Re: 1.4.10 BZIP2 in Windows Build

2009-09-04 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 David Koppenhofer wrote: I asked the same question in the form of a bug report on g10code https://bugs.g10code.com/gnupg/issue1126 As you can see from the bug, it was recommended that I use gpg4win - nevermind the fact I don't want or need all

Re: BZIP2

2009-09-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Werner Koch wrote: ftp://ftp.gpg4win.org/gpg4win/gpg4win-light-2.0.0.exe ftp://ftp.gpg4win.org/gpg4win/gpg4win-light-2.0.0.exe.sig and select only the GnuPG component. If anyone tries this suggestion I would be interested to learn if it

Re: BZIP2

2009-09-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Sean Rima wrote: Just removed 1.4.10, installed just the gpg section and restarted GPGshell under Vista and it works fine Since Werner and the literature state that it is Ok to install both side-by-side is it really necessary to uninstall the

Build Question RE: svn5158

2009-09-06 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Attempting to Build svn5158 with the MSYS/MinGW Environment I came up short with an Error I haven't seen before. In the doc Directory the line below caused the Build process to Fail. gnupg1.texi :4: @include 'version.texi' : No such file or

Re: choosing an encryption target from a User ID

2009-09-22 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 John Clizbe wrote: IIRC, it's the first usable key with a matching User ID. Period. First one it can use. My usual 'solution' for this is to 'Disable' the non-preferred or unused Key until such time as it is Revoked or I have been otherwise

Re: choosing an encryption target from a User ID

2009-09-22 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 David Shaw wrote: [1] PGP has a GUI nowadays, so this sort of thing doesn't apply in the same way any longer. I don't have my copy of PGP command line online at the moment, so I can't check what it does, but I'd be surprised if it didn't

Re: choosing an encryption target from a User ID

2009-09-22 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Daniel Kahn Gillmor wrote: On 09/22/2009 04:57 PM, John W. Moore III wrote: Like GPG it utilizes the 1st encountered Key that matches the Send To: address is valid. this is not what gpg does. gpg simply chooses the first key with a matching

Re: GPG Software

2009-10-02 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 michael GRIFFITHS wrote: Sorry I forgot to actually answer your question. It will appear under the add/remove programs. For windows it will most likely be named “GnuPG for windows” IIRC, it will appear under Add/Remove Programs as GPGOL. [GPG

Re: beginner type questions

2009-10-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Durant, Dean wrote: Hello, I noticed, on windows (which I truly despise), when I type C:\Documents and Settings\me\Application Data\gnupggpg --gen-key I get: gpg (GnuPG) 2.0.12; Copyright (C) 2009 Free Software Foundation, Inc. (add'l

Re: OpenPGP error

2009-10-11 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Sean Wilson wrote: Why is it when I sign an email and someone replies to it I sometimes get the following error: Part of the message signed; click on 'Details' button for more information in the details it says: OpenPGP Security Info

Re: A Couple of Questions...

2009-10-25 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 sari Al-alem wrote: I dont know if this is the right place but im new to this encryption software and i would like to ask some questions: 1- does GPG have to be installed on all users who will recieve my mail? Short Answer = Yes. Long Answer =

Re: digital signature primary key and encryption subkey

2009-11-18 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 John Clizbe wrote: M.B.Jr. wrote: Thanks again, David. The last dumb question, I promise, would be: There aren't any dumb questions. Yes, there are! They are the Questions that _were_never_ asked! JOHN ;) Timestamp: Wednesday 18 Nov 2009,

Re: key question

2010-02-24 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Tobias Holz wrote: Hey Folks, i succesfully installed gnupg on my Win7 machine. I want to use it with Thunderbird to encrypt personal eMails. Now I've got some questions: 1) What does happen if I lose my private key? Can I burn it to a CD/DVD?

Re: key question

2010-02-27 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Jerry wrote: Maybe not totally apropos to this discussion; however, I worked in traffic analysis for several years. If given enough leeway, you would be amazed at the information you can gather about an individual, and at its astonishing

Re: Migrating from PGP to GPG question

2010-03-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Laurent Jumet wrote: Hello Smith, ! Smith, Cathy cathy.sm...@pnl.gov wrote: I've tried using the --yes option without success to suppress this interactive prompt doesn't pop up. This encryption does need to run in a batch job. What do I

Re: Memory forensics

2010-03-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Robert J. Hansen wrote: http://jessekornblum.livejournal.com/259124.html For quite some time we've known that hibernation files present risks for information security. However, there are always those who say until I see an actual

Re: Outlook S/MIME

2005-07-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 When you have composed your email, but before hitting SEND; click on the little down arrow next to the S/MIME button and remove the check mark next to Digitally Sign and Digitally Encrypt. Then hit SEND! JOHN :) Timestamp: Tue 05 July 2005,

Setting Digest-Algo in 1.4.2

2005-08-10 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 While polishing my settings on this new PC, I realize I've forgotten how to set RIPEMD160 as the Hash Algo to use. Running M$ XP with 1.4.2/Enigmail GPGshell 3.45. Help Appreciated! JOHN :) Timestamp: Wed 10 August 2005, 06:58 PM --400 (Eastern

Sad News, I'm Afraid....

2005-08-20 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 On August 1st...Maxine Brandt died in Hospital. The COD was a chronic lung infection. Below I am including the Post I placed on PGPNET, in addition to some comments included to other folks.

Need German Translation, Please!

2005-08-23 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 There is a Thunderbird Extension offered at: http://www.thunderbird-mail.de/ However, being nowhere fluent in German (I can only ask for a Beer, Woman and the Men's Room) I haven't a clue as to whether or not this would be a practical extension

Re: OpenPGP Card

2005-09-07 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Alphax wrote: You trust the Microsoft CryptoAPI? Well why don't you just run Windows, which Microsoft Says is Perfectly Secure, and use Microsoft's inbuilt X.509 instead of OpenPGP, since Microsoft Guarantees No Back Doors in the CryptoAPI?

Re: Disk Partition

2005-10-07 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Eric wrote: On Fri, 2005-10-07 at 10:07 +0800, nidhog wrote: Do you guys have any suggestion as to how to go about encrypting a partition that can be available both to linux and win32? It's not easy to do this, and I don't think it will get

Re: Lack of backwards compatability?

2005-10-13 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 It would be easier to confirm the sig if one had the Key or ability to Import it. JOHN :) Timestamp: Thursday 13 Oct 2005, 06:50 PM --400 (Eastern Daylight Time) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2 (MingW32) Comment: Public Key at:

Re: security measures?

2005-10-15 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mica Mijatovic wrote: 2. frequency of changing passphrases - in a user who accesses emails via net cafes (think keyloggers) Also good idea. Let's say after each use via net cafes, as soon as possible. Well, would be ideally. However,

Re: Bogus Key on Keyservers

2005-10-16 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Tad Marko wrote: Right, which is the reason for the continued need to let people know your key signature via a trusted means. But, if someone was wanting to hassle you by creating scads of bogus keys on keyservers, it still makes it that much

Re: Delete key from keyserver

2005-10-23 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Neil Williams wrote: As I said, you can verify my key via someone else. Once your key is in the strong set this becomes a lot easier. I regularly come across keys used on this list that are instantly verified by the web of trust. The web of

Re: Create key's over 4096 bit ????

2005-12-23 Thread John W. Moore III
Johan Wevers wrote: [EMAIL PROTECTED] wrote: might be interesting to see the year 2020 gnupg version, the max keylength proposed then, and then link back to this thread ;-) Considering the direction the EU is moving, it might be very wel that key lengts above 64 bits RSA or DH are

Re: PKA

2005-12-26 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 John Clizbe wrote: Without context it is difficult to tell. My guess would be Public Key Authentication; e.g. OpenSSH. I believe your Guess to be correct. Since the Release of GnuPG 1.4.3 *will* contain support for PKA Key retrieval (among

For Jean-David Bryer

2006-01-23 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 You're using GnuPG 1.2.1, so the immediate suggestion would be to upgrade to 1.4.2. A *lot* has changes since 1.2.1. JOHN :) Timestamp: Monday 23 Jan 2006, 15:02 --500 (Eastern Standard Time) -BEGIN PGP SIGNATURE- Version: GnuPG

Re: Uid management for IM

2006-03-10 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Charly Avital wrote: Option 2 is better, IMO. I don't think you can create a new uid *without* an e-mail address, unless you present it (when going through the generation's prompts) as something that looks like an e-mail address, e.g. [EMAIL

Re: Is there any GnuPG version which works with Windows Mobile 5.0?

2006-03-28 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Remco Post wrote: since the xscale cpu found in most wm 5.0 devices is in no way compatible with an ia32 (eg pentium) cpu, this is nonsense. There is some effort on gnupg on wince/wm, but it is nowhere near production ready... more like alpha

RE: no-honor-keyserver-url

2006-03-28 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David makes a very good point! The possibility strongly exists that an individual has requested a /specific/ Keyserver for refreshing or downloading their Key because they have control of their Key that way. They may *not* wish that their Key be

Re: ElGamal: key length vs performance

2006-04-01 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 feitao wrote: Hi, As I understand, by default, GunPG uses ElGamal to encrypt/decrypt files, and the recommended key length is 1024 bit. Is there any information on how encryption/decryption time changes with the key length? Thanks a lot,

pka-lookups

2006-04-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Throughout the 'snapshot' phase of 1.4.3 this ability was turned OFF by default. With the release of 1.4.3 stable and the availability of cross-certification and pka-lookup now widely available, will the features once defaulted to off be defaulted

Re: 1.4.3 // proper syntax for --edit-key cross-certify ?

2006-04-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Charly Avital wrote: But when I Quit, I am prompted to save changes: -- Command quit Save changes? (y/N) n Quit without saving? (y/N) y -- I have chosen to quit without saving any changes, because the truth is I do

Re: Date and time format

2006-04-06 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David Shaw wrote: OS setting via LC_TIME, according to Microsoft, though I have no idea how to set it on win32. Right Click on the Clock, Select Setting Time/Date. JOHN ;) Timestamp: Thursday 06 Apr 2006, 18:36 --400 (Eastern Daylight Time)

Re: Automated processes

2006-04-06 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 jkaye wrote: I know that for PGP, there's an environment setting that can be used to prevent this. Is there a similar thing for GnuPG, or do I have to jump through some hoops? Hmm.Let me see if I've understood you. You desire to use GPG

Re: Automated processes

2006-04-07 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Raphaël Poss wrote: You can: - use gpg-agent, or - echo passphrase | gpg --batch --passphrase-fd 0 Of course the latter provides little to no security. There is another option. Since you are using Outlook (presumably for Corporate

Re: More questions about: gpg: WARNING: message was not integrity protected

2006-04-09 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Robert J. Hansen wrote: David Shaw wrote: That's sort of an apples and oranges question. CAST5 is a 128-bit cipher. AES256 is a 256-bit cipher. Is CAST5 weaker than AES256? Yes, but that's that not to say that CAST5 is broken somehow: AES256

Re: newbie: --edit-key problem

2006-04-18 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Michael D. Berger wrote: What am I doing wrong? In any case, if I could get the result by editing gpg.conf I would prefer it. Well, many folks will advise you *not* to do this because if you should send an encrypted message to someone who does

Re: USB Drive Use

2006-04-26 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sarixe Avaliesz wrote: Hey all, I was wondering if it was possible to configure GPA to run solely from a USB drive. Is it possible to have a gpa.conf on the USB so that it doesn't require it in Application Data? Thanks. Sarixe If you

Re: Getting KMail to let me encrypt to an unsigned key?

2006-05-16 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Adam Funk wrote: Thanks. Will it be possible later either to un-lsign the key or to sign it properly (for export)? Er.Ahem.Re-Signing the Key _with_ an 'Exportable' Signature does this. This *is* an available feature via Enigmail and

Re: sign and encrypt

2006-06-07 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Zach Himsel wrote: - gpg control packet Janusz A. Urbanowicz wrote: | On Mon, Jun 05, 2006 at 11:41:01PM +0200, [EMAIL PROTECTED] wrote: | I have seen in the spec rfc3156 that a message should be signed and | then encrypted, but hypothetically

