Re: Best practice for periodic key change?

2011-05-06 Thread MFPA
demonstrating the clock discrepancy. Maybe implausible but definitely trivial. - -- Best regards MFPAmailto:expires2...@ymail.com Ultimate consistency lies in being consistently inconsistent -BEGIN PGP SIGNATURE

Re: Best practice for periodic key change?

2011-05-06 Thread MFPA
plausible deniability for your signature. - -- Best regards MFPAmailto:expires2...@ymail.com Ultimate consistency lies in being consistently inconsistent -BEGIN PGP SIGNATURE- iQE7BAEBCgClBQJNxIe8nhSAAEAAVXNpZ25pbmdfa2V5X0lEIHNpZ25pbmdf

Re: Best practice for periodic key change?

2011-05-06 Thread MFPA
is still from yesterday. OK, when was this message signed? When was it sent? When did the server receive it? - -- Best regards MFPAmailto:expires2...@ymail.com Zorba the Greek - before he zorbas you -BEGIN PGP SIGNATURE

Re: sending encrypted messages doesn't work

2011-05-07 Thread MFPA
... - END). Of course, that looses all formatting and doesn't work for attachments. Although, unless you use pgp/mime you will probably already be encrypting the attachments before you attach them. - -- Best regards MFPAmailto:expires2...@ymail.com Always be on the lookout

Re: Best practice for periodic key change?

2011-05-07 Thread MFPA
to raise a question in the mind of the person viewing the signature (if they spot it). and since the cost is so low, that there is no point in not having them (assuming, of course, that you separate master and sub-keys). You can't assume. - -- Best regards MFPA

Re: [OT] Re: Best practice for periodic key change?

2011-05-07 Thread MFPA
as to why the practice should not be allowed. At my bank, I left clear instructions Giving clear instructions to a bank is usually a waste of time. They generally fail to carry them out correctly, in my experience. - -- Best regards MFPAmailto:expires2...@ymail.com

Re: Best practice for periodic key change?

2011-05-07 Thread MFPA
was correctly set when the signature was created makes the discussion a purely academic exercise. - -- Best regards MFPAmailto:expires2...@ymail.com If you can't convince them, confuse them. -BEGIN PGP SIGNATURE

Re: Best practice for periodic key change?

2011-05-07 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Saturday 7 May 2011 at 3:06:16 PM, in mid:201105071606.21732.mailinglis...@hauke-laging.de, Hauke Laging wrote: Am Samstag, 7. Mai 2011, 15:54:21 schrieb MFPA: You can't assume. You can very well if you don't claim that for all cases

Re: [OT] Re: Best practice for periodic key change?

2011-05-07 Thread MFPA
three versions at various times. The one I heard originally (and most often over the years) is the effective date of the instruction to pay. YMMV. Are we OT enough yet? - -- Best regards MFPAmailto:expires2...@ymail.com During an eruption - move away from the volcano

Re: Best practice for periodic key change?

2011-05-07 Thread MFPA
is invalid. I agree that in this specific instance we can assume y z. I do not agree that in general we can assume that an individual with expiry dates on their subkeys keeps their master key securely offline. - -- Best regards MFPAmailto:expires2...@ymail.com Don't ask me

Re: Best practice for periodic key change?

2011-05-07 Thread MFPA
are not valid (anymore). I thought a key was incapable of making signatures with timestamps beyond its expiry time but could still be used to verify signatures that already existed. - -- Best regards MFPAmailto:expires2...@ymail.com A wise man once said ...I don't know

Re: Best practice for periodic key change?

2011-05-07 Thread MFPA
(as would be no signature), just that it isn't very strong documentation. What is to stop that scanned bitmap of a person's signature being applied to a document the individual has no knowledge about? - -- Best regards MFPAmailto:expires2...@ymail.com What's another word

Re: Best practice for periodic key change?

2011-05-07 Thread MFPA
) difficult to verify the (actual) signature time. Maybe we could use something like http://www.itconsult.co.uk/stamper.htm - -- Best regards MFPAmailto:expires2...@ymail.com Gypsy Dwarf Escapes Prison: Small Medium at large -BEGIN PGP SIGNATURE

Re: Best practice for periodic key change?

2011-05-08 Thread MFPA
? Or have I misunderstood? - -- Best regards MFPAmailto:expires2...@ymail.com Humility is no substitute for a good personality. -BEGIN PGP SIGNATURE- iQE7BAEBCgClBQJNxpG8nhSAAEAAVXNpZ25pbmdfa2V5X0lEIHNpZ25pbmdf

Re: Best practice for periodic key change?

