Re: Migrating from PGP to GPG question

2010-03-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Laurent Jumet wrote: Hello Smith, ! Smith, Cathy cathy.sm...@pnl.gov wrote: I've tried using the --yes option without success to suppress this interactive prompt doesn't pop up. This encryption does need to run in a batch job. What do I

Re: Memory forensics

2010-03-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Robert J. Hansen wrote: http://jessekornblum.livejournal.com/259124.html For quite some time we've known that hibernation files present risks for information security. However, there are always those who say until I see an actual

Re: key question

2010-02-27 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Jerry wrote: Maybe not totally apropos to this discussion; however, I worked in traffic analysis for several years. If given enough leeway, you would be amazed at the information you can gather about an individual, and at its astonishing

Re: key question

2010-02-24 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Tobias Holz wrote: Hey Folks, i succesfully installed gnupg on my Win7 machine. I want to use it with Thunderbird to encrypt personal eMails. Now I've got some questions: 1) What does happen if I lose my private key? Can I burn it to a CD/DVD?

Re: digital signature primary key and encryption subkey

2009-11-18 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 John Clizbe wrote: M.B.Jr. wrote: Thanks again, David. The last dumb question, I promise, would be: There aren't any dumb questions. Yes, there are! They are the Questions that _were_never_ asked! JOHN ;) Timestamp: Wednesday 18 Nov 2009,

Re: A Couple of Questions...

2009-10-25 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 sari Al-alem wrote: I dont know if this is the right place but im new to this encryption software and i would like to ask some questions: 1- does GPG have to be installed on all users who will recieve my mail? Short Answer = Yes. Long Answer =

Re: OpenPGP error

2009-10-11 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Sean Wilson wrote: Why is it when I sign an email and someone replies to it I sometimes get the following error: Part of the message signed; click on 'Details' button for more information in the details it says: OpenPGP Security Info

Re: beginner type questions

2009-10-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Durant, Dean wrote: Hello, I noticed, on windows (which I truly despise), when I type C:\Documents and Settings\me\Application Data\gnupggpg --gen-key I get: gpg (GnuPG) 2.0.12; Copyright (C) 2009 Free Software Foundation, Inc. (add'l

Re: GPG Software

2009-10-02 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 michael GRIFFITHS wrote: Sorry I forgot to actually answer your question. It will appear under the add/remove programs. For windows it will most likely be named “GnuPG for windows” IIRC, it will appear under Add/Remove Programs as GPGOL. [GPG

Re: choosing an encryption target from a User ID

2009-09-22 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 John Clizbe wrote: IIRC, it's the first usable key with a matching User ID. Period. First one it can use. My usual 'solution' for this is to 'Disable' the non-preferred or unused Key until such time as it is Revoked or I have been otherwise

Re: choosing an encryption target from a User ID

2009-09-22 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 David Shaw wrote: [1] PGP has a GUI nowadays, so this sort of thing doesn't apply in the same way any longer. I don't have my copy of PGP command line online at the moment, so I can't check what it does, but I'd be surprised if it didn't

Re: choosing an encryption target from a User ID

2009-09-22 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Daniel Kahn Gillmor wrote: On 09/22/2009 04:57 PM, John W. Moore III wrote: Like GPG it utilizes the 1st encountered Key that matches the Send To: address is valid. this is not what gpg does. gpg simply chooses the first key with a matching

Build Question RE: svn5158

2009-09-06 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Attempting to Build svn5158 with the MSYS/MinGW Environment I came up short with an Error I haven't seen before. In the doc Directory the line below caused the Build process to Fail. gnupg1.texi :4: @include 'version.texi' : No such file or

Re: BZIP2

2009-09-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Werner Koch wrote: ftp://ftp.gpg4win.org/gpg4win/gpg4win-light-2.0.0.exe ftp://ftp.gpg4win.org/gpg4win/gpg4win-light-2.0.0.exe.sig and select only the GnuPG component. If anyone tries this suggestion I would be interested to learn if it

