Re: Side-By-Side Installation: Gpg4win and gnuPG

2016-07-11 Thread Kob S
>To avoid that you should specify --homedir c:\testhome or something on the >commandline to 2.1 calls. Then it will use that as a different homedir. >e.g.: gpg --homedir c:\testhome --expert --full-gen-key This works now like a charm. Thanks, Rimma

Side-By-Side Installation: Gpg4win and gnuPG

2016-07-09 Thread Kob S
Hello, I am using gpg4win V. 2.3.2 on a WIN7 machine, but I want to test the gnuPG 2.1.13 on the same machine, using the CLI, without interfering with the existing gpg4win installation. I downloaded and expanded the gnuPG 2.1.13 Windows CLI archive into a new directory, and made sure to fully

RE: GPGrelay does not recognize Gpg-2.1 keys; Gpg4win-3beta...

2016-02-12 Thread gnupgpacker
Wowh, what a comprehensive answer... :) THANKS! > Furthermore, pipes do generally work on Windows. > Wouldn't this work? > gpg2\gpg2.exe --export | gpg14\gpg.exe --import Similar pipes are working in Windows. > gpg2\gpg2.exe --export-ownertrust >C:\temp\exported.trust > gpg2\gpg2.exe --output

Re: GPGrelay does not recognize Gpg-2.1 keys; Gpg4win-3beta...

2016-02-12 Thread Matthias Mansfeld
On 12 Feb 2016 at 9:35, gnupgpacker wrote: > Wowh, what a comprehensive answer... :) > THANKS! > > > Furthermore, pipes do generally work on Windows. > > Wouldn't this work? > > gpg2\gpg2.exe --export | gpg14\gpg.exe --import > > Similar pipes are working in Windows. > > > gpg2\gpg2.exe

Re: GPGrelay does not recognize Gpg-2.1 keys; Gpg4win-3beta...

2016-02-12 Thread Peter Lebbing
On 12/02/16 10:28, Matthias Mansfeld wrote: > Maybe it will become a bit more complicated if it is necessary to > keep the keyrings syncronized in both directions. Hehe :). Okay, I'll humour you :). I'd probably extract all known keys from both installations, and propagate deletions. You also

RE: GPGrelay does not recognize Gpg-2.1 keys; Gpg4win-3beta...

2016-02-12 Thread gnupgpacker
Hello, > Matthias: > Maybe it will become a bit more complicated if it is necessary to > keep the keyrings syncronized in both directions. This will happen at > least if you let GPGRelay "Learn aliases from POP3" Switch off! ;) Serious answer: Latest known version of GPGrelay ist 0.962,

RE: GPGrelay does not recognize Gpg-2.1 keys; Gpg4win-3beta...

2016-02-11 Thread gnupgpacker
Thanks for hint! > From: Peter Lebbing [mailto:pe...@digitalbrains.com] > Install GnuPG 1.4 alongside 2.1 and manually sync all keys from GnuPG > 2.1 to 1.4, with for instance: > $ gpg2 --export | gpg --import I did get it running even on Windows: gpg2\gpg2.exe --export --output

Re: GPGrelay does not recognize Gpg-2.1 keys; Gpg4win-3beta...

2016-02-11 Thread Peter Lebbing
First of all... it was established in this thread that you could not share the key store between GnuPG 2.1 and 1.4. Why is that the case? I can happily do that here on Linux. The only gotcha is that you don't profit from the speed gains GnuPG 2.1 gets from the new format of the key store. Oh, and

Re: GPGrelay does not recognize Gpg-2.1 keys; Gpg4win-3beta...

2015-12-21 Thread gnupgpacker
Thanks for answer. It seems GPGrelay is not longer maintained by its developers but is still working with a charme if gpg.exe 1.4x is used. So, how to work around and supply keys to GPGrelay even if using gpg version 2 and up? Regards, Chris http://sites.inka.de/tesla/gpgrelay.html

Re: GPGrelay does not recognize Gpg-2.1 keys; Gpg4win-3beta...

2015-12-21 Thread Peter Lebbing
On 21/12/15 11:33, gnupgpacker wrote: > So, how to work around and supply keys to GPGrelay even if using gpg version > 2 and up? Install GnuPG 1.4 alongside 2.1 and manually sync all keys from GnuPG 2.1 to 1.4, with for instance: $ gpg2 --export | gpg --import I'm not sure how large the

Re: GPGrelay does not recognize Gpg-2.1 keys; Gpg4win-3beta...