2011-05-08 Thread MFPA
form so long as all the required details were included. Complete with cartoon illustrations, they cited examples of an oil drum, an egg, and a cow! They also warned they would levy additional handling charges... - -- Best regards MFPAmailto:expires2...@ymail.com Humility

Re: Best practice for periodic key change?

2011-05-09 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Monday 9 May 2011 at 5:09:00 PM, in mid:201105091809.05423.mailinglis...@hauke-laging.de, Hauke Laging wrote: Am Sonntag, 8. Mai 2011, 14:50:36 schrieb MFPA: Mainly the key's owner, but could also protect others from relying

Re: GPG Problem - invalid radix64 character

2011-05-16 Thread MFPA
. Priceless (-: - -- Best regards MFPAmailto:expires2...@ymail.com Never interrupt me when I'm trying to interrupt you. -BEGIN PGP SIGNATURE- iQE7BAEBCgClBQJN0YnTnhSAAEAAVXNpZ25pbmdfa2V5X0lEIHNpZ25pbmdf

Re: Problem with faked-system-time option

2011-06-12 Thread MFPA
for your Linux advice) and tolerant against all the adverse side effects arising from that manipulation? And why not allow the user to adjust the granularity of the timestamp? For example specifying the date but no time, or simply indicating the year and month? - -- Best regards MFPA

Re: Problem with faked-system-time option

2011-06-13 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Sunday 12 June 2011 at 6:35:57 PM, in mid:201106121936.02971.mailinglis...@hauke-laging.de, Hauke Laging wrote: Am Sonntag, 12. Juni 2011, 15:23:19 schrieb MFPA: Some people labour under the misapprehension that the signature time

Re: Problem with faked-system-time option

2011-06-13 Thread MFPA
. Fair enough. But, as you illustrate above, it is trivial for a signature date/time to be incorrect. Therefore it is potentially unsafe to rely on them as being correct. - -- Best regards MFPAmailto:expires2...@ymail.com Nothing a Pan-Galactic Gargle Blaster won't cure

Re: Problem with faked-system-time option

2011-06-14 Thread MFPA
the document to be signed subsequently presents (possibly faked) evidence showing the document to have been prepared later than the signature timestamp. The signer is now unexpectedly in the position of having to prove something. - -- Best regards MFPAmailto:expires2

Re: Problem with faked-system-time option

2011-06-15 Thread MFPA
reason it mattered when the signature was made. I was outlining a hypothetical situation in broad terms without getting hung up on the details of a specific example, so I don't care why the signature time/date mattered. - -- Best regards MFPAmailto:expires2...@ymail.com Live your

Re: Problem with faked-system-time option

2011-06-15 Thread MFPA
. :) Given that technology is required to produce an OpenPGP signature, it seems reasonable (to me) to suggest using technology to provide a verifiable time period for when that signature was made. Technology can be a tool to assist society in its work. - -- Best regards MFPA

Re: Problem with faked-system-time option

2011-06-15 Thread MFPA
an interest matters only if it affects the proposed solution. As an example, if an independent timestamping service can be shown to be sufficiently reliable, it could provide the proof regardless of which party has an interest in using that proof. - -- Best regards MFPA

Re: Problem with faked-system-time option

2011-06-15 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Wednesday 15 June 2011 at 10:58:27 PM, in mid:banlktima0zqdqk0oz_br2gd9mjtppfk...@mail.gmail.com, Jerome Baum wrote: MFPA wrote: You asserted that the signer's own signature timestamp was sufficient when a third party needs to prove

Re: Problem with faked-system-time option

2011-06-17 Thread MFPA
that regularly drifts up to 10 minutes? - -- Best regards MFPAmailto:expires2...@ymail.com Don't cry because it is over - smile because it happened -BEGIN PGP SIGNATURE- iQE7BAEBCgClBQJN+6B7nhSAAEAAVXNpZ25pbmdfa2V5X0lEIHNpZ25pbmdf

Re: Problem with faked-system-time option

2011-06-17 Thread MFPA
when there was no work to do. Using that time for your own purposes does not look to me like cheating your employer. - -- Best regards MFPAmailto:expires2...@ymail.com Greater than being great is being grateful. -BEGIN PGP SIGNATURE- iQE7BAEBCgClBQJN

Re: what does a timestamp signature mean? [was: Re: Problem with faked-system-time option]

2011-06-17 Thread MFPA
. - -- Best regards MFPAmailto:expires2...@ymail.com Ballerinas are always on their toes. We need taller ballerinas! -BEGIN PGP SIGNATURE- iQE7BAEBCgClBQJN+8JvnhSAAEAAVXNpZ25pbmdfa2V5X0lEIHNpZ25pbmdf a2V5X0ZpbmdlcnByaW50IEAgIE1hc3Rlcl9rZXlfRmluZ2VycHJpbnQgQThBOTBC