Re: BZIP2

2009-09-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Sean Rima wrote: Just removed 1.4.10, installed just the gpg section and restarted GPGshell under Vista and it works fine Since Werner and the literature state that it is Ok to install both side-by-side is it really necessary to uninstall the

Re: 1.4.10 BZIP2 in Windows Build

2009-09-04 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 David Koppenhofer wrote: I asked the same question in the form of a bug report on g10code https://bugs.g10code.com/gnupg/issue1126 As you can see from the bug, it was recommended that I use gpg4win - nevermind the fact I don't want or need all

Re: Two convicted in U.K. for refusal to decrypt data

2009-08-13 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Julian H. Stacey wrote: Hi, Reference: From:the dragon ce...@hotmail.com And if you look at the cases reported, these are not system admins refusing to divulge data, or even regular people trying to protect their privacy -

Re: GPGShell caught with malware?

2009-07-31 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Faramir wrote: Take a look at http://virusscan.jotti.org/en I think it uses 21 different AVs to check the files... Virus Total is another multiple A/V site. Upload the suspect File and receive checks against 31 A/V engines. JOHN ;)

Re: 8192bit RSA keys

2009-07-08 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Jean-David Beyer wrote: Another reason is that even if increasing my key size to would increase my security in some sense, I do not want my GPG security to be so strong that the black hats would bypass it and torture the key out of me.

Re: verifying rpms - public key not found

2009-07-03 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Chris wrote: Why is my old email address still shown? Is the UID with Your 'old' address still on Your Key? You may wish to Set Your new address as the Primary UID and then revoke the UID with the 'old' address. HTH JOHN ;) Timestamp: Friday

Re: Solved: Helping a friend setting up with gpg and gpgoe

2009-07-01 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Steven W. Orr wrote: He was sending text and html as separate attachments. For reasons that are not completely clear to me, I was able to verify and decrypt the message from inside Thunderbird/Enigma by selecting: View-Message Body As-Plain

Re: Key propagation

2009-06-24 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 David Shaw wrote: It boils down to a very complicated way to say the same thing I said before: You can ask those people, nicely, to not give your key out to anyone, but that's about it. And 'Nice' PPL will honor this and those whom You're

Re: PGP.sig verification with GnuPG?

2009-06-21 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 allen.schu...@gmail.com wrote: I tried recently to verify a PGP.sig file on an email, the other conversation is still going on. On the valid email that people are coming up with valid, FireGPG is not recognizing it as having PGP related

Re: gpgshell and gnupg 2.x?

2009-06-04 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Peter Pentchev wrote: Errr, unless I'm badly mistaken, gpg-agent doesn't come with GnuPG 1.4.x and to build and use it, you need some of those component libraries. And, at least for me, gpg-agent is a very, very comfortable and convenient tool.

Re: how to sign files inside a folder?

2009-05-26 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Faramir wrote: Hello, I saw a question in the support list in Spanish language, and it is about how to sign files inside a folder, in Windows OS, without using additional tools. The goal is to have a tree of folders, with files inside,

Re: GNUPG 1.2.1 problem

2009-05-21 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Pawe³ ¯uk wrote: I can not upgrade my current version of gnupg Can You please be more specific regarding why You cannot Upgrade GnuPG? Since You are apparently using a Windows O/S [based upon the version of Thunderbird this message was sent

Re: Key Transition Letter 2009-05-21

2009-05-21 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Allen Schultz wrote: Thank you for the information. I will clearsign this using the new key only. Let me know if this signature does not work either. OpenPGP Security Info UNTRUSTED Good signature from Allen Schultz (aldaek)

Re: Import Secret Key

2009-05-18 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 jnhemley wrote: I was sent a file to decrypt. I got an error saying secret key not available. I then tried to import a secret key from my original file. I got an error permission Denied along wile file rename error and error reading file. What

Re: GPG 2.0.11 and Vista

2009-05-12 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 pin_sf wrote: I would like to know if the latest version of GPG supports Vista. Thank you!!! Short Answer: YES! JOHN ;) Timestamp: Tuesday 12 May 2009, 13:31 --400 (Eastern Daylight Time) -BEGIN PGP SIGNATURE- Version: GnuPG

Re: Problems changing hash algo for clearsign

2009-05-10 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Tyler Spivey wrote: Hello. I'm trying to make any message I clearsign have a hash of SHA256. Here is what I've done so far: I've added personal-digest-preferences SHA256 to the end of my gpg.conf file. According to the manpage, this should be

Re: delete bad UID from key on keyserver?