2015-12-21 Thread gnupgpacker
Thanks for hint, that would be a distress way. But it seems to be limited to v1.4x supported keys only. What will happen, if v1.4x tries to import gpg-2.x keys with elevated features? Regards, Chris ___ Gnupg-users mailing list Gnupg-users@gnupg.org

Re: GPGrelay does not recognize Gpg-2.1 keys; Gpg4win-3beta...

2015-12-21 Thread Samir Nassar
On Monday 21 December 2015 11:53:13 gnupgpacker wrote: > Thanks for hint, that would be a distress way. > But it seems to be limited to v1.4x supported keys only. > What will happen, if v1.4x tries to import gpg-2.x keys with elevated > features? The features are part of GnuPG 2.x and not part of

Re: GPGrelay does not recognize Gpg-2.1 keys; Gpg4win-3beta...

2015-12-20 Thread Samir Nassar
On Sunday 20 December 2015 10:44:58 gnupgpacker wrote: > But if using GPGrelay 0.9.6, while starting it displays attached error > message. There seems to be a different key storing location or key format > between 1.4x and 2.1x versions, isn't it? This is not about the key format. It appears

GPGrelay does not recognize Gpg-2.1 keys; Gpg4win-3beta...

2015-12-20 Thread gnupgpacker
Hello, I did install Gpg4win-3.0 beta (with gpg 2.1.10 included). All older pub/sec keys are imported with Kleopatra, gpg encryption / decryption is working. But if using GPGrelay 0.9.6, while starting it displays attached error message. There seems to be a different key storing location or key

Re: GPG4Win 2.2.3 Smart card support

2015-03-10 Thread Werner Koch
On Tue, 10 Mar 2015 08:14, deepak.sax...@safenet-inc.com said: I am trying to test file encryption with SafeNet smart cards. (CardOs/ Java and other tokens). I am getting error message: The card application is not yet supported. You need to write an application which GnuPG knows about. The

RE: GPG4Win 2.2.3 Smart card support

2015-03-10 Thread Saxena, Deepak
Hi Yutaka, I am trying to test file encryption with SafeNet smart cards. (CardOs/ Java and other tokens). I am getting error message: The card application is not yet supported. I have dll libraries for my tokens but I am new to GPG4Win. Can you please guide me the way to import the library

GPG4Win 2.2.3 Smart card support

2015-03-09 Thread Saxena, Deepak
Hello, I am Deepak Saxena from Gemalto (formerly SafeNet Inc) and I am curious if smart cards are supported for storing the keys which will be used to encrypt files or email using gpg4win. I have installed gpg4win 2.2.3 and want to test SafeNet smart cards. I am getting following error

Re: GPG4Win 2.2.3 Smart card support

2015-03-09 Thread NIIBE Yutaka
Hello, This is second time for me to receive the message like: The information contained in this electronic mail transmission may be privileged and confidential, and therefore, protected from disclosure. If you have received this communication in error, please notify us immediately by

GPG4Win 2.2.3 Smart card support

2015-03-02 Thread Saxena, Deepak
Hello, I am Deepak Saxena from Gemalto (formerly SafeNet Inc) and I am curious if smart cards are supported for storing the keys which will be used to encrypt files or email using gpg4win. I have installed gpg4win 2.2.3 and want to test SafeNet smart cards. I am getting following error

Import pubkey to Thunderbird/Enigmail/Gpg4Win

2015-01-08 Thread gnupgpacker
Hello, if importing a public gpg rsa key to current Thunderbird/Enigmail/Gpg4Win on Win7-64, there is an issue with German Umlaute, pls refer to attached screenshot. Exported key has been created by GPG-1.4.18/Win7-64, importing Enigmail works with GPG4Win (GPG-2.0.26)/Win7-64. Everything

Gpg4win 2.2.3 released with GnuPG

2014-11-27 Thread Bernhard Reiter
You seen the news Gpg4win 2.2.3 is here. :) http://lists.wald.intevation.org/pipermail/gpg4win-announce/2014-November/62.html and with 2.0.26. So why not GnuPG 2.1? Because 2.2.3 is a minor release that fixes important defects. Before we can publish a GnuPG version with GnuPG 2.1 we would

Re: GPG4Win question

2014-07-12 Thread da...@gbenet.com
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/07/14 14:10, Philip Jackson wrote: On 11/07/14 11:45, da...@gbenet.com wrote: Hi All, In what folder does gpg4win store it's gpa.conf and pubring.gpg files

Re: GPG4Win question

2014-07-12 Thread Ingo Klöcker
Hi David, On Saturday 12 July 2014 09:02:09 da...@gbenet.com wrote: htmlhead meta http-equiv=Content-Type content=text/html; charset=utf-8 /head body bgcolor=#FF text=#00 br -BEGIN PGP SIGNED MESSAGE-br Hash: SHA1br br [snip] -BEGIN PGP SIGNATURE-br Version:

Re: GPG4Win question

2014-07-12 Thread da...@gbenet.com
On 12/07/14 17:22, Ingo Kl�cker wrote: Hi David, On Saturday 12 July 2014 09:02:09 da...@gbenet.com wrote: htmlhead meta http-equiv=Content-Type content=text/html; charset=utf-8 /head body bgcolor=#FF text=#00 br -BEGIN PGP SIGNED MESSAGE-br Hash: SHA1br br [snip]

GPG4Win question

2014-07-11 Thread da...@gbenet.com
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi All, In what folder does gpg4win store it's gpa.conf and pubring.gpg files? Thanks David - -- “See the sanity of the man! No gods, no angels, no demons, no body. Nothing

Re: GPG4Win question

2014-07-11 Thread Philip Jackson
On 11/07/14 11:45, da...@gbenet.com wrote: Hi All, In what folder does gpg4win store it's gpa.conf and pubring.gpg files? In Windows 7, 64bit, these files are in /Users/your_user_name/AppData/Roaming/gnupg/ regards, Philip 0x23543A63.asc Description: application/pgp-keys

Re: GPG4Win question

2014-07-11 Thread Pete Stephenson
On Fri, Jul 11, 2014 at 11:45 AM, da...@gbenet.com da...@gbenet.com wrote: Hi All, In what folder does gpg4win store it's gpa.conf and pubring.gpg files? In Windows 7 at least, it's in %appdata%\Roaming\gnupg -- Pete Stephenson ___ Gnupg-users

gpg4win

2014-07-08 Thread Dr. Bernhard Kleine
Do you know of a maillist or a forum for gpg4win ? I have problems to install. Bernhard ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: gpg4win

2014-07-08 Thread Kosuke Kaizuka
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, On Tue, 8 Jul 2014 10:38:12 +0200, Dr. Bernhard Kleine wrote: Do you know of a maillist or a forum for gpg4win ? I have problems to install. There are mailing lists and support forums in English and German. Eniglish ones are more active

Gpg4Win // GnuPG 2.x

2014-01-02 Thread vedaal
Am using Gpg4win 2.2.1 /GnuPG 2.0.22 Did gpg --dump-options and noticed that the --faked-system-time option is not listed. Was this option removed? vedaal ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo

Re: Why trust gpg4win?

2013-10-28 Thread Werner Koch
On Tue, 10 Sep 2013 15:18, ndk.cla...@gmail.com said: way to connect about anything to a computer. Emulated keyboard which sends ANSI control codes to take over your box without you noticing? Uh? Whithout you noticing? For sure you know more than me, but to my knowledge an USB keyboard only

Re: gpg4win pinentry ignores PIN-pad

2013-10-23 Thread Tapio Sokura
Hello, On 23.10.2013 0:37, Martin Wolters wrote: I am using gpg4win 2.2.1, which according to the change log supports the SPR332 PIN-pad, but pinentry requests the PIN from the keyboard. Is there anything I need to configure to enforce the entry from the card reader? I'm having the exact same

gpg4win pinentry ignores PIN-pad

2013-10-22 Thread Martin Wolters
Hi, I am using gpg4win 2.2.1, which according to the change log supports the SPR332 PIN-pad, but pinentry requests the PIN from the keyboard. Is there anything I need to configure to enforce the entry from the card reader? In GNU/Linux, pinentry only opens a window telling me to enter the PIN

Re: Why trust gpg4win?

2013-09-15 Thread Marko Randjelovic
On Fri, 13 Sep 2013 09:19:10 +0200 NdK ndk.cla...@gmail.com wrote: Il 12/09/2013 23:10, Marko Randjelovic ha scritto: All the time I read suggestions on using USB sticks and I must say people are crazy about USB sticks. It is more convenient to use optical media then USB stick because

Re: Why trust gpg4win?

2013-09-13 Thread NdK
Il 12/09/2013 23:10, Marko Randjelovic ha scritto: All the time I read suggestions on using USB sticks and I must say people are crazy about USB sticks. It is more convenient to use optical media then USB stick because they are read only. Boot from Live CD, not from USB stick and use USB

Re: Why trust gpg4win?

2013-09-13 Thread Peter Lebbing
On 13/09/13 09:19, NdK wrote: PS: I'll tell you a secret: there are USB keys with a write protect switch :) Since people were concerned about hacking the USB key, you need to define the scenario. First of all, if we are talking about hacking through a rogue firmware update for the USB key: is

Re: Why trust gpg4win?

2013-09-13 Thread Jan
09/12/2013 22:03, NdK wrote: You really should define your security perimeter. 09/13/2013 09:19, NdK wrote: I can be reasonably sure nobody will hack my machine just to read my mail. Obama can be reasonably sure that *many* attackers will try. My security perimeter should be equal to the

Re: Why trust gpg4win?

2013-09-13 Thread David Smith
On 09/10/13 21:42, Jan wrote: 10/9/2013 14:19, Werner Koch wrote : So what about using that free USB stack for AVR's to implement a flash device? You would be able to audit about everything; flylogic even has these nice pictures of the ATmega88 masks... 10/9/2013 16:33, David Smith wrote:

Re: Why trust gpg4win?

2013-09-13 Thread Jan
In 09/13/2013 14:05, NdK wrote: Some other approach might be to compare the output of several versions of gnuPG, PGP etc.. This way you could check whether the information was secretly decrypted with a second FBI key. This is even possible for someone how is no programer. Do you think

Re: Why trust gpg4win?

2013-09-13 Thread Jan
On 09/13/2013 14:05, NdK wrote: What happens if one of your correspondents is willing to undergo the whole procedure and he's an FBI agent? I'd tell him confidential information, - but I did not intent to protect me against such a thread by means of gnuPG. If you want to certify that your

Re: Why trust gpg4win?

2013-09-13 Thread NdK
Il 13/09/2013 21:12, Jan ha scritto: How can you check there isn't a weakness in RNG, for exampel [...] There are statistical test with which you can test whether a random number generator produces for instance uniformly distributed numbers. This in connection with the above procedure might

Re: Why trust gpg4win?

2013-09-12 Thread NdK
Il 11/09/2013 11:48, Pete Stephenson ha scritto: Actually, I was thinking of something that was the exact opposite: some device (which I don't think exists) that would allow one to connect a USB flash drive to the device, and have the device convert that into RS232 serial data for the

Re: Why trust gpg4win?

2013-09-12 Thread Jan
To: gnupg-users@gnupg.org Sent: Thursday, September 12, 2013 8:43 AM Subject: Re: Why trust gpg4win? Il 11/09/2013 11:48, Pete Stephenson ha scritto: Actually, I was thinking of something that was the exact opposite: some device (which I don't think exists) that would allow one to connect a USB flash

Attacking an offline system (was: Why trust gpg4win?)

2013-09-12 Thread Peter Lebbing
On 12/09/13 15:55, Jan wrote: Do you see any reasonable attack vectors? What do you think? The moment someone plugs in a mass storage device and we're talking about attacking his computer, I think of a manipulated file system, exploiting an error in the file system driver of the kernel (which

Re: Why trust gpg4win?

2013-09-12 Thread Marko Randjelovic
On Thu, 12 Sep 2013 15:55:24 +0200 Jan takethe...@gmx.de wrote: 2.1 Most people have only one PC and windows as operating system, so the linux/unix distribution should be installed on an USB device. This device must not be plugged into the PC if windows is running, in order to avoid a

Re: Why trust gpg4win?

2013-09-11 Thread Jan
On 10/09/2013 15:18, NdK wrote: You'd be exposed nearly to the same attack vectors. Plus some more (the ones that handle the extra layer), so you'd have to check more code. So what about using that free USB stack for AVR's to implement a flash device? You would be able to audit about

Re: Why trust gpg4win?

2013-09-11 Thread Pete Stephenson
On Wed, Sep 11, 2013 at 11:01 AM, Jan takethe...@gmx.de wrote: On 10/09/2013 15:18, NdK wrote: You'd be exposed nearly to the same attack vectors. Plus some more (the ones that handle the extra layer), so you'd have to check more code. So what about using that free USB stack for AVR's to

Re: Why trust gpg4win?

2013-09-10 Thread Werner Koch
On Tue, 10 Sep 2013 09:50, ndk.cla...@gmail.com said: First error: USB is *not* a peer protocol. It's master-slave. FireWire is a peer protocol. However, that is implemented by computers at boths ends and the software there may have backdoors or explotable code which coult be used for all kind

Re: Why trust gpg4win?

2013-09-10 Thread Jan
On 10/9/2013 14:19, Werner Koch wrote : However, [USB] is implemented by computers at boths ends and the software there may have backdoors or explotable code which coult be used for all kind of tricks [...] I am shocked! Why was USB constructed that insecure?! On 10/9/2013 14:19, Werner Koch

Re: Why trust gpg4win?