Re: timestamp notation @gnupg.org

2011-06-17 Thread MFPA
from Amano Corunga Message-id 20110608153652.4f1508c...@nym.dizum.nl and Message-id 20110616002944.974948c...@nym.dizum.nl which refer to a requirement to be able to create signatures without revealing (possibly sensitive) information about the signer's time management. - -- Best regards MFPA

Re: timestamp notation @gnupg.org

2011-06-17 Thread MFPA
in the signature packet as seconds since epoch. - -- Best regards MFPAmailto:expires2...@ymail.com Put knot yore trust inn spel chequers -BEGIN PGP SIGNATURE- iQE7BAEBCgClBQJN++X7nhSAAEAAVXNpZ25pbmdfa2V5X0lEIHNpZ25pbmdf

Re: timestamp notation @gnupg.org

2011-06-18 Thread MFPA
, so that the exact time of signing was not stored but also so that existing apps didn't choke on it. - -- Best regards MFPAmailto:expires2...@ymail.com Dogs look up to us. Cats look down on us. Pigs treat us as equals. -BEGIN PGP SIGNATURE- iQE7BAEBCgClBQJN

Re: timestamp notation @gnupg.org

2011-06-18 Thread MFPA
/P1D is a non-issue, since the two refer to the same time interval in UTC. - -- Best regards MFPAmailto:expires2...@ymail.com Pain is inevitable, but misery is optional. -BEGIN PGP SIGNATURE- iQE7BAEBCgClBQJN/MwAnhSAAEAAVXNpZ25pbmdfa2V5X0lEIHNpZ25pbmdf

Re: timestamp notation @gnupg.org

2011-06-18 Thread MFPA
ambiguity. If people feel there is ambiguity here, maybe this is best dealt with by adding some simple text to the GnuPG output to indicate that times are shown in local time, as per the user's system. [1] http://tools.ietf.org/html/rfc4880#section-3.5 - -- Best regards MFPA

Re: timestamp notation @gnupg.org

2011-06-19 Thread MFPA
. - -- Best regards MFPAmailto:expires2...@ymail.com Those who do not read are no better off than those who cannot. -BEGIN PGP SIGNATURE- iQE7BAEBCgClBQJN/eWbnhSAAEAAVXNpZ25pbmdfa2V5X0lEIHNpZ25pbmdf a2V5X0ZpbmdlcnByaW50IEAgIE1hc3Rlcl9rZXlfRmluZ2VycHJpbnQgQThBOTBC

Re: formatting of gpg blocks

2011-06-19 Thread MFPA
preference only and others will have different preferences. - -- Best regards MFPAmailto:expires2...@ymail.com The greater the power, the more dangerous the abuse. -BEGIN PGP SIGNATURE- iQE7BAEBCgClBQJN/ej0nhSAAEAAVXNpZ25pbmdfa2V5X0lEIHNpZ25pbmdf

Re: timestamp notation @gnupg.org

2011-06-19 Thread MFPA
interval as 20110618T00+0200/P1D. - -- Best regards MFPAmailto:expires2...@ymail.com Does anybody really read these things? -BEGIN PGP SIGNATURE- iQE7BAEBCgClBQJN/gxDnhSAAEAAVXNpZ25pbmdfa2V5X0lEIHNpZ25pbmdf

Re: timestamp notation @gnupg.org

2011-06-19 Thread MFPA
is rounded back to the start of the interval before recording, or left intact? - -- Best regards MFPAmailto:expires2...@ymail.com Two rights do not make a wrong. They make an airplane. -BEGIN PGP SIGNATURE- iQE7BAEBCgClBQJN

Re: timestamp notation @gnupg.org

2011-06-20 Thread MFPA
. And an implementation that doesn't know what to do with this notation will display or ignore it. - -- Best regards MFPAmailto:expires2...@ymail.com Gypsy Dwarf Escapes Prison: Small Medium at large -BEGIN PGP SIGNATURE- iQE7BAEBCgClBQJN

Re: Problem with faked-system-time option

2011-06-26 Thread MFPA
regards MFPAmailto:expires2...@ymail.com Ultimate consistency lies in being consistently inconsistent -BEGIN PGP SIGNATURE- iQE7BAEBCgClBQJOB0QYnhSAAEAAVXNpZ25pbmdfa2V5X0lEIHNpZ25pbmdf a2V5X0ZpbmdlcnByaW50IEAgIE1hc3Rlcl9rZXlfRmluZ2VycHJpbnQgQThBOTBC

Re: Change key prefs; few questions

2011-07-03 Thread MFPA
Is there a reason to do this? - -- Best regards MFPAmailto:expires2...@ymail.com A candle loses nothing by lighting another candle -BEGIN PGP SIGNATURE- iQE7BAEBCgClBQJOEIOOnhSAAEAAVXNpZ25pbmdfa2V5X0lEIHNpZ25pbmdf

Re: Is the OpenPGP model still useful?