2009-05-08 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Anonymous Remailer wrote: One of my email accounts is unusable so I deleted the UID from my key and uploaded it to the keyserver. That accomplished nothing so now I figured out I should of invalidated the UID and then uploaded it. I can't do

Re: How to 'un-sign' a key?

2009-05-07 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Joel C. Salomon wrote: Folks, I foolishly signed a key I had not verified well, and the signed version is on a keyserver. How can I unsign it? Select the Key with the offending Signature and revoke the Signature. the command is --revsig form

Re: New results against SHA-1

2009-05-04 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Nicholas Cole wrote: How does GPG cope if two keys on the keyring have the same FP? AFAICS that would make things very difficult for most of the front-ends, especially if they had been relying on the uniqueness (in practice) of the FP to

Re: Use other hash than SHA-1

2009-05-02 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Simon Ruderich wrote: I would like to use a different hash than SHA-1. I tried setting personal-digest-preferences SHA256 in my gpg.conf but it didn't work. What hash can I use with my key (default DSA/Elgamel key) and how? Which version of

Re: Selecting cipher to generate a key pair

2009-05-01 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Robert J. Hansen wrote: Smith, Cathy wrote: The customer said they have a proprietary implementation that only supports Blowfish or 3DES for the key. I'm still trying to find out exactly what that means. Okay, that much makes sense now. I

Re: WinPT Enigmail don't show the same keys

2009-04-29 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Joel C. Salomon wrote: I was under the impression that GnuPG kept track of everything, but I noticed that Windows Privacy Tray and Enigmail do not always show the same keys. Both are accessing the correct version of GPG (C:\Program

Re: Looking for a good port80 static-DNS keyserver

2009-04-29 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Brian Mearns wrote: Is it considered impolite to advertise one specific keyserver (like gingerbear, for instance) in my sig? Not at all! In fact, many use a Comment line to direct folks to Big Lumber or their Own Web page to locate their Key.

Re: Subkeys...

2009-04-28 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 James P. Howard, II wrote: On Tue Apr 28 21:48:52 2009, Allen Schultz allen.schu...@gmail.com wrote: I made a key with default settings. Can I delte the encrypting subkey that has not expiration date and remake one with an expiration date?

Re: GPG and Gmail inline settings?

2009-04-27 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Allen Schultz wrote: What is the recommended word wrap settings in gmail and gpg for inline messages to work more consistently? 70 72 respectively. JOHN ;) Timestamp: Monday 27 Apr 2009, 07:15 --400 (Eastern Daylight Time) -BEGIN PGP

Re: certificate chain depth

2009-04-25 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Raimar Sandner wrote: In the end it is of course a people thing whether you trust a key or not, no mathematical model ever can replace your final decision. So there is a big difference in gpg saying fully trusted and you thinking fully

Re: Bad signatures on Gmail messages

2009-04-24 Thread John W. Moore III
Werner Koch wrote: I have signed this message along with a simple text attachment as an example. Note that some version of the mailing list manager Mailman unfortunately breaks all kinds of signatures. gpg: armor header: Hash: SHA1 gpg: armor header: Version: GnuPG v2.0.12-svn4945

Re: Encryption failing due to missing(?) or unsigned(?) keys

2009-04-24 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Galloway, Gary wrote: I'm having an issue on a new server (Debian-Lenny) I'm migrating to. Encryption is failing with the following message: Some keys missing or need signing: us...@host.com mailto:us...@host.com us...@host.com

Re: DH/DSS vs ElGame/DSS?