Re: RSA vs DSA/ElGamal

2006-06-08 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Zach Himsel wrote: My private key was recently compromised (Which sucks, I know). I was in the process of generating a new keypair when I realized Why do I use RSA? What's the difference. Hence my question :) If I *do* use DSA/ElGamal, what

Re: RSA vs DSA/ElGamal

2006-06-08 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Zach Himsel wrote: I created a RSA key that can sign and encrypt (only one key, no subkey). Is that ok? Or is that a security and/or performance weakness? Or is it better? That's Fine! There is *no* security weakness there; as long as the Key

Re: PGP zip

2006-06-09 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Snoken wrote: Hi, I cannot find any gpg-zip-program after installing GnuPG 1.4.3 for Windows. The announce message tells: Added gpg-zip, a program to create encrypted archives that can interoperate with PGP Zip. gpg.zip has nothing

Re: (UK-specific) consultation about RIPA

2006-06-21 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Werner Koch wrote: On Wed, 21 Jun 2006 09:00, Andrew Bunting said: In other words, if the software had a tripwire function that notified other nominated individuals when a private key was exported then the subject of the notice may not

Re: personal-cipher/digest-preferences

2006-06-23 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Jørgen Lysdal wrote: Is there anything i can put in my options file that will make gpg use SHA256 for my RSA and RIPEMD160 for my DSA without having the personal-digest-preferences thing in my options file? This is really important to me

Re: [Announce] GnuPG 1.4.5 released (another security fix)

2006-08-01 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Bo Berglund wrote: Is there a new binary version also for gpg4win that includes this release? Not just yet; however, Werner's Release Announcement *did* state that the 'New' gpg4win package _will_ be available very shortly. JOHN :-D Timestamp:

Re: DSA2

2006-09-21 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Alphax wrote: Note that it's also not immediately obvious what the format of the signature packet used in a clearsigned message is... I haven't looked at the working draft of the RFC but hopefully it's a lot clearer than the published version.

Re: GPG Outlook Plug-In and Signatures

2006-10-14 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Alphax wrote: PGP/MIME capable mail clients /may/ handle it, but you'd have to actually try it to be certain. Such a test should be conducted off-list in order to avoid flames for an HTML posting. I can't imagine anyone 'Flaming' an honest

Re: Can't propagate key through public keyservers

2006-10-27 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Bjoern Buerger wrote: Michael Kallas wrote: hkp://subkeys.pgp.net or hkp://sks.keyserver.penguin.de ? Sorry, the latter is down at the moment. But you can try hkp://random.sks.keyserver.penguin.de instead, which is a collection of public sks

Re: Logo contest closed

2006-11-02 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 NOT a Judge...But a very avid, discerning User. Since every submission has been made in .png Format I have save my Favorites. Those individuals using senderface.xpi within their T- Bird installs will be able to see some of my selections based upon

Re: deleting signatures from uids

2006-11-02 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Peter S. May wrote: Again, such is true for the uids themselves. But revocations for uids that the client doesn't have might or might not be considered superfluous. Perhaps we find a revocation for a uid we don't have yet on one keyserver and

Re: GnuPG 2.0

2006-11-13 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Aldert Hazenberg wrote: On Nov 13, 2006, at 4:28 PM, Werner Koch wrote: A port to Windows might eventually be done but as of now I see no reason for it. What is your reason for no windows port of 2.0 ? Is it a business reason ? Or

Re: Using OpenPGP card.

2006-11-25 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Charly Avital wrote: 1. Apple's Powerbook G4 1.33GHz, MacOSX 10.4.8, gpg 1.4.5, gpg2 (with gpg-agent) 1.9.20, card reader SCR243, OpenPGPCard. 2. Public key URL

Re: Logo ballot reminder

2006-12-01 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 reynt0 wrote: On Fri Dec 01, 2006, Alphax wrote: I saw something weird where moving entries around didn't preserve the order that you had put things in... I ended up writing out all the option numbers on scraps of paper and shuffling them

Re: authenticate flag

2006-12-18 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Aaron J. Graves wrote: Here's an example. From the key in question: pub 1024D/9FB54294 created: 2006-09-17 expires: never usage: SC trust: ultimate validity: ultimate sub 4096g/DE94A6C4 created: 2006-09-17 expires: never usage: E And from

Re: GnuPG ?Bineries? to USE PnuPG with Windows?