2013-09-10 Thread David Smith
On 09/10/13 15:16, Jan wrote: I don't understand this, what does AVR etc. mean? Is there a substituion for USB? I'd be grateful for an explanation. AVR is a semiconductor manufacturer who make microcontrollers (amongst other things). ___ Gnupg-users

Re: Why trust gpg4win?

2013-09-10 Thread Jan
10/9/2013 14:19, Werner Koch wrote : So what about using that free USB stack for AVR's to implement a flash device? You would be able to audit about everything; flylogic even has these nice pictures of the ATmega88 masks... 10/9/2013 16:33, David Smith wrote: AVR is a semiconductor

Re: Why trust gpg4win?

2013-09-09 Thread Robert J. Hansen
On 9/9/2013 4:52 PM, Jan wrote: Imagine an intact offline PC without auto play enabled for USB drives. Can't. USB is a peer protocol. There's an astonishing amount of computational power on both sides of that USB cable. Protocol negotiation is complex. Put it all together and you get a

Re: Why trust gpg4win?

2013-09-07 Thread Doug Barton
On 08/25/2013 07:39 AM, Larry Brower wrote: BSD might have too high a learning curve for most ordinary people. A custom BSD distro targeted at non-technical people would be useful here. Perhaps one which took Security and Privacy into account as design goal. http://www.pcbsd.org/

Re: Why trust gpg4win?

2013-09-07 Thread Doug Barton
On 08/22/2013 11:22 AM, Jasper den Ouden wrote: Compiling your own fixes the issue of the sources not corresponding to binaries. Only if you're sophisticated enough to be able to understand the compiler itself, all of the libraries that are linked in, etc. etc. Even in open source software

Re: [Gpg4win-announce] Gpg4win 2.2.0 released

2013-08-27 Thread Werner Koch
On Mon, 26 Aug 2013 23:39, faramir...@gmail.com said: Nice! But... is the stable version different than Gpg4win 2.2.0-beta56 ? Sometimes the final version of a product is the same as the last beta. Yes. Here are the commits since beta56: 305eb8e3 * gpg4win-2.2.0 origin/master origin/HEAD

Re: [Gpg4win-announce] Gpg4win 2.2.0 released

2013-08-26 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 El 21-08-2013 8:53, Emanuel Schütze escribió: Hello, we are pleased to announce the availability of the new stable Gpg4win version 2.2.0. Nice! But... is the stable version different than Gpg4win 2.2.0-beta56 ? Sometimes the final version

Re: Why trust gpg4win?

2013-08-25 Thread Pete Stephenson
On Sat, Aug 24, 2013 at 11:14 PM, Jan takethe...@gmx.de wrote: It seems quite easy to advice people to have an offline windows PC with gpg4win on it and all their private stuff and a windows(?) online PC next to it. They could transfer encrypted messages with an USB stick from one PC

Re: Why trust gpg4win?

2013-08-25 Thread Laurent Jumet
Hello Pete ! Pete Stephenson p...@heypete.com wrote: The easiest and least-expensive solution to this situation is using smartcards: http://g10code.com/p-card.html -- the private key is kept securely on the smartcard. Any private-key operations (i.e. signing or decrypting) are handled

Re: Why trust gpg4win?

2013-08-25 Thread Jan
- Original Message - From: Jasper den Ouden o.jas...@gmail.com To: gnupg-users@gnupg.org Sent: Thursday, August 22, 2013 8:22 PM Subject: Re: Why trust gpg4win? As others noted, endpoints are too often insecure. Arent computers getting much cheaper now, as shown by say, the raspberry

Re: Why trust gpg4win?

2013-08-25 Thread Larry Brower
On 08/24/2013 11:34 PM, mirimir wrote: Small flash cards are cheap enough to use once and then destroy. This doesn't resolve the problem of the device being compromised as soon as it is plugged into a compromised system. There is a lot of malware that will copy itself to any disk that gets

Re: Why trust gpg4win?

2013-08-25 Thread Josef Schneider
On Sun, Aug 25, 2013 at 2:33 PM, Jan takethe...@gmx.de wrote: Can you recommend such an operating system? Your idea seems practicable and convenient to me. Would users have to refrain from flash videos? I would suggest OpenBSD for that. If BSD is to exotic, then Debian Stable. Flas is known

Re: Why trust gpg4win?

2013-08-25 Thread Larry Brower
On 08/25/2013 08:24 AM, Josef Schneider wrote: I would suggest OpenBSD for that. If BSD is to exotic, then Debian Stable. Flas is known to have more security holes than one can count, so I would stay very far away from it! BSD might have too high a learning curve for most ordinary people. A

Re: Why trust gpg4win?