2009-04-24 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Robert J. Hansen wrote: Many people think Cylink has a history of regrettably close cooperation with the NSA. Some people consider their products to be suspect as a result of this. Given that, it should be pointed out that PGP Corporation was

Re: DH/DSS vs ElGame/DSS?

2009-04-24 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Robert J. Hansen wrote: Absolutely true. That said, very few directors of the NSA have gone on to become CEOs of telephone companies. William P. Crowell served as DDO and Deputy Director for the NSA up until he joined Cylink in '98. Not CEO's

Re: Bad signatures on Gmail messages

2009-04-23 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Brian Mearns wrote: I just wanted to let people know that I finally woke up and realized that messages I was signing and sending with Gmail are bad because the mail client is inserting linebreaks in order to wrap lines. This is standard behavior

Re: Bad signatures on Gmail messages

2009-04-23 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Brian Mearns wrote: On Thu, Apr 23, 2009 at 4:24 PM, Werner Koch w...@gnupg.org wrote: That is why PGP/MIME is the only robust format and higly recommended over of the simple clearsigning mode. Could you elaborate on this Werner? I'm not

Re: New to list - though lurking for a bit :)

2009-04-21 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 david wrote: Are there any issues I should be aware of prior to or installing gnupg? I want to add enigmail to thunderbird. You should have no problems under W2K Pro. Is it all plain sailing under Microsoft O/S? recommended frontends would

Re: keyservers

2009-04-18 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 gerry_lowry (alliston ontario canada) wrote: AFAIK you can publish your key to https://keyserver.pgp.com/vkd/GetWelcomeScreen.event; it will be synchronized AFAIK; you will need to confirm every so often that your key is valid so PGP do not

Re: Upgrade from GnuPG 1.4.5 to 1.4.9 breaks signature verification in PGP

2009-04-14 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 David Shaw wrote: You might try asking your client to add --pgp6 to their GPG command line. PGP 6 is not really completely up to the modern PGP spec (it's a good few years out of date), and --pgp6 tells GPG to try and be compatible with the

Re: Keyserver doesn't honour signature removal

2009-04-12 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dominik George wrote: Is it even possible to remove signatures from a key and distribute this change? Or am I doing something wrong? What lands on the Keyservers stays on the Keyservers, forever. :( This is due to the sharing/gossip nature of

Re: Keyserver doesn't honour signature removal

2009-04-12 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dominik George wrote: that is, I can add anything I want to my key, but never remove it? Not even signatures? This is Correct! Upload a Key with signatures removed and as soon as that Keyserver 'refreshes' during the next round of updating from

Re: Files to Backup

2009-04-11 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Mike -- EMAIL IGNORED wrote: To protect all my gpg keys against disk failure, what files or directories should I back up? secring.gpg, pubring.gpg trustdb.gpg These 3 Files _are_ Your Keyring with Trust Settings. Remember to back them up

Re: Singing a key with a subkey

2009-04-08 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Faramir wrote: Because signing another key is known as certification and the subkeys don't have that capabily. It is one of the reasons to keep the primary key safely at home, because with it, somebody can sign keys as if you had signed

Re: Singing a key with a subkey

2009-04-08 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Faramir wrote: Brian Mearns escribió: I've exported a crippled version of my private keyset for use at work...I did not include the primary/master key in the export Closer reading of the above begs the Question; define 'crippled' and is it

Re: GNUPG install help

2009-04-07 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 mukta_agar...@readersdigest.com wrote: I want to install GNUPG on my machine, I am not able to locate which one to install. Please help. I use a windows machine. Without any further information as to what/how You intend to use GnuPG I suggest

Re: GNUPG install help

2009-04-07 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Sven Radde wrote: I'd suggest to check out www.gpg4win.org and use the most recent non-beta from there. And I strongly suggest that You _avoid_ gpg4win and simply install GnuPG 1.4.9 which proves nothing more than 2 folks have strong opinions

Re: GNUPG install help

2009-04-07 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Protektor Blog wrote: and to make live even easier: http://www.gpg4win.org/ If you need help with it let me know... I am silently screaming No, No, No and praying that You will 1st try ftp://ftp.gnupg.org/gcrypt/binary/gnupg-w32cli-1.4.9.exe.