2006-12-21 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Patrick Brunschwig wrote: You can get GnuPG from: ftp://ftp.no.gpg4win.org After you have installed GnuPG, start Thunderbird with Enigmail installed. It will usually find GnuPG automatically. Then, the easiest way to get started is to use the

Re: Donations

2007-01-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Robert J. Hansen wrote: If I'm wrong, I invite people to say so, so that I may be corrected. If I'm right, I invite people to say so, so that you may be corrected. I believe I understood your motivation in advocating Donations to FSF clearly.

Re: signing an verifying data without the need of files

2007-01-16 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Björn Mayer wrote: I would like to sign text without first having to create a file where I have to write the text into. -- is it possible to hand the text directly from the standard input? As well I would like to obtain the signature

Re: explain nrsign lsign?

2007-01-28 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 snowcrash+gnupg-users wrote: if my purpose it to impart additional 'confidence' in B to _others_, by signing it with A, then i would *NOT* want to 'lsign', but rather just sign/tsign, *and* publish the pubkey for A. correct? YES, this would

Re: explain nrsign lsign?

2007-01-28 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 snowcrash+gnupg-users wrote: that said, is there any reason NOT to (or, any advantage to ...): *l*sign B with A, and, therefore, NOT distribute A to the keyservers /or via export -- and, instead, reference the A trust-ing-pubkey @ a web page?

Re: GnuPG incompatible with windows-vista ?

2007-03-13 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Sebsatian von Thadden wrote: Under windows, I've never built anything. - But, I can learn it:-) If anyone is building on Vista (or building elsewhere but using it on Vista), try this patch. Thanks a lot for your very fast work. I hope,

PGP Desktop GnuPG

2007-03-14 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Bruce Cowin wrote: If I have generated a key using PGP Desktop, would I be able to import and use that key with GnuPG? Our subscription to PGP Desktop is about to expire and it says the functionality will be reduced to that of PGP Freeware. All

Re: How to sign mail and news under Windows system by using GnuPG?

2007-04-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Robert J. Hansen wrote: Could anybody tell me how to sign a email under Windows by using GnuPG? I've done some google, but could not find any Windows mail Typically, this is done with the assistance of an email plugin. Probably the most

How to protect private keys

2007-04-12 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Moses wrote: My question sound dumb Nonsense; the only 'dumb' Question is the one not asked! How to better protect private keys of GPG users? Some folks 'protect' themselves from this by storing their Keyrings on removable media. (USB Memory

Re: Key Revocation

2007-04-13 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 John Clizbe wrote: Same person. Same key. Just a new email address. Plus the revoked address gives clueful folks the hint that email shouldn't be sent there. Also, the same 'clueful folks' can derive some knowledge form the Sigs on the Revoked

Re: personal-digest-preferences

2007-04-14 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Jørgen Christiansen Lysdal wrote: David Shaw wrote: It's historical. Older versions of GPG generated keys with a standard hash preference of RIPEMD/160 before SHA-1. When GPG later started using that hash preference to decide which hash to

Re: personal-digest-preferences

2007-04-14 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Jørgen Christiansen Lysdal wrote: John W. Moore III wrote: Or change it; say to SHA 256? That will not work, since my goal is not to factor in my own prefs. Not all keys support sha256, so that will leave gpg complaining when i encrypt

Re: commands for gpg keychain access

2007-04-15 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 John Clizbe wrote: gpg --edit-key keyID then 'help' for a listing. You'll want adduid and possibly addphoto BTW - is my signature valid? It was for me: gpg: Good signature from Richard Stoddard [EMAIL PROTECTED] gpg: WARNING: This

Re: Lost passphrase

2007-04-17 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 - i can't revoke it -- no passphrase :-( - i still need the email adresses with the useless keys - i definitely can't find the passphrase OK, Stupid Response Question First: Did You have the common sense to generate a Revocation Certificate

Re: Movies that get it right

2007-04-20 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Robert J. Hansen wrote: And while we're handing out movie recommendations, try for a 1974 Francis Ford Coppola movie called The Conversation. Easily the best fictional movie I've ever seen about real-world communications security.

