-----BEGIN PGP SIGNED MESSAGE-----
Hash: MD5

Hi Allie,

   thanks for that.  I'd prefer to use gnuPG if possible but it sounds
   like i might need to have a bit of a play before I commit to it.

Toby

Tuesday, January 7, 2003, 9:43:07 PM, you wrote:

AM> In <[EMAIL PROTECTED]">mid:[EMAIL PROTECTED]>,
AM> Carmeanu [C] wrote:'

C>> the "TB" implementation of GnuPG is something close to crap! They
C>> based it on old an insecure encoding standards, what makes it
C>> impossible for TheBat to decrypt GnuPG encrypted messages from other
C>> mailers. The actual encoding standard uses encrypted attachments,
C>> TheBat can en-/decrypt only the message itself.

AM> I've been using GnuPG with TB! for a long time. With the plug-in you can
AM> sign, decrypt and encrypt messages. However, it uses a strict UID
AM> matching system (smart matching) when doing so in that it will select a
AM> key to use only if the key has an exactly matching name <address>
AM> combination to the one the plug-in is looking for. Key management and
AM> GnuPG configuration, you have to do via the CLI or you install either
AM> GPGShell or WinPT for this.

AM> I've explained how to install and use the plug-in in this article:

AM> http://www.landscreek.net/gpg_pgp_tb.html

AM> There is one annoying thing in the plug-in in that when decrypting, you
AM> have to always fill in the UID and password for the key you wish to
AM> decrypt with. The UID isn't automatically filled in based on the To:
AM> address field or the ID of the public key used for encryption. I created
AM> a macro that does this for me.

AM> The smartmatching feature is a fail safe measure not welcomed by many
AM> since it can be difficult to use the plug-in when there are many who
AM> send messages with a From name and address that doesn't correspond with
AM> any of the UID's associated with key they signed their message with.
AM> For example, a person may have create his key with the UID:

AM> Jasper Jones <[EMAIL PROTECTED]>

AM> and then sends messages with the From name <address>:

AM> Jasper Jones <[EMAIL PROTECTED]>

AM> or

AM> Jas <[EMAIL PROTECTED]>

AM> The plug-in will not encrypt messages to a name <address> that doesn't
AM> have matching UID in one of your public keys. You'll get an error. You
AM> have to change the To: name <address> to one that matches one of the
AM> UID's associated with the public key or use GPG Shell to do the
AM> encryption ignoring the UID match.

AM> The same thing goes for you trying to sign a message using a From name
AM> <address> that doesn't exactly match a UID of your key. You'd also get
AM> an error. The only way to sign with the plug-in would be to add the name
AM> <address> combination you're using as a UID to your key.

AM> PGP is a lot more forgiving in this way or it offers you a key selection
AM> dialog when a match fails. You can then select the key you wish to use.
AM> It will also sign with your default key, no matter which From address
AM> you have in your message.

AM> I haven't been having problems decrypting messages from other PGP and
AM> GnuPG users.








 ---------------------------------------

             Life is poetry -
               write it in your own words.

 ---------------------------------------

Toby Tremayne
Technical Team Lead
Code Poet and Zen Master of the Heavy Sleep
Toll Solutions
154 Moray St
Sth Melbourne
VIC 3205
+61 3 9697 2317
0416 048 090
ICQ:  13107913

-----BEGIN PGP SIGNATURE-----
Version: 2.6

iQCVAwUAPhtasUYhrxxXvPlFAQFjWgP+JVqTJKvIclEtZ/EfiptDeQfVFvyn8Ecg
AMX99v1vBHYr+SftpEITbR5mPtQLjye4JQLmