On 30/03/2015 8:28 am, Mike Ingle wrote:
Why should the user need to delete one, rather than just be told
there were two and the one with such-and-such a fingerprint (or the
one highlighted) signed this message? If it is just a string in a
key UID rather than a functional email address, it
On 24/03/2015 2:27 pm, Mike Ingle wrote:
There has been some discussion on gnupg-users about replacing SMTP for
secure email, and how BitMessage does not scale.
There is an open source non-SMTP email system called Confidant Mail,
which is based on GnuPG and hash table storage. The protocol
On 25.03.15 22:32, Doug Barton wrote:
On 3/25/15 1:20 PM, Ville Määttä wrote:
On 25.03.15 21:41, Doug Barton wrote:
While this is strictly anecdotal evidence I would argue that it's a good
indication that we may not be ready for PGP/MIME as the default.
I think that fail, a signature.asc
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
On Monday 30 March 2015 at 7:21:35 PM, in
mid:5519942f.90...@asatiifm.net, Ville Määttä wrote:
That's a mental breakdown of the user :). Sorry about
the ambiguity.
I find malformed emails full of HTML tags and almost totally
unreadable
Any word on whether confidant mail will support the openpgp smart cards (or
yubikey, similar)?
-Nick
On Mar 29, 2015 7:55 AM, MFPA 2014-667rhzu3dc-lists-gro...@riseup.net
wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
On Saturday 28 March 2015 at 6:05:05 PM, in
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
On Saturday 28 March 2015 at 6:05:05 PM, in
mid:5516df41.4090...@digitalbrains.com, Peter Lebbing wrote:
No, but nobody said the adjective was used
tautological.
Maybe it doesn't imply or hint that to everybody, but it is definitely
what I
Any word on whether confidant mail will support the openpgp smart
cards (or
yubikey, similar)? -Nick
With GPG 2.1, the gpg-agent handles all the passphrase prompting. I
don't see
why it would not work with a smartcard. Which one do you think I should
get to
test with? I have not played
On 26.03.15 18:17, Brian Minton wrote:
I think gmail is the single most popular email client, with 500 million
users.
There are about 7,3 billion people out there that don't have a clue what
OpenPGP is.
I think that until there is a way to verify pgp signatures from
within gmail,
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
I think gmail is the single most popular email client, with 500 million
users. I think that until there is a way to verify pgp signatures from
within gmail, pgp/mime will continue to show up as an attachment.
There are ways to use pgp/mime or
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
Hi
On Thursday 26 March 2015 at 4:17:46 PM, in
mid:canyoob3tfr0oyrmd6szweobdm-+fdjrmkb3snk5ott_rgvu...@mail.gmail.com,
Brian Minton wrote:
I think gmail is the single most popular email client,
Gmail is an email service provider, not an
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
Hi
On Tuesday 24 March 2015 at 3:27:47 AM, in
mid:5510d9b3.4090...@confidantmail.org, Mike Ingle wrote:
More
information and downloads at:
https://www.confidantmail.org
The intro page on your website says SMTP-compatible address format:
keep
On 26.03.15 01:38, Daniele Nicolodi wrote:
On 25/03/15 23:56, Ville Määttä wrote:
On 26.03.15 00:14, Ingo Klöcker wrote:
So it's not mailman that's not smart enough, but the mail clients
the other recipients are using. Mail clients showing a
signature.asc attachment probably do not
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
On Thu, Mar 26, 2015 at 3:49 PM, MFPA
2014-667rhzu3dc-lists-gro...@riseup.net wrote:
Gmail is an email service provider, not an email client. They provide
access via a webmail site for those who wish to process their email
using a web browser,
On 3/26/2015 4:27 PM, MFPA wrote:
Hi
On Tuesday 24 March 2015 at 3:27:47 AM, in
mid:5510d9b3.4090...@confidantmail.org, Mike Ingle wrote:
More
information and downloads at:
https://www.confidantmail.org
The intro page on your website says SMTP-compatible address format:
keep your
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
Hi
On Thursday 26 March 2015 at 8:10:08 PM, in
mid:CANyOob2J-Kg_xaoPj9g7SRMsWrQPBZOGA=v9yg5noxlmslk...@mail.gmail.com,
Brian Minton wrote:
I meant what I said about them gmail being a client.
This is only true in the limited sense that they
From the bit of testing I did with it, it seems the email address is
merely used as a user identifier. The domain is irrelevant. You could
use nob...@nonexistent-domain.com and it would still work. The email
address doesn't actually have to exist.