Re: Key Revocation

2007-04-20 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Chris wrote: I'll be changing over to my new email address tomorrow so I want to make sure I understand the procedure. According to the manpage I want to run $gpg --edit-key [EMAIL PROTECTED] I'm then presented with this info: [EMAIL

Re: RSA 1024 ridiculous / RSA 8192 sublime, and, possible with gnupg.

2007-06-17 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 David Shaw wrote: This year is slightly different in that I'm waiting for someone to discover they can also raise the key size limit for DSA. That, at least, is marginally less strange as I put in code to make the hash size automatically rise

Re: Which key is used when more than one are valid?

2007-06-17 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 David Shaw wrote: On Sun, Jun 17, 2007 at 02:49:21PM -0400, Jean-David Beyer wrote: My gnupg file that I get with edit-keys myuid contains, among other things: sub 2048g/48FF0850 created: 2007-02-24 expires: 2008-02-24 sub 4096g/124E0663

Re: FireGPG (correction)

2007-07-02 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Andrew Berg wrote: There was a mismatch of GPG versions. I fixed that, and FireGPG makes valid signatures with GPG 2.0.4. The algorithm 11 not available problem remains, though. 'Algorithm 11' or S11 is Camellia and *should not* be Enabled

Re: [Announce] GnuPG 2.0.6 released

2007-08-20 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Victor Stuart wrote: Well, I use GnuPG 1.4.7 and 2.0.6 compiled by MingW32, they don't support bzip2. I Compile the 1.4.Branch using MinGW I have bzip2. Did You remember to include it when compiling? JOHN ;) Timestamp: Monday 20 Aug 2007,

Re: Questions about generating keys

2007-08-22 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 John Clizbe wrote: There's no guarantee that your key won't end up on a keyserver nor is there one that your private email address won't leak into the public, All it takes is 1 inadvertent click of 'Refresh All Keys' or a well intentioned

Re: Questions about generating keys

2007-08-24 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Nigel Brown wrote: I should have known better than to doubt Mr Hansen. Nonsense! Mr. Hansen thrives on being doubted as this is what keeps Him on His toes. :-D *LOL* Seriously; any time You Question a statement for reasons other than That's

Re: Questions about generating keys

2007-08-24 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Oskar L. wrote: Traffic analysis will reveal what time you are active, and how much data you are transferring. To only way to protect against it is to download and upload all the time at a constant rate. Not worth it in my situation. It will

Re: feature request

2007-09-28 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Robert J. Hansen wrote: I am not a GnuPG developer; they may disagree with me or outright say hey, sure, we'll support it. That said, I think that what I'm saying here is in rough accordance with their vision of the GnuPG project. If I am

Strange [to Me] build Problem with MSYS

2007-11-16 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Using MSYS with svn4620 the 'make' bombs in doc with: make[1]: Entering directory `/home/Compaq_Owner/4620/doc' make check-am make[2]: Entering directory `/home/Compaq_Owner/4620/doc' cc -o yat2m ./yat2m.c /bin/sh: cc: command not found make[2]:

Build Fail (cont)

2007-11-16 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 While I was checking for the 'first cause' of the previous Failure I discovered this: make[2]: Entering directory `/home/Compaq_Owner/4620/doc' : Warning: missing faqprog.pl, cannot make FAQ echo No FAQ due to missing faqprog.pl FAQ echo See

Re: Build Fail (cont)

2007-11-16 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 John Clizbe wrote: John W. Moore III wrote: While I was checking for the 'first cause' of the previous Failure I discovered this: make[2]: Entering directory `/home/Compaq_Owner/4620/doc' : Warning: missing faqprog.pl, cannot make FAQ echo

Re: Revoke a key - What is with the decrypted messages?

2007-11-23 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 reynt0 wrote: Just a maybe picky question: Does stops new use mean absolutely, like mechanical prevention, stops new use, or does it mean something like stops by a social process, ie like knowledgeable users won't use it anymore? On Fri, 23

Re: Encryption keys: RSA vs. ElGamal

2007-11-26 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Robert J. Hansen wrote: So it would be great if someone could tell me how they differ when it comes to security and efficiency. Answering this in detail will require at least a solid undergraduate degree in either CS or mathematics. Robert's

Re: Combining Secret Keys

2007-12-10 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Brad Tilley wrote: I have three separate gpg secret keys. Initially, I wanted to keep the keys seperate, but today I'd like to have them all together. Is there a way to merge the keys into one key keeping them as they are now? Simply

Re: Backdoor?