2011-07-07 Thread MFPA
value. But iconoclasm can be instructive; think for yourself, otherwise you have to believe what others tell you. - -- Best regards MFPAmailto:expires2...@ymail.com Dollar sign - An S that's been double crossed -BEGIN PGP SIGNATURE

Re: Can version 1.4.11 be configured to use IDEA?

2011-07-18 Thread MFPA
works (insofar as it causes IDEA to appear in the cipher list when I type gpg --version). - -- Best regards MFPAmailto:expires2...@ymail.com A bird in the hand makes it awfully hard to blow your nose -BEGIN PGP SIGNATURE

Re: Including public key

2011-07-28 Thread MFPA
... - -- Best regards MFPAmailto:expires2...@ymail.com A nod is as good as a wink to a blind bat! -BEGIN PGP SIGNATURE- iQE7BAEBCgClBQJOMWvKnhSAAEAAVXNpZ25pbmdfa2V5X0lEIHNpZ25pbmdf a2V5X0ZpbmdlcnByaW50IEAgIE1hc3Rlcl9rZXlfRmluZ2VycHJpbnQgQThBOTBC

Re: Including public key

2011-07-29 Thread MFPA
to the one I gave them. (That was when I was in my teens and lived with my parents, so the initial would not have matched my first name.) My bottom line is that photos and phone numbers do not hurt. Depends on the user's privacy requirements and threat model. - -- Best regards MFPA

Re: Including public key

2011-07-29 Thread MFPA
; separate, and yet _linked_ elements of identification. GnuPG allows this; I think you need to use --expert and maybe - --allow-freeform-uid. - -- Best regards MFPAmailto:expires2...@ymail.com It's better to feed one cat than many mice -BEGIN PGP SIGNATURE

Re: Including public key

2011-07-30 Thread MFPA
on television and those chrome things flicker and move... MFPA wrote: OK, use a TV projector and point your webcam at the screen. I do not hav a webcam, and I do not know why you want me to create feedback. I thought you mentioned using skype for photo-id production and commented about

Re: Problem with GPG

2011-08-09 Thread MFPA
). - -- Best regards MFPAmailto:expires2...@ymail.com Editing is a rewording activity -BEGIN PGP SIGNATURE- iQE7BAEBCgClBQJOQdLRnhSAAEAAVXNpZ25pbmdfa2V5X0lEIHNpZ25pbmdf a2V5X0ZpbmdlcnByaW50IEAgIE1hc3Rlcl9rZXlfRmluZ2VycHJpbnQgQThBOTBC

Re: Extract numbers from a key // wrong pgpdump link :-(

2011-08-24 Thread MFPA
window Some further instructions (for the Ubuntu version) at http://manpages.ubuntu.com/manpages/karmic/man1/pgpdump.1.html - -- Best regards MFPAmailto:expires2...@ymail.com The One with The Answer is seldom asked The Question -BEGIN PGP SIGNATURE

Re: Signing multiple keys

2011-08-25 Thread MFPA
that purported to be all the public keys from the signing party. Unless you checked the fingerprint of each key before signing it, how would you spot any extra or substituted keys for which you had not verified the ID? - -- Best regards MFPAmailto:expires2...@ymail.com Wait

Re: Useful factoid

2011-10-11 Thread MFPA
of thing I should've noticed a decade ago. I suppose you didn't need to notice it because you already remembered pi seconds in a nano-century - -- Best regards MFPAmailto:expires2...@ymail.com A nod is as good as a wink to a blind bat! -BEGIN PGP SIGNATURE

Re: adding text to detached signature files

2011-10-13 Thread MFPA
still couldn't open it so would miss your explanatory text. - -- Best regards MFPAmailto:expires2...@ymail.com No matter what a man's past may have been, his future is spotless. -BEGIN PGP SIGNATURE- iQCVAwUBTpd6AaipC46tDG5pAQq3kQQApZNSKZNgXm2RE7031hjU625WkSO9kFZG

Re: Key revocation UI confusion

2011-10-15 Thread MFPA
if the message appears before the revoked key. - -- Best regards MFPAmailto:expires2...@ymail.com Don't ask me, I'm making this up as I go! -BEGIN PGP SIGNATURE- iQCVAwUBTpmjmaipC46tDG5pAQq/YgP6A0nWjTgagDMCIfWLPvjGz9RNXpBE7Gby 0ejeZNCE86S4Is3A6AU97Wwhygj0N

