magazine postulates death of pgp encryption

2015-02-27 Thread Hans-Christoph Steiner
First, most of these "let PGP die" rants only really apply to OpenPGP email. GPG does a wonderful job of signing and verifying packages for Debian, Ubuntu, Fedora, etc. Second, OpenPGP email exists now, can be installed and used right now, and provides proven protection for the body of an email m

Re: Thoughts on GnuPG and automation

2015-02-27 Thread Hans-Christoph Steiner
Bjarni Runar Einarsson wrote: > Hello GnuPG users! > > I just published a follow-up to Smári's blog post about the Mailpile > team's frustration while working with GnuPG. The post is here: > > > https://www.mailpile.is/blog/2015-02-26_Revisiting_the_GnuPG_discussion.html > > As it's rather

Re: [Announce] A new Beta of GnuPG 2.1 is now available

2014-06-06 Thread Hans-Christoph Steiner
After working with GnuPG 2.1 for over a year now, its great to see it in beta! Let's try to sync up the Android build with the official 2.1 release, so the 2.1 final release can include new support for a very popular platform :) That should be pretty straightforward since it has been building fi

Re: GnuPG class throwing null pointer exception

2014-05-27 Thread Hans-Christoph Steiner
You might consider using gnupg-for java, we've put a lot of work into it recently since it is the basis for GnuPG for Android: https://github.com/guardianproject/gnupg-for-java .hc On 05/27/2014 05:26 AM, winifred quartey-papafio wrote: > Hello > I'm having a problem encrypting a String text us

Re: GnuPrivacyGuard for Android v0.3 released!

2014-03-20 Thread Hans-Christoph Steiner
On 03/13/2014 07:01 AM, Mike Cardwell wrote: > * on the Wed, Mar 12, 2014 at 08:54:01PM -0400, Hans-Christoph Steiner wrote: > >> GnuPrivacyGuard for Android (GPGA) brings GnuPG, the most trusted name in >> encryption, to Android. Easily encrypt, decrypt, sign and verify files

GnuPrivacyGuard for Android v0.3 released!

2014-03-12 Thread Hans-Christoph Steiner
GnuPrivacyGuard for Android (GPGA) brings GnuPG, the most trusted name in encryption, to Android. Easily encrypt, decrypt, sign and verify files of any kind, just by sharing them to GPGA. This app aims to provide a complete, integrated cryptographic toolkit integrated into the Android experience.

Re: Newbie: Search for iphone method

2014-02-18 Thread Hans-Christoph Steiner
ing: >> And how would you make >> A GUI. What >> Programming would I have to learn. I used to program in basic Between 37 and >> 25 years ago. On a GRS 80 laptop. Are we talking a degree in software >> engineering? >> Sent from my iPhone >> >>> On Feb 18,

Re: Newbie: Search for iphone method

2014-02-18 Thread Hans-Christoph Steiner
Since GnuPG has run on Mac OS X and FreeBSD for a long time now, it should be a pretty easy port to get GnuPG running on iPhone. Someone would have to make a GUI tho. .hc On 02/18/2014 04:00 AM, Jürgen Polster wrote: > Hmm, > One of the options for IOS user is oPenGp, which interacts nicely. Bu

Re: Non email addresses in UID

2014-01-24 Thread Hans-Christoph Steiner
I think it makes a lot of sense to be able to associate more things with OpenPGP keys. I'm particularly interested in seeing OTR keys and XMPP identities in OpenPGP keys. .hc On 01/23/2014 05:50 PM, Steve Jones wrote: > I've been thinking about UIDs in keys, rfc4880 section 5.1 says that by >

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-17 Thread Hans-Christoph Steiner
On 01/17/2014 03:05 AM, Werner Koch wrote: > On Fri, 17 Jan 2014 02:24, se...@literati.org said: > >> Scute works great with Firefox, but keep in mind it requires gpg-agent (or > > Sure. That is the whole point of the exercise. > >> at least scdaemon). AFAIK it's not intended to work with any

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-08 Thread Hans-Christoph Steiner
On 01/08/2014 07:02 AM, Werner Koch wrote: > On Tue, 7 Jan 2014 15:32, h...@guardianproject.info said: > >> OpenPGP card as a PKCS11 keystore. It seems that things are close: Java can >> use NSS as a provider of PKCS11. I guess the question is whether opensc is >> making a PKCS#11 interface t

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-07 Thread Hans-Christoph Steiner
On 01/07/2014 09:32 AM, Hans-Christoph Steiner wrote: > > NdK wrote: >> Il 07/01/2014 04:01, Hans-Christoph Steiner ha scritto: >> >>> Does anyone know if there is any chance of using an OpenPGP smart card for >>> Java? I know that GnuPG doesn'

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-07 Thread Hans-Christoph Steiner
NdK wrote: > Il 07/01/2014 04:01, Hans-Christoph Steiner ha scritto: > >> Does anyone know if there is any chance of using an OpenPGP smart card for >> Java? I know that GnuPG doesn't support PKCS#11, but I was wondering if >> things work the otherway around: jav

using an OpenPGP card with Java (keytool and jarsigner)

2014-01-07 Thread Hans-Christoph Steiner
Hey all, Does anyone know if there is any chance of using an OpenPGP smart card for Java? I know that GnuPG doesn't support PKCS#11, but I was wondering if things work the otherway around: java using the OpenPGP card. It would be super useful to be able to use the same smartcard for both Androi

GnuPG Command line: now in the Play Store!

2013-05-09 Thread Hans-Christoph Steiner
https://play.google.com/store/apps/details?id=info.guardianproject.gpg This alpha release of our command-line developer tool brings GnuPG to Android for the first time! GNU Privacy Guard Command-Line (gpgcli) gives you command line access to the entire GnuPG suite of encryption software. GPG is