2007-12-13 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Robert J. Hansen wrote: Why would you trust the opinions of random people you've never met? For the same reason that One might ask Jim Jones about the Nutritional Value of the Kool-Aid. :-D JOHN ;) Timestamp: Thursday 13 Dec 2007, 08:50 --500

Re: Backdoor?

2007-12-13 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 nate eccels wrote: Does gpg have any trapdoors. Have You ever heard the story about the Frog the Scorpion on the river bank? Still, asking this Question in the Developers Forum indicated a certain amount of Faith that the writers of the code

Re: [Announce] GnuPG's 10th birthday

2007-12-20 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Werner Koch wrote: There is well known saying attributed to Phil Zimmermann: When encryption is outlawed, only outlaws have encryption. Borrowed no doubt from the U.S. National Rifle Association motto of the '60's: When Guns are Outlawed;

Re: [Slightly OT] Just to celebrate GnuPG's 10th birthday!

2007-12-21 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 David Crick wrote: tp://www.flickr.com/photos/hsaito/2125495667/ Yum-Yum. The question is just how we cut the slices for all users. Werner surely this is an example of the dining cryptographers problem! Perhaps the 'Birthday Cake'

Unable to Decrypt

2007-12-22 Thread John W. Moore III
line and output: /usr/local/bin/gpg --charset utf8 --batch --no-tty --status-fd 2 -d - --passphrase-fd 0 --no-use-agent gpg: encrypted with 3072-bit ELG-E key, ID 684C50FA, created 2005-09-23 JOHN W. MOORE III gpg: encrypted with 4096-bit ELG-E key, ID 2215D1C7, created 2002-07-23

BZIP2 in 1.4.8

2007-12-27 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 I have a Correspondent who has built 1.4.8 from the tar.gz for use on Ubuntu. For some reason the Build, even after passing all 27 tests does not list BZIP2 as an available for of compression.:-\ Since the PK is distributed with BZIP2 in

Re: Question about history of hash and cipher collections

2008-01-15 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 [EMAIL PROTECTED] wrote: here is the gpg.conf i'm using, in case i overlooked something: openpgp The above line needs to be added to Your gpg.conf You'll be using 3DES. JOHN ;) Timestamp: Tuesday 15 Jan 2008, 15:14 --500 (Eastern Standard

Re: Need tips on how to backup my keys

2008-01-24 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 - Original Message Subject: Need tips on how to backup my keys From: Steven Woody [EMAIL PROTECTED] To: gnupg-users@gnupg.org Date: Thursday, January 24, 2008 8:38:33 AM When one day my hardisk go bad and I can not access my

Re: more than one recipient

2008-01-31 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 - Original Message Subject: more than one recipient From: Bruce Cowin [EMAIL PROTECTED] To: gnupg-users@gnupg.org Date: Thursday, January 31, 2008 6:16:04 PM This is probably a dumb, basic question but is it possible to list

Re: Cannot Set the Expiration Date on Secure Subkeys

2008-02-18 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 - Original Message Subject: Cannot Set the Expiration Date on Secure Subkeys From: David Botham [EMAIL PROTECTED] To: gnupg-users@gnupg.org Date: Monday, February 18, 2008 8:35:33 PM All, I am having problems setting the

Re: Certification signatures on subkeys

2008-02-28 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Colin Watson wrote: In other words, it looks like any time I go through an --edit-key / --send-keys / --recv-keys cycle (however extended), I'm going to grow six new signatures on my key. Could GnuPG be fixed to check for duplicates before it

Re: Signing people with only one form of ID?

2008-03-02 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Nicholas Cole wrote: But that does not mean the web of trust is useless - far from it. OpenPGP lets you represent all sorts of trust models: you can choose trust the root key of a company, university or computer software project, and thereby

  1   2   3   >