Re: adding text to detached signature files

2011-10-15 Thread MFPA
extensions, I don't know what would. (-: - -- Best regards MFPAmailto:expires2...@ymail.com The problem is not that we're paranoid; it's that we're not paranoid enough. -BEGIN PGP SIGNATURE- iQCVAwUBTpmkUaipC46tDG5pAQpWJgP8Dx7dcNb3Lil00a+g3k9mQc22zpfoy4sK

Re: Key revocation UI confusion

2011-10-16 Thread MFPA
the key itself is valid... Looks OK to me. The master key is not revoked, has no expiry date and the key has some User IDs that have not been revoked. - -- Best regards MFPAmailto:expires2...@ymail.com Life is a holiday. In the same way that glass is a liquid. -BEGIN PGP

Re: STEED - Usable end-to-end encryption

2011-10-19 Thread MFPA
systems, email clients and browsers? - -- Best regards MFPAmailto:expires2...@ymail.com What's another word for synonym? -BEGIN PGP SIGNATURE- iQCVAwUBTp8tQ6ipC46tDG5pAQojwQQAyVC7lwcAqp82tR9lwxLQ2Y5bfdmw0Fym yYD/xnFlEB2Pxyzsvizdb0SyCgrGlpqIePhCw8YqGMW6ZWVl+l1Q3mU3SI67G+db

Re: STEED - Usable end-to-end encryption

2011-10-19 Thread MFPA
without revealing other email addresses or UIDs that might happen to map to the same key/certificate. - -- Best regards MFPAmailto:expires2...@ymail.com Did you hear? They took the word gullible out of the dictionary -BEGIN PGP SIGNATURE

Re: STEED - Usable end-to-end encryption

2011-10-19 Thread MFPA
by allowing previously created keys to be configured and deployed with an account. - -- Best regards MFPAmailto:expires2...@ymail.com Wait. You think I'm right? -BEGIN PGP SIGNATURE- iQCVAwUBTp9C5qipC46tDG5pAQot2wP9Hon1hAbbLzbYo02qBgaW1UZHA/GBBFgH

Re: STEED - Usable end-to-end encryption

2011-10-21 Thread MFPA
regards MFPAmailto:expires2...@ymail.com War is a matter of vital importance to the State. -BEGIN PGP SIGNATURE- iQCVAwUBTqGyM6ipC46tDG5pAQr6+AP/dG6q9Z58HD7RVZI5h1EYEA6yDZ2Rfx/p 9zLGMKGh2QY1gYpBqG70g78IZnk01aG62MIALmRReHs6plqR7fjnASZZikItZDQY

Re: STEED - Usable end-to-end encryption

2011-10-25 Thread MFPA
for sending messages through the post? - -- Best regards MFPAmailto:expires2...@ymail.com During an eruption - move away from the volcano - not towards it -BEGIN PGP SIGNATURE- iQCVAwUBTqc8UaipC46tDG5pAQps0gQAuGIMmK7uuyV1kxZYhk9Q3cV+BwZYIzt/ fOBOGWkFIsbAOnv815fV

Re: revoke a revoked userID and e-mail from the GnuPG-Server

2011-11-02 Thread MFPA
name and e-mail is used! You have a key on the server with two user-IDs, one of which is revoked. There is nothing stopping you from creating a third user-ID that includes the same email address as the revoked user-ID. - -- Best regards MFPAmailto:expires2...@ymail.com Take

Re: GPA File Manager

2011-11-15 Thread MFPA
as the GpgEX component included in the Gpg4Win package ? GpgEX is described as GnuPG Shell extension in the installer. GPGshell is a GUI frontend for GnuPG. See http://www.jumaros.de/rsoft/index.html - -- Best regards MFPAmailto:expires2...@ymail.com Versifiers write poems

Re: GPA File Manager

2011-11-16 Thread MFPA
software. I'd prefer if you would not suggest this on a GnuPG mailing list. The GNU project (which GnuPG is a part of) is a about software freedom; proprietary software is about taking away your freedoms. Sorry. - -- Best regards MFPAmailto:expires2...@ymail.com I don't

Re: GPA File Manager

2011-11-16 Thread MFPA
don't think it amounted to advertising. I have no link to any proprietary app or the author thereof. - -- Best regards MFPAmailto:expires2...@ymail.com Is it possible to be a closet claustrophobic? -BEGIN PGP SIGNATURE- iQCVAwUBTsRcpKipC46tDG5pAQqGewP

Re: GPA File Manager

2011-11-17 Thread MFPA
questions deals with his source code not being published. I naively thought that said it for me. - -- Best regards MFPAmailto:expires2...@ymail.com Learning without thought is naught; thought without learning is dangerous. -BEGIN PGP SIGNATURE- iQCVAwUBTsV7ZaipC46tDG5pAQq

