Re: ctf-like WKD challenge

2021-01-22 Thread Andrew Gallagher via Gnupg-users
On 22/01/2021 10:32, Werner Koch wrote: On Thu, 21 Jan 2021 10:48, Andrew Gallagher said: If you need to hide your metadata from the state on pain of torture and death, PGP is NOT the solution. Use Tor, use Signal. And even then That is not corrct. OpenPGP can and is in the real world part

Re: ctf-like WKD challenge

2021-01-22 Thread Werner Koch via Gnupg-users
On Thu, 21 Jan 2021 10:48, Andrew Gallagher said: > It is important to remember what PGP is for, and what it is not > for. It is most definitely NOT for hiding metadata. No system based on > email can ever do that, so it is safer not to pretend otherwise. Full Ack. There are ways to hide meat

Re: ctf-like WKD challenge (was: WKD proper behavior on fetch error)

2021-01-21 Thread Stefan Claas via Gnupg-users
On Thu, Jan 21, 2021 at 12:25 PM Andrew Gallagher via Gnupg-users wrote: > > On 21/01/2021 07:10, Stefan Claas via Gnupg-users wrote: > > On Thu, Jan 21, 2021 at 8:02 AM Stefan Claas > > wrote: > > > >> The nice things about OpenPGP amored messages is also that > >> procmail and friends can be

Re: ctf-like WKD challenge (was: WKD proper behavior on fetch error)

2021-01-21 Thread Andrew Gallagher via Gnupg-users
On 21/01/2021 07:10, Stefan Claas via Gnupg-users wrote: On Thu, Jan 21, 2021 at 8:02 AM Stefan Claas wrote: The nice things about OpenPGP amored messages is also that procmail and friends can be used at providers to filter -BEGIN blah P.S. When Stale Schumacher ran the International

Re: ctf-like WKD challenge (was: WKD proper behavior on fetch error)

2021-01-20 Thread Stefan Claas via Gnupg-users
On Thu, Jan 21, 2021 at 8:02 AM Stefan Claas wrote: > The nice things about OpenPGP amored messages is also that > procmail and friends can be used at providers to filter -BEGIN blah P.S. When Stale Schumacher ran the International PGP Homepage in the 90's people could download PGP for

Re: ctf-like WKD challenge (was: WKD proper behavior on fetch error)

2021-01-20 Thread Stefan Claas via Gnupg-users
On Thu, Jan 21, 2021 at 12:25 AM Ángel wrote: > Last night, I prepared the domain wkdtest.pgp.16bits.net It is a valid > wkd server. I have just created and uploaded there a new pgp key, and > you have to obtain it: > > > «We have intercepted the following communication sent to an spy using > an

ctf-like WKD challenge (was: WKD proper behavior on fetch error)

2021-01-20 Thread Ángel
On 2021-01-20 at 08:08 +0100, Stefan Claas via Gnupg-users wrote: > On Wed, Jan 20, 2021 at 12:41 AM Ángel wrote: > > > A list of all (well, most) openpgpkey subdomains can be easily > > created. > > Yes and I believe that what Neal and you (in your new posting) have > explained makes it only