2013-08-25 Thread mirimir
On 08/25/2013 02:09 PM, Larry Brower wrote: On 08/24/2013 11:34 PM, mirimir wrote: Small flash cards are cheap enough to use once and then destroy. This doesn't resolve the problem of the device being compromised as soon as it is plugged into a compromised system. There is a lot of malware

Re: Why trust gpg4win?

2013-08-24 Thread Jan
provide a way of secure communication for the majority of the people? This is what I want, since many of my friends are no computer experts and will never be. It seems quite easy to advice people to have an offline windows PC with gpg4win on it and all their private stuff and a windows(?) online PC

Re: Why trust gpg4win?

2013-08-24 Thread Robert J. Hansen
learning curve, and people will overwhelmingly choose the former. We cannot make people care. That's one of the hardest truths I've had to accept. It seems quite easy to advice people to have an offline windows PC with gpg4win on it and all their private stuff and a windows(?) online PC next

Re: Why trust gpg4win?

2013-08-24 Thread mirimir
On 08/25/2013 04:04 AM, Robert J. Hansen wrote: On 8/24/2013 5:14 PM, Jan wrote: SNIP It seems quite easy to advice people to have an offline windows PC with gpg4win on it and all their private stuff and a windows(?) online PC next to it. They could transfer encrypted messages with an USB

Re: Why trust gpg4win?

2013-08-23 Thread David Smith
On 07/26/13 22:20, Johan Wevers wrote: Yes, I know the mantra, and I'm sure that obvious backdoors are not present because they would be found rather quickly. However, more subtle bugs leading to decipherable messages can take more time to find. The infamous PRNG bug in pgp 5 on Unix is a

Re: Why trust gpg4win?

2013-08-23 Thread Johan Wevers
On 23-08-2013 10:37, David Smith wrote: Yes, I know the mantra, and I'm sure that obvious backdoors are not present because they would be found rather quickly. However, more subtle bugs leading to decipherable messages can take more time to find. The infamous PRNG bug in pgp 5 on Unix is a

Re: Why trust gpg4win?

2013-08-23 Thread Randolph D.
Hi Jan you can try this one: http://goldbug.sourceforge.net/ which is available in version 02. It has OpenSSL and gpg method, so additional layers of security. Regards 2013/7/25 takethe...@gmx.de Hi everybody, why should I trust gpg4win? I have doubts since it was ordered by the Bundesamt

Re: Why trust gpg4win?

2013-08-23 Thread Robert J. Hansen
On 08/23/2013 01:09 PM, Randolph D. wrote: you can try this one: http://goldbug.sourceforge.net/ which is available in version 02. It seems disingenuous to say, well, GnuPG says they have no connections to the BSI but if you're concerned about that then try my crypto product because I have no

Re: Why trust gpg4win?

2013-08-22 Thread Jasper den Ouden
The solution of course is as you urged takethe...@gmx.de , to get a free operating system such as Linux or BSD, complete with free build tools compile your own (even non programmers can do that, eg on an OS downloaded from http://www.freebsd.org Compiling your own fixes the issue of the

Re: Why trust gpg4win?

2013-08-22 Thread Henry Hertz Hobbit
is also getting larger all the time making study of the assembler code more difficult. If you ask me, gpg4win was ready for prime time a long time ago. I haven't finished it but here it is: http://www.securemecca.com/public/GnuPG/ http://www.securemecca.com/public/GnuPG/TrustOfGPG4Win-2.txt If you

Re: Trust of GPG4Win - Part 1

2013-07-28 Thread Werner Koch
and not less secure than if I would build it, send it to them for code signing, receiving it back and OpenPGP sign the exe files. BYW, only about 10% of the Gpg4win downloaders also download the .sig file. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz

Re: Why trust gpg4win?

2013-07-26 Thread Mark H. Wood
On Fri, Jul 26, 2013 at 12:14:08AM +0200, Julian H. Stacey wrote: Hi, Reference: From: atair atai...@googlemail.com Date: Thu, 25 Jul 2013 21:17:43 + atair wrote: ... Therefore, changes that look like back doors are VERY unlikely to find their way in a

Re: Why trust gpg4win?

2013-07-26 Thread Julian H. Stacey
Mark H. Wood wrote: On Fri, Jul 26, 2013 at 12:14:08AM +0200, Julian H. Stacey wrote: Hi, Reference: From: atair atai...@googlemail.com=20 Date: Thu, 25 Jul 2013 21:17:43 +=20 =20 atair wrote: ... Therefore, changes that look like back doors are VERY

Re: Why trust gpg4win?