Re: GPA File Manager

2011-11-18 Thread MFPA
recommending it. Oh. Glad to read it wasn't my comment that caused the reminder about the rule. - -- Best regards MFPAmailto:expires2...@ymail.com It is easy to propose impossible remedies. -BEGIN PGP SIGNATURE- iQCVAwUBTsayRqipC46tDG5pAQpN3QP8Dx+roqcO6mkOqUgFyIglbWy9QC4BhzMT

Re: keyserver spam

2011-12-17 Thread MFPA
as that server's checking is concerned, being able to receive the email they send out to that address and respond to it or click a link. - -- Best regards MFPAmailto:expires2...@ymail.com Is it possible to be a closet claustrophobic? -BEGIN PGP SIGNATURE

Re: keyserver spam

2011-12-17 Thread MFPA
were signed by that key. But, once again, increased complexity and server load. And what about propagating changes between keyservers? - -- Best regards MFPAmailto:expires2...@ymail.com The greater the power, the more dangerous the abuse. -BEGIN PGP SIGNATURE

Re: keyserver spam

2011-12-17 Thread MFPA
emporium JBARSE - -- Best regards MFPAmailto:expires2...@ymail.com There is no job so simple that it cannot be done wrong -BEGIN PGP SIGNATURE- iQCVAwUBTuy7YaipC46tDG5pAQq9bQQAtSx6F349tcMEIEgVdyI4lETyhfmkV2Qh g8+jDHVS1EoJIT5Mri/y/OQftPCIvtx

Re: keyserver spam

2011-12-17 Thread MFPA
is put into solving a problem that actually exists, and a new generation of keyservers comes into being. At the moment the problem doesn't exist. - -- Best regards MFPAmailto:expires2...@ymail.com Don't talk unless you can improve on the silence -BEGIN PGP SIGNATURE

Re: How to select a particular public key when verifying a signature?

2011-12-17 Thread MFPA
correspond to the sender. Bob has obviously got Alice's key Bob has possibly got Alice's key. The more obvious conclusion is that Bob has simply forwarded a file that Alice signed. Of course, both possibilities need to be considered. - -- Best regards MFPAmailto:expires2

Re: keyserver spam

2011-12-17 Thread MFPA
, or to deliberately but maliciously upload. Any signatures you encounter on a key are either part of your own decision how far to trust that key, or else useless noise. - -- Best regards MFPAmailto:expires2...@ymail.com An obstinate man does not hold opinions. They hold him. -BEGIN

Re: keyserver spam

2011-12-18 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Saturday 17 December 2011 at 4:58:28 PM, in mid:4eecca34.9050...@jeromebaum.com, Jerome Baum wrote: On 2011-12-17 17:04, MFPA wrote: On Saturday 17 December 2011 at 3:25:56 PM, in mid:4eecb484.6080...@jeromebaum.com, Jerome Baum wrote

Re: keyserver spam

2011-12-18 Thread MFPA
not considered the scenario of uploading multiple key updates in order to get the servers to spam the key owner with verification emails. Sending them straight to the bit bucket would still have the desired effect of not accepting unwanted updates to your key. - -- Best regard MFPA

Re: Creating a key bearing no user ID

2012-01-23 Thread MFPA
. - -- Best regards MFPAmailto:expires2...@rocketmail.com Live your life as though every day it was your last. -BEGIN PGP SIGNATURE- iQCVAwUBTx3r5aipC46tDG5pAQpDIgQArkukbT5Jgj+eCVudxfuUfOrDDcyI7Dh1 ACn2HFlPDoVXd27AlK7uilmPB/aQEQQqWtK5SJNDe2F5fq06s9Y2Nq4oXR3yEfF5

Re: Protecting IDs at a key signing party

2012-01-23 Thread MFPA
. Likewise, regarding making hay and a complete lack of realistic examples. Are you suggesting it is sensible to check a person's name against government-issued documents but to attempt any verification of email addresses? - -- Best regards MFPAmailto:expires2...@rocketmail.com

Re: RSA padding scheme

2012-01-25 Thread MFPA
the symmetric key. Isn't that the same thing as the session key, which can be viewed using --show-session-key? - -- Best regards MFPAmailto:expires2...@rocketmail.com Always forgive your enemies; nothing annoys them so much -BEGIN PGP SIGNATURE

Re: Why hashed User IDs is not the solution to User ID enumeration (was: Re: Creating a key bearing no user ID)