I don't think it does since the email
On 3/26/2015 1:57 PM, Ville Määttä wrote:
On 26.03.15 01:38, Daniele Nicolodi wrote:
On 25/03/15 23:56, Ville Määttä wrote:
On 26.03.15 00:14, Ingo Klöcker wrote:
So it's not mailman that's not smart enough, but the mail clients
the other recipients are using. Mail clients showing a
At present, there is no key verification built in and
you have to check the key fingerprint (which is always
shown to the right of the address) or check a signature
chain on your key using a GPG key manager.
Or you can Trust On First Use, if it suits your threat model.
That's more or
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
Hi
On Thursday 26 March 2015 at 9:26:35 PM, in
mid:5514798b.7020...@confidantmail.org, Mike Ingle wrote:
Yes, the email address is just an identifier. The
address is used in two ways. One, it is hashed with
SHA1 and used to look up the
Notwithstanding the security compromise from building SMTP gateways,
some people are pretty attached to their favourite MUA. Have you any
thoughts about accommodating them by enabling your Confidant Mail
client or server to function as a local email proxy?
The user interface has to do a lot of
Doug,
Signature shows as an attachment signature.asc. No evidence that PGP actions
were envoked. Work forces use of Synaptic PGP, so I cannot tell if it is
verified or not.
Thanks,
Bob Cavanaugh
signature.asc
Description: OpenPGP digital signature.asc
On 3/25/15 11:08 AM, Bob (Robert) Cavanaugh wrote:
Doug,
Signature shows as an attachment signature.asc. No evidence that PGP actions
were envoked. Work forces use of Synaptic PGP, so I cannot tell if it is verified or not.
Thanks Bob, that is interesting feedback.
FWIW, I have received
On 03/25/2015 08:41 PM, Doug Barton wrote:
On 3/25/15 11:08 AM, Bob (Robert) Cavanaugh wrote:
Doug,
Signature shows as an attachment signature.asc. No evidence that PGP
actions were envoked. Work forces use of Synaptic PGP, so I cannot
tell if it is verified or not.
Thanks Bob, that is
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
Hi
On Tuesday 24 March 2015 at 10:55:04 PM, in
mid:5511eb48.7020...@confidantmail.org, Mike Ingle wrote:
The user interface has to do a lot of things
differently from SMTP MUAs - display signatures, check for keys,
SMTP MUAs that interface
On 25.03.15 21:41, Doug Barton wrote:
While this is strictly anecdotal evidence I would argue that it's a good
indication that we may not be ready for PGP/MIME as the default.
I think that fail, a signature.asc attachment, is still a cleaner fail
than a non-PGP receiver getting a breakdown from
On 3/25/15 1:20 PM, Ville Määttä wrote:
On 25.03.15 21:41, Doug Barton wrote:
While this is strictly anecdotal evidence I would argue that it's a good
indication that we may not be ready for PGP/MIME as the default.
I think that fail, a signature.asc attachment, is still a cleaner fail
than a
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
Hi
On Wednesday 25 March 2015 at 7:41:56 PM, in
mid:55130F84.3000603@dougbarton.email, Doug Barton wrote:
While this is strictly anecdotal evidence I would argue
that it's a good indication that we may not be ready
for PGP/MIME as the
On Wednesday, March 25, 2015 12:41:56 PM Doug Barton wrote:
On 3/25/15 11:08 AM, Bob (Robert) Cavanaugh wrote:
Doug,
Signature shows as an attachment signature.asc. No evidence that PGP
actions were envoked. Work forces use of Synaptic PGP, so I cannot tell
if it is verified or not.
Most
On Thursday, March 26, 2015 12:56:03 AM Ville Määttä wrote:
It seems to me that emails sent and signed by Thunderbird + Enigmail are
displayed just fine by it. No signature.asc quirks. But emails sent by
others are displaying the attachment in addition to the normal Enigmail
added UI signature
On 25/03/15 23:56, Ville Määttä wrote:
On 26.03.15 00:14, Ingo Klöcker wrote:
So it's not mailman that's not smart enough, but the mail clients
the other recipients are using. Mail clients showing a
signature.asc attachment probably do not understand PGP/MIME
(which isn't that unusual because
On 26.03.15 00:14, Ingo Klöcker wrote:
So it's not mailman that's not smart enough, but the mail clients the other
recipients are using. Mail clients showing a signature.asc attachment
probably do not understand PGP/MIME (which isn't that unusual because only a
handful mail clients support
Doug Barton dougb@dougbarton.email writes:
On 3/25/15 11:08 AM, Bob (Robert) Cavanaugh wrote:
Doug,
Signature shows as an attachment signature.asc. No evidence that PGP
actions were envoked. Work forces use of Synaptic PGP, so I cannot tell if
it is verified or not.
Thanks Bob, that is
32 matches
Mail list logo