Re: unable to send key to keyserver

2009-04-04 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 caleb wrote: gpg --keyserver subkeys.pgp.net --send-keys myem...@mydomain.com.au this worked and printed my public key to a text file. I have no idea why it is not accepting my email as part of my user id when I try and send keys to the

Re: gpg: WARNING

2009-03-18 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 David SMITH wrote: 1. I want to avoid this warning. How do I do that ? 2. Is this avoidable if I go with a trusted signature? 3. What does this warning exactly mean ? It means that you haven't signed the key that you are using to check the

Re: GPG Shell works but GnuPG commands fail - UPDATE

2009-03-02 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 HORNBOSTEL, LIBBY A (ATTSI) wrote: Many hours of tinkering has given me a solution. Although I haven't found an explanation for why the GPA product throws a fatal error You are using Windows and GPA incompatibility with M$ O/S's is known.

Re: gpg.exe Vista Crash

2009-01-31 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Brian wrote: I downloaded 1.4.9 and installed it. I then grabbed WinPT and when launching WinPT, I get repeated gpg.exe crashes, like I did before. I also downloaded GnuPT and installed that, which comes with 1.4.9 and running that also

Re: Dan Brown - Digital Fortress book

2009-01-18 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Faramir wrote: Charly Avital escribió: Hi, may I suggest, with all due respect, that this thread be closed? Why don't we move this thread to pgp-basics...@yahoogroups.com ? I Second both of the above Motions. JOHN 8-) Timestamp: Sunday

Re: how-to 1) remove a key, 2) avoid spam, 3) add a principal UID when delete ?

2009-01-01 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Raphaël Maville wrote: 1) How to delete an unpublished GnuPG key from a computer when the Passphrase and the Revoke file are lost ? This key was create without revoke file. It was not published at all on internet or to my friends. If You're

Re: Which is the path to gpg.conf in windows?

2008-12-14 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 John Clizbe wrote: Be warned, if you specify conflicting options between Enigmail and gpg.conf, Enigmail will win. 'Win' indicates a contest or struggle. Enigmail simply passes the Commands set via 'Preferences' to GPG first so that they

Re: Teaching crypto to newbies

2008-12-02 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 reynt0 wrote: Risk is objective; security is subjective. ... Looking for risk is being awake; feeling secure is being asleep. Well said. One also wonders if You also sell Insurance. :) A newbie who is aware they don't know much, may

Re: New GnuPT-Version and new WinPT-Website

2008-12-02 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Robert J. Hansen wrote: Mark Rousell wrote: I rather think it's up to someone posting an announcement about new WinPT-Website to provide the URL, don't you? Which dodges both the question and responsibility. He's already doing you a favor

Re: Rare condition incompatibility of public key

2008-12-01 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Robert J. Hansen wrote: Unfortunately, in my experience the overwhelming majority of users don't understand trust, don't want to understand trust, and run away screaming when asked to think about trust in a logical manner. You have to bring

Re: Rare condition incompatibility of public key

2008-11-30 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Myckel Habets wrote: Hello list, Last week I had contact with someone who said that my public key was bad according his validation program. The person who said to me that the key validates as bad uses the PGPkeys program from the PGP

Re: GPG.conf Cipher Preference

2008-11-11 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Robert J. Hansen wrote: It can be succinctly described this way: default-cipher-preferences is a feature. cipher-algo is a misfeature. Virtually everyone wants default-cipher-preferences. Actually, the GnuPG Manual refers to this 'feature'

Re: Resign existing key with higher trust

2008-11-09 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 David Shaw wrote: If you really want to sign it again without deleting or revoking the original signature, then you can re-sign it by adding --expert to your command line. GPG will tell you you've already signed the user ID, but then offer to

Re: Signature semantics

2008-11-04 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Robert J. Hansen wrote: (As an example of what suggestions like this lead to in practice, look at Vista's User Access Control. HCI studies have shown UAC does not provide better security. UAC is designed to give users a last chance

Re: Anyone know what became of the Gaim-E Project?