2012-01-25 Thread MFPA
you get includes only the UID you requested. - -- Best regards MFPAmailto:expires2...@rocketmail.com An idealist is a person who helps other people to be prosperous -BEGIN PGP SIGNATURE- iQCVAwUBTyCmQKipC46tDG5pAQrsIgQAlAZLfIcxdbI9DjmHwJlzaMAmIeh4SCgj

Re: hashed user IDs redux [was: Re: Creating a key bearing no user ID]

2012-01-26 Thread MFPA
spam out to them all? I guess the day *could* arrive when we start receiving spam that is encrypted to the right key(s) for the email address(es) it goes to, but I currently see that more as a possibility than a probability. ... Looking over this, I don't think that what MFPA wants is possible. I

Re: hashed user IDs redux [was: Re: Creating a key bearing no user ID]

2012-01-28 Thread MFPA
a key with MFPA a@b.c as its sole User ID. There is no software modification needed to accomplish what you want to do. I also want people who already have an email address for me (or potentially a name, if not too common) to be able to use that as a search string to find my key from a server

Re: hashed user IDs redux [was: Re: Creating a key bearing no user ID]

2012-01-28 Thread MFPA
, but the other UIDs would remain as useless noise. - -- Best regards MFPAmailto:expires2...@rocketmail.com Dollar sign - An S that's been double crossed -BEGIN PGP SIGNATURE- iQCVAwUBTyQ4HaipC46tDG5pAQrDZgP/eV1QizzF7fwipXQxweeJF3SimiqRU47L

Re: hashed user IDs redux [was: Re: Creating a key bearing no user ID]

2012-01-28 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Friday 27 January 2012 at 10:49:43 AM, in mid:4f228147.7090...@digitalbrains.com, Peter Lebbing wrote: Hi MFPA, Can I ask what about the dkg--noenum-0ee5be979282d80b9f7540f1ccd2ed94d2173...@fifthhorseman.net form does not satisfy your

Re: hashed user IDs redux [was: Re: Creating a key bearing no user ID]

2012-01-29 Thread MFPA
by different people. The aspect of privacy relevant to this discussion is pretty specific too: selective sharing of personal information. - -- Best regards MFPAmailto:expires2...@rocketmail.com An idealist is a person who helps other people to be prosperous -BEGIN PGP

Re: hashed user IDs redux [was: Re: Creating a key bearing no user ID]

2012-01-29 Thread MFPA
worse things than spamming can happen with your private information. One windmill at a time, my ingenious gentleman of La Mancha. I see the two as just one issue: protecting a string of text. On 1/26/2012 6:41 PM, MFPA wrote: Why would a spammer network bother to generate email addresses

Re: hashed user IDs redux [was: Re: Creating a key bearing no user ID]

2012-01-29 Thread MFPA
digests instead of plaintext would reveal no information to the user. Like Rob, I'm done. There is no more to explain. Adios. Sayonara. Goodbye. Fair enough. - -- Best regards MFPAmailto:expires2...@rocketmail.com Dogs look up to us. Cats look down on us. Pigs treat us

Re: Why hashed User IDs is not the solution to User ID enumeration (was: Re: Creating a key bearing no user ID)

2012-01-29 Thread MFPA
someone else's key if you desire. Does the key you are adding your signature to have to already be on keyserver.pgp.com? - -- Best regards MFPAmailto:expires2...@rocketmail.com My mind works like lightning... one brilliant flash and it's gone -BEGIN PGP SIGNATURE

Re: [META] please start To: with gnupg-users@gnupg.org, i.e.: To: gnupg-users@gnupg.org

2012-01-29 Thread MFPA
. Looking through recent postings, the signature delimiter seems to appear in about half of the messages on this list. - -- Best regards MFPAmailto:expires2...@rocketmail.com Raining cats and dogs is better than hailing taxis. -BEGIN PGP SIGNATURE

Re: [META] please start To: with gnupg-users@gnupg.org, i.e.: To: gnupg-users@gnupg.org

2012-01-29 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Monday 30 January 2012 at 2:13:48 AM, in mid:20120129211348.2b49cc7b@scorpio, Jerry wrote: On Mon, 30 Jan 2012 01:52:44 + MFPA articulated: Looking through recent postings, the signature delimiter seems to appear in about half

Re: Using the not-dash-escaped option

2012-01-31 Thread MFPA
this is what the option is for? The man page says it is to enable cleartext signatures to be used with patch files. -- Best regards MFPAmailto:expires2...@rocketmail.com When it comes to humility, I'm the greatest. -BEGIN PGP SIGNATURE- iQCVAwUBTyhgAqipC46tDG5pAQpg9AP9HYu

Re: PGP/MIME use (was Re: META)

