Is the signature encrypted

2012-11-05 Thread HardKor
Hello, I would like to know if when I send an encrypted and signed message the signature is also encrypted or not ? Thank you. HardKor ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Is the signature encrypted

2012-11-05 Thread Peter Lebbing
Hello, I would like to know if when I send an encrypted and signed message the signature is also encrypted or not ? You can find out yourself whether GnuPG encrypts the signature. I did the following: $ echo Hoi|gpg2 -o bla.gpg -r de500b3e -se $ gpg2 --list-packets --list-only bla.gpg

Re: Is the signature encrypted

2012-11-05 Thread David Shaw
On Nov 5, 2012, at 4:57 AM, HardKor hardkor.i...@gmail.com wrote: Hello, I would like to know if when I send an encrypted and signed message the signature is also encrypted or not ? It is. You can manually construct other arrangements if you so desire, but the built in --sign --encrypt

Re: Is the signature encrypted

2012-11-05 Thread Hauke Laging
Am Mo 05.11.2012, 09:39:52 schrieb David Shaw: I would like to know if when I send an encrypted and signed message the signature is also encrypted or not ? It is. You can manually construct other arrangements if you so desire, But not for the (MUA integrated) use with email, can you?

Re: Is the signature encrypted

2012-11-05 Thread David Shaw
On Nov 5, 2012, at 9:47 AM, Hauke Laging mailinglis...@hauke-laging.de wrote: Am Mo 05.11.2012, 09:39:52 schrieb David Shaw: I would like to know if when I send an encrypted and signed message the signature is also encrypted or not ? It is. You can manually construct other arrangements if

Re: [ANN] Hockeypuck: OpenPGP Keyserver

2012-11-05 Thread Daniel Kahn Gillmor
On 11/04/2012 10:46 PM, Casey Marshall wrote: I’d like to share Hockeypuck, an OpenPGP Keyserver I’ve developed in Go (http://golang.org). Cool, i'm glad to hear of it. Does this sync with any of the existing SKS network? I saw no mention of peer synchronization in the README or the project

Re: new release of GPA

2012-11-05 Thread Avi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 This is an incomplete list, but what I like about GPGShell is the following: GPA does not work for me--it just crashes. GPGShell has a number of components: GPGTools for encrypting/decrypting files, GPGKeys which is the keymanager to which GPA is

Re: Is the signature encrypted

2012-11-05 Thread Hauke Laging
Am Mo 05.11.2012, 10:01:02 schrieb David Shaw: Virtually always you *want* your signature to be encrypted. Why? What critical information is exposed by the signature, assuming I do not forge the from address? Why would you want something else? The virus-checking mail gateway may want to at

Re: Is the signature encrypted

2012-11-05 Thread Johan Wevers
On 05-11-2012 16:29, Hauke Laging wrote: I don't understand why PGP/MIME does not define a seperate signature for the relevant sender created headers (from, to, subject, date). That would protect the headers and allow filters to check the sender without exposing the data signature. That

Re: Is the signature encrypted

2012-11-05 Thread Peter Lebbing
On 05/11/12 16:29, Hauke Laging wrote: Why? What critical information is exposed by the signature, assuming I do not forge the from address? You're constricting your view too much to just e-mail in your analysis. If you look at files stored on someone's hard drive, you don't have a from

Re: Is the signature encrypted

2012-11-05 Thread David Shaw
On Nov 5, 2012, at 10:29 AM, Hauke Laging mailinglis...@hauke-laging.de wrote: Am Mo 05.11.2012, 10:01:02 schrieb David Shaw: Virtually always you *want* your signature to be encrypted. Why? What critical information is exposed by the signature, assuming I do not forge the from address?

Re: new release of GPA

2012-11-05 Thread Peter Lebbing
On 2012-11-05 15:10, Avi wrote: This is an incomplete list, but what I like about GPGShell is the following: I'd just like to say: *Thank you* for your constructive contribution. Peter. -- I use the GNU Privacy Guard (GnuPG) in combination with Enigmail. You can send me encrypted mail if you

Re: Is the signature encrypted

2012-11-05 Thread Hauke Laging
Am Mo 05.11.2012, 16:47:40 schrieb Johan Wevers: On 05-11-2012 16:29, Hauke Laging wrote: I don't understand why PGP/MIME does not define a seperate signature for the relevant sender created headers (from, to, subject, date). That would protect the headers and allow filters to check the

Re: Is the signature encrypted

2012-11-05 Thread vedaal
On Monday, November 05, 2012 at 9:44 AM, David Shaw ds...@jabberwocky.com wrote: the built in --sign --encrypt in GPG is: encrypt ( compress ( sign ( data ) ) ) = Then, is there any way to tell if it is signed or not, without decrypting it? (other than the fact that the signed and

Re: Is the signature encrypted

2012-11-05 Thread David Shaw
On Nov 5, 2012, at 11:44 AM, ved...@nym.hush.com wrote: On Monday, November 05, 2012 at 9:44 AM, David Shaw ds...@jabberwocky.com wrote: the built in --sign --encrypt in GPG is: encrypt ( compress ( sign ( data ) ) ) = Then, is there any way to tell if it is signed or not,

Re: Is the signature encrypted

2012-11-05 Thread Johan Wevers
On 05-11-2012 17:31, Hauke Laging wrote: Given the amount of problems that can arise from spam and malware I am surprised that the Western governments seem not to do anything about securing this meanwhile critical infrastructure. They try, but if I must choose between a strictly

Re: [ANN] Hockeypuck: OpenPGP Keyserver

2012-11-05 Thread Kristian Fiskerstrand
On 11/05/2012 04:04 PM, Daniel Kahn Gillmor wrote: On 11/04/2012 10:46 PM, Casey Marshall wrote: I’d like to share Hockeypuck, an OpenPGP Keyserver I’ve developed in Go (http://golang.org). Cool, i'm glad to hear of it. Does this sync with any of the existing SKS network? I saw no mention

Re: new release of GPA

2012-11-05 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 El 30-10-2012 9:31, Werner Koch escribió: On Mon, 29 Oct 2012 21:41, r...@sixdemonbag.org said: Could you perhaps make a list of, say, the top five features GPGshell supports that GPA doesn't? Things that you, yourself, use regularly, That

Re: new release of GPA

2012-11-05 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Monday 5 November 2012 at 8:22:07 PM, in mid:50981fef.6040...@gmail.com, Faramir wrote: I have 2 questions: 1.- Is it me, or gpg4win site is down? http://gpg4win.org/ is working for me at the moment. I wasn't trying an hour ago. (-;

Re: new release of GPA

2012-11-05 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Sunday 4 November 2012 at 4:45:05 PM, in mid:87ehk92u7i@vigenere.g10code.de, Werner Koch wrote: No, it is in 0.9.3 which was released after the last Gpg4win beta. Thanks. I'll keep an eye out for a windows binary. - -- Best regards