2013-07-26 Thread Jan
. Despite that I agree with Werner Koch who wrote here http://rem.eifzilla.de/archives/2013/07/16/gpg4win-and-the-feds that it is impossible for a single person to check the entire code that runs on a PC, even if it is open source. Especially this is not possible for the average user, since he

Re: Why trust gpg4win?

2013-07-26 Thread Johan Wevers
On 25-07-2013 23:17, atair wrote: This basically means, that everyone(!) can access, modify and redistribute the source code of the program (see [2] if you're interested). There are lots of people (usually volunteers from all over the wold) who do peer reviews on the sources (and if you start

Re: Why trust gpg4win?

2013-07-26 Thread Anthony Papillion
On Jul 26, 2013, at 4:02 PM, Jan takethe...@gmx.de wrote: Still I wonder whether there are many sources for SHA1 sums of gpg4win, that could be used by a windows user to test the integrity of his download (C't ?). Are the SHA1 sums of gpg4win presented on the download site checked

Trust of GPG4Win - Part 1

2013-07-26 Thread Henry Hertz Hobbit
, not realizing the damage that it would do. Here is the pointer to the ACM delivery. You need to understand that they were talking about GnuPG running on a VM (Virtual Machine) in the cloud: https://dl.acm.org/citation.cfm?id=2382230 That is nothing close to what GPG4Win is doing running natively

Why trust gpg4win?

2013-07-25 Thread takethebus
Hi everybody, why should I trust gpg4win? I have doubts since it was ordered by the Bundesamt für Sicherheit in der Informationstechnik (BSI), which has close connections to secret services. Is gunPT any better? Finally, why should I trust gunpg? I'm a windows user. Thanks for any answers

Re: Why trust gpg4win?

2013-07-25 Thread atair
On 7/25/13, takethe...@gmx.de takethe...@gmx.de wrote: Hi everybody, why should I trust gpg4win? I have doubts since it was ordered by the Bundesamt für Sicherheit in der Informationstechnik (BSI), which has close connections to secret services. Is gunPT any better? Finally, why should I

Re: Why trust gpg4win?

2013-07-25 Thread Julian H. Stacey
Hi, Reference: From: atair atai...@googlemail.com Date: Thu, 25 Jul 2013 21:17:43 + atair wrote: ... Therefore, changes that look like back doors are VERY unlikely to find their way in a release, because hundreds of people are looking how the software evolves and will

Re: Why trust gpg4win?

2013-07-25 Thread Robert J. Hansen
On 7/25/2013 3:34 PM, takethe...@gmx.de wrote: why should I trust gpg4win? It's been years -- 25 years or more -- since I've read Victor Milan's The Cybernetic Samurai. I only remember one scene from the novel, but it's a scene of such vividness that it's been permanently burned into my brain

Re: Why trust gpg4win?

2013-07-25 Thread Hauke Laging
Am Do 25.07.2013, 18:31:17 schrieb Robert J. Hansen: Why should you trust GPG4WIN? Beats me. That's on you. No. That is a question that can easily be answered by the public (in both directions) and already has been answered here. Not the why is up to him but the final whether

Re: Why trust gpg4win?

2013-07-25 Thread Werner Koch
On Thu, 25 Jul 2013 21:34, takethe...@gmx.de said: why should I trust gpg4win? I have doubts since it was ordered by the Bundesamt für Sicherheit in der Informationstechnik (BSI), which has close connections to secret services. Is gunPT any better? Finally, If you are interested in my take

Re: Why trust gpg4win?

2013-07-25 Thread Atom Smasher
On Thu, 25 Jul 2013, takethe...@gmx.de wrote: why should I trust gpg4win? I have doubts since it was ordered by the Bundesamt f?r Sicherheit in der Informationstechnik (BSI), which has close connections to secret services. Is gunPT any better? Finally, why should I trust gunpg? I'm a windows

Re: Why trust gpg4win?

2013-07-25 Thread Henry Hertz Hobbit
On 07/25/2013 07:34 PM, takethe...@gmx.de wrote: Hi everybody, why should I trust gpg4win? I have doubts since it was ordered by the Bundesamt für Sicherheit in der Informationstechnik (BSI), which has close connections to secret services. Is gunPT any better? Finally, why should I trust

Re: Why trust gpg4win?