2012-01-31 Thread MFPA
. OK, but should we *clearsign* our messages to the list? - -- Best regards MFPAmailto:expires2...@rocketmail.com After all is said and done, a lot more will be said than done. -BEGIN PGP SIGNATURE- iQCVAwUBTyhtUKipC46tDG5pAQrVygP8DzWjMR6H/Qo+FKhUaONQjz8GKiWs5dX4

Re: [META] please start To: with gnupg-users@gnupg.org, i.e.:

2012-01-31 Thread MFPA
based on the list headers problematic. The group's email address gnupg-users@gnupg.org usually appears in the To: or CC: field of the duplicate message. Why not filter/sort on that and catch most of them? - -- Best regards MFPAmailto:expires2...@rocketmail.com Dreams come

Re: Using the not-dash-escaped option

2012-01-31 Thread MFPA
regards MFPAmailto:expires2...@rocketmail.com I'll tell you what's the matter! This parrot is dead! -BEGIN PGP SIGNATURE- iQCVAwUBTyiA1KipC46tDG5pAQpP1QQAm6Ac6ZNDc9GyvtHZg1Wxs3ZUQFlYkkj5 YyJ8/8uy7ECwTUIW1zFac3r6pdU1hXN57AjoWrmdCSw4uw1wiEMTcwMLNoeQLNLG Sbp5r

Re: Using the not-dash-escaped option

2012-02-01 Thread MFPA
the test ;-) I just tried and got good signature. Strange. - -- Best regards MFPAmailto:expires2...@rocketmail.com Two wrongs don't make a right. But three lefts do. -BEGIN PGP SIGNATURE- iQCVAwUBTymec6ipC46tDG5pAQocLAP+IaLSzxKmMBpFvwsjR9a/plg6LLOWp/N9

Re: Using the not-dash-escaped option

2012-02-01 Thread MFPA
. - --=20\n Best regards MFPAmailto:expires2...@rocketmail.com Put knot yore trust inn spel chequers -BEGIN PGP SIGNATURE- iQCVAwUBTymk0KipC46tDG5pAQoqdwP8CPzC5lzhYYpTkOIEeWIqPVCTKH57Wg84 ZFeZgXKXfWDnXRVVVoSQkzzDfrpA7m+AbITeWPRZR+368tI0U4VHtigWsnAyRT+1 km7DhdpzWgke

Re: PGP/MIME use

2012-02-01 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Wednesday 1 February 2012 at 5:19:41 PM, in mid:20120201121941.5e100a23@scorpio, Jerry wrote: Windows users prefer S/MIME. Seems likely to me that the majority of Windows users use neither S/MIME nor openPGP. - -- Best regards MFPA

Re: Reply-to netiquette (was [META] please start To: with gnupg-users@gnupg.org...)

2012-02-01 Thread MFPA
live a happier life overall. :) Here here! Be liberal in what you accept, and conservative in what you send. - -- Best regards MFPAmailto:expires2...@rocketmail.com CAUTION! - Beware of Warnings! -BEGIN PGP SIGNATURE

Re: PGP/MIME use

2012-02-01 Thread MFPA
, encrypting, decrypting and signing should not use that technology for his email (neither professional nor private). There are plenty of things people don't bother doing, despite understanding, knowledge, and capability. Why should this be different? - -- Best regards MFPA

Re: Using the not-dash-escaped option

2012-02-02 Thread MFPA
sentbox, where the header you cite above says Content-Transfer-Encoding: quoted-printable - -- Best regards MFPAmailto:expires2...@rocketmail.com No man ever listened himself out of a job -BEGIN PGP SIGNATURE- iQCVAwUBTyr2CqipC46tDG5pAQqoUgQAkQMH7

Re: Using the not-dash-escaped option

2012-02-02 Thread MFPA
encoded) and it will be less likely to get eaten by hungry mail-handling tools. I already had/have the option set in my MUA for Transfer-encoding for non-ascii characters in message text set to quoted-printable. The other options are no encoding or base64. - -- Best regards MFPA

Re: Moving from openpgp card to cryptostick

2012-02-05 Thread MFPA
stored before transferring them to the old openpgp card, copy the backup to your keyring and then transfer it to the new cryptostick. - -- Best regards MFPAmailto:expires2...@rocketmail.com None are so fond of secrets as those who do not mean to keep them -BEGIN PGP

Re: Moving from openpgp card to cryptostick

2012-02-06 Thread MFPA
crypto stick instead of the old openpgp card. - -- Best regards MFPAmailto:expires2...@rocketmail.com The man who really wants to do something finds a way, the other finds an excuse. -BEGIN PGP SIGNATURE- iQCVAwUBTzAwEqipC46tDG5pAQr4swP7Bh2jcphg7P2+CAh54j2QHk+XUQS

<    1   2   3   4   5   6   7   8   9   >