Re: allow-non-selfsigned-uid issue with key from keys.openpgp.org that contains no identity information

2019-08-02 Thread MFPA via Gnupg-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Friday 2 August 2019 at 12:50:15 PM, in , Playfair via Gnupg-users wrote:- > Easier still is for her to > create an Enigmail > PRR associating my key with my email address Or a group line in gpg.conf. - -- Best regards MFPA

Re: allow-non-selfsigned-uid issue with key from keys.openpgp.org that contains no identity information

2019-08-02 Thread Playfair via Gnupg-users
On 8/1/19 4:13 PM, David wrote: > Playfair via Gnupg-users: >> If keys.openpgp.org won't publish a user ID other than a verified email >> address, is its only recourse to remove the user ID? Could it instead >> substitute the hex key ID, fingerprint or a dummy string like "User ID >> not verified"

Re: allow-non-selfsigned-uid issue with key from keys.openpgp.org that contains no identity information

2019-08-01 Thread David
Playfair via Gnupg-users: > On 8/1/19 7:37 AM, Werner Koch via Gnupg-users wrote: >> On Mon, 29 Jul 2019 09:43, gnupg-users@gnupg.org said: >>> it that way", i think. Perhaps Werner can provide more background on >>> why GnuPG is generally resistant to holding OpenPGP certificates that >>> have no

Re: allow-non-selfsigned-uid issue with key from keys.openpgp.org that contains no identity information

2019-08-01 Thread Werner Koch via Gnupg-users
On Thu, 1 Aug 2019 09:27, gnupg-users@gnupg.org said: > We're already in uncharted waters with the inevitable abuse of SKS, we > need to figure out how to stabilize the ecosystem. Most businesses do not use public keyservers at all but use their internal PKI. > If the PGP implementation of Open

Re: allow-non-selfsigned-uid issue with key from keys.openpgp.org that contains no identity information

2019-08-01 Thread Playfair via Gnupg-users
On 8/1/19 7:37 AM, Werner Koch via Gnupg-users wrote: > On Mon, 29 Jul 2019 09:43, gnupg-users@gnupg.org said: >> it that way", i think. Perhaps Werner can provide more background on >> why GnuPG is generally resistant to holding OpenPGP certificates that >> have no User ID at all in its local key

Re: allow-non-selfsigned-uid issue with key from keys.openpgp.org that contains no identity information

2019-08-01 Thread Teemu Likonen via Gnupg-users
Daniel Kahn Gillmor via Gnupg-users [2019-08-01T09:27:45-04] wrote: > Here's one use case (i've got others if you want): > > * You have my OpenPGP certificate (with userid with e-mail address), >but it is not published in full publicly because i do not want people >to be able to find anyt

Re: allow-non-selfsigned-uid issue with key from keys.openpgp.org that contains no identity information

2019-08-01 Thread Daniel Kahn Gillmor via Gnupg-users
On Thu 2019-08-01 13:37:26 +0200, Werner Koch wrote: > The user ID is important because the accompanying self-signature conveys > important information about the keyblock. For example expiration date > and preferences. It is true that this can also be conveyed with > direct-key-signatures (a self

Re: allow-non-selfsigned-uid issue with key from keys.openpgp.org that contains no identity information

2019-08-01 Thread Werner Koch via Gnupg-users
On Mon, 29 Jul 2019 09:43, gnupg-users@gnupg.org said: > it that way", i think. Perhaps Werner can provide more background on > why GnuPG is generally resistant to holding OpenPGP certificates that > have no User ID at all in its local keyring. The user ID is important because the accompanying se

Re: allow-non-selfsigned-uid issue with key from keys.openpgp.org that contains no identity information

2019-07-29 Thread Daniel Kahn Gillmor via Gnupg-users
Hi MFPA-- On Sun 2019-07-28 14:12:45 +0100, MFPA via Gnupg-users wrote: > I have the option "allow-non-selfsigned-uid" in my gpg.conf. A bit of background first, since the documentation around allow-non-selfsigned-uid appears to be confusing/mistaken. the manual says: --allow-non-selfsig

allow-non-selfsigned-uid issue with key from keys.openpgp.org that contains no identity information

2019-07-28 Thread MFPA via Gnupg-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi I have the option "allow-non-selfsigned-uid" in my gpg.conf. I downloaded a key from keys.openpgp.org with no identity information. GnuPG told me:- gpg: Invalid key 0x84D0F6B3F5007E2C made valid by --allow-non-selfsigned-uid but sti