2013-07-25 Thread Robert J. Hansen
On 7/25/2013 3:34 PM, takethe...@gmx.de wrote: why should I trust gpg4win? I have doubts since it was ordered by the Bundesamt für Sicherheit in der Informationstechnik (BSI), which has close connections to secret services. Is gunPT any better? Finally, why should I trust gunpg? I'm a windows

Re: [Gpg4win-devel] Putty and ECDSA support for gpg-agent in 2.0

2013-07-05 Thread Werner Koch
On Fri, 5 Jul 2013 09:28, bernh...@intevation.de said: What is the rational for the default setting of the putty support, which seems to be off? - The same is done under Unix for ssh - After the installation of a new Gpg4win version an also installed Pageant won't work anymore if gpg-agent

Re: [Gpg4win-devel] Putty and ECDSA support for gpg-agent in 2.0

2013-07-05 Thread Bernhard Reiter
On Wednesday 03 July 2013 at 19:25:00, Werner Koch wrote: (gpg-agent --enable-putty-support --daemon) What is the rational for the default setting of the putty support, which seems to be off? -- www.intevation.de/~bernhard (CEO)www.fsfe.org (Founding GA Member) Intevation GmbH, Osnabrück,

Re: [Gpg4win-devel] GpgEX for 64 bit Windows test version

2013-06-25 Thread Josef Schneider
On Mon, Jun 24, 2013 at 6:14 PM, Werner Koch w...@gnupg.org wrote: I need to check how to access the default browser. It uses the class ID of InternetExplorer.Application to lookup IWebBrowser2. Usually just with ShellExecute and Windows figures out the details!

Re: [Gpg4win-devel] GpgEX for 64 bit Windows test version

2013-06-25 Thread Werner Koch
On Tue, 25 Jun 2013 09:38, jo...@netpage.dk said: Usually just with ShellExecute and Windows figures out the details! I do this way in GpgOL. However Marcus decided for soemthing different in GpgEX. I have a dark recollection that this was due to problems with Explorer plugins. The problem

Re: [Gpg4win-devel] GpgEX for 64 bit Windows test version

2013-06-24 Thread Josef Schneider
On Mon, Jun 24, 2013 at 10:01 AM, Werner Koch w...@gnupg.org wrote: Hi! I just uploaded a test version of GpgEX (the GnuPG Explorer Plugin) for Windows 64 bit. This is just the bare standalone DLL without an installer. If you are using a 64 bit Windows system with Gpg4win, you may want

Re: [Gpg4win-devel] GpgEX for 64 bit Windows test version

2013-06-24 Thread Werner Koch
On Mon, 24 Jun 2013 16:09, jo...@netpage.dk said: Hi, I tried all of the possible functions work. Thanks. The only problem I found is, that help asks for Admin rights. And if the rights are granted, it starts Internet Explorer, not the default browser! I need to check how to access the

Bug preventing recent gpg4win from running on Chinese Windows XP?

2013-05-23 Thread Peter Lebbing
On 02/05/13 02:51, 儒風管理部-潘右文 wrote: I believe I downloaded this version gpg4win-1.1.4.exe17-Feb-2009 17:46 9.5M . It is a little bit old but I have a hard time to install newer version on my windows XP SP3. It simplely doesn’t work on my windows XP. I googled it . Some people said

Re: Bug preventing recent gpg4win from running on Chinese Windows XP?

2013-05-23 Thread Werner Koch
On Thu, 23 May 2013 13:29, pe...@digitalbrains.com said: Are the developers aware of a bug preventing use of recent gpg4win on a Chinese Windows XP system? At a glance, it would appear to be something that Yeah, there is a KDE problem. AFAIK, GPA works fine. This issue should be resolved

Windows 101 GPG4WIN

2013-05-21 Thread Henry Hertz Hobbit
of a file is just a bonus. But there are times you need to see the entire file name not to get all fouled up. This is one of those times. Right click on the testsig.bat file and from the GPG4Win menu make a detached signature file of the testsig.bat file. The detached signature

Re: Windows 101 GPG4WIN

2013-05-21 Thread Peter Lebbing
On 21/05/13 20:53, Henry Hertz Hobbit wrote: Double click on the testsig.bat file on XP (you may need to do a runas on Windows Vista (horrors) or Windows 7 (better). This file looks just fine to me, but in general I'd caution anyone not to run commands they do not understand just because

Re: [OT] Re: Please fix subscribe at http://lists.wald.intevation.org/mailman/listinfo/gpg4win-announce

2013-04-18 Thread Jay Sulzberger
On Mon, 15 Apr 2013, MFPA expires2...@ymail.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Monday 15 April 2013 at 2:54:19 AM, in mid:pine.neb.4.64.1304142149510.15...@panix3.panix.com, Jay Sulzberger wrote: What telephone number, what email address should I use to

Re: [OT] Re: Please fix subscribe at http://lists.wald.intevation.org/mailman/listinfo/gpg4win-announce

2013-04-18 Thread Doug Barton
This whole thread is wildly off topic for this list. Can people please stop replying to it? ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

<    1   2   3   4   >