2008-11-02 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Robert J. Hansen wrote: Interesting concept, however looks as if the project was abandoned. It died due to lack of interest, mostly. Some IM protocols require short message blocks; OpenPGP messages are usually quite long. Thus, Gaim-E was

Re: receive my signed keys

2008-11-01 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Ramon Loureiro wrote: Imagine that I loose my pubring... Is it posible to ask a keyserver for all the public keys I have signed Short Answer = NO Assuming that You have 'Signed' Keys and returned them to the Key Owner then there is no

Re: set type digest mode?

2008-10-22 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Werewolf wrote: Been trying find references on net etc Is there way to set which digest mode gpg uses for clear signed messages depending on which uid is set as the primary?? Tried edited the uid with setpref S9 S8 S7 S3 S2 H8 H3 H9 H10 Z2 Z3

Re: set type digest mode?

2008-10-22 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 David Shaw wrote: In gpg.conf add the line: digest-algo SHA256 No. Do this and you shoot yourself in the foot. It violates the OpenPGP protocol. I didn't advocate the wisdom of this practice; merely answered the Question: How to force

Re: Key ID format: short or long?

2008-10-21 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 David Newman wrote: I was thinking... in case I want to put my key ID in a business card, what format should I use? Short format (8 characters) or long format (16 characters)? With or without the '0x' prefix? I would use the entire

Re: Key ID format: short or long?

2008-10-21 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Faramir wrote: I just hope people can actually read the small font I used for the fingerprint (lol). In My experience; those that understand what they are seeing will have no problem 'dealing' with a full fingerprint. :) JOHN ;) Timestamp:

Re: There is no limit on the length of a passphrase,

2008-10-21 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Robert J. Hansen wrote: Morton D. Trace wrote: Dear list readers I just found this article. Be careful of anything you get off the internet. This article is not especially good. Mega Dittos! [I know this sounds like Rush Limbaugh

Re: Greetings

2008-10-15 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 MD Keith wrote: [Tries using Firegpg to create a reply] Enigmail version 0.95.7 (20080808) Firefox Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9) Gecko/2008052906 Firefox/3.0 Firegpg 0.5.2 Gmail set to plain formatting Guessing bet

Re: Greetings

2008-10-14 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Werewolf wrote: Just an email to say hello to the list Been using Linux since 2002, but never found any my email folks interested in PGP or GPG. So finally thought join the email list Welcome! Since You're using Thunderbird I personally

Re: Is there an easy way to know...?

2008-10-13 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Faramir wrote: When I began using GPG, I signed a few keys, until I learned about local signatures... And I'd like to know how many public keys, signed by me, are over there... I can check the public keys in my public keyring, one by one, but I

Re: Is there an easy way to know...?

2008-10-13 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 David Shaw wrote: Note that this only works if those keys (and sigs) were uploaded to the keyserver net. Should You wish to Upload Your Key directly to this Keyserver net then visit here: http://wwwkeys.ch.pgp.net:11371/pks/searchkey.html Then

Re: Attribute 'comment'

2008-10-07 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 horson wrote: i think i have the same problem. i wan to change the comment i entered when creating the key. is that possible? The 'solution' here is only to create a New UID containing whatever New Comment is desired and then setting it as

Re: Revocation Certificates

2008-10-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Jorgen Christiansen Lysdal wrote: Robert J. Hansen wrote: This deputy sheriff reported to his superior, and I wound up with a thirty-day delay in the paperwork while the county sheriff made sure that I didn't have murder afoot. Were they

Re: Adding a UserID to Your Key

2008-10-04 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Lawrence Chin wrote: bothered me for over a whole week for another reason. I want to propose that we all use absolutely untainted clean language when we send encrypted emails (like this one is encrypted) so that we wouldn't give authority a

Re: Revocation Certificates

2008-10-04 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Lawrence Chin wrote: This is another message of Kara's that's causing me nightmare last night when I read through it. We shouldn't have words like ...Deputy director or NS adviser etc in an encrypted email! Why? Even if Reference to entities

Re: Revocation Certificates

2008-10-04 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Robert J. Hansen wrote: If you are that concerned about the intelligence and/or law-enforcement communities seeing what you write, you should be very careful about your involvement on this, or any of several other, mailing lists. More

Re: Preferences...

2008-09-23 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 David Shaw wrote: them... but there is no guarantee that those messages will be decryptable, ever. You've got a gun pointed at your foot. Be careful you don't pull the trigger. Ah Jeez, David; You are too rough on the individual who

Re: Changing preferences

2008-09-23 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Robert J. Hansen wrote: Remove the option. Seriously. I think key preferences ought to be considered analogous to --cipher-algo: you can tweak them if you want, but it's not recommended and should be hidden from the user by default. If a

Re: Preferences...

2008-09-23 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Werner Koch wrote: I also wonder why so many people are interested in it. Well Werner, because You have 'Groupies' that cleave to You like they would to Phil Zimmerman if He were so Publicly available. Folks are 'interested' because it is New

Re: Preferences...

2008-09-23 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 David Shaw wrote: That's exactly it. Camellia is a very popular algorithm in Japan. Including it doesn't buy us much new from the cryptographic perspective as we already have strong 128-bit ciphers in OpenPGP, but it does buy us something

Re: Changing preferences

2008-09-23 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Mark H. Wood wrote: Sounds good to me. It seems to cover what people mostly need to know, and is compact enough for a man page. Color Me behind-the-times but I seriously thought the Man Page was succinct and clear regarding this. :-\ JOHN ;)

Re: Changing preferences

2008-09-23 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 David Shaw wrote: This means that GPG will now allow the various recipient keys to vote on which algorithm is chosen, and the most-preferred one will be chosen. It doesn't really change much that is visible in practice, but it does mean that

Re: testing again

2008-09-16 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Lawrence C. Chin wrote: Opps. Major problem. Didn't do it right. It seems that my previous email was still sent from that kurtc dummie account. I'm trying it again. Can someone verify my signature of this new email account of mine? (Import my

Re: Removing UIDs?

2008-09-16 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Faramir wrote: Yes, I thought about that too... but now, maybe it would be useful to be able to upload the key to that key repositorie... the one only the key owner can update... I forgot its name.. Big Lumber the PGP Global Directory both

Re: Protect pubring.gpg and secring.gpg

2008-09-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Faramir wrote: TheEnterpriseIsTheBestSpaceship FWIW, even with the quote marks left in place this would be foolish if folks know or think they know that You are a Trekkie. An Application that can be helpful in forming a passphrase is Diceware.

Re: Passphrase storage (was Re: Protect pubring.gpg and secring.gpg)

2008-09-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 David Shaw wrote: Out of curiousity, is anyone using one of the various passphrase manager sort of programs? Assuming they're implemented and used correctly, they're not a bad solution for passphrase overload. I use Schneier's Password Safe

Re: Has anybody installed SP3 for XP?

2008-09-04 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Faramir wrote: Well, my windows wants me to install SP3, and before doing that, I would like to know if there is any known problem with GPG due to SP3. It would not be the first time an SP breaks something... and I don't want to break GPG. I

Re: can't change to my real name on this mailing list

2008-08-23 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 kurt c wrote: I don't know if this is more of a ThunderBird question. I have already changed this dummy kurtc name to my real name lawrence in the setting of my Gmail account, but somehow on this mailing list I still appear as kurtc. I read it's

Re: What does the message mean while encrypting?

2008-08-21 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 张靖 wrote: It is NOT certain that the key belongs to the person named in the user ID. If you *really* know what you are doing, you may answer the next question with yes. Try adding the following line to gpg.conf trust-model always or You can

  1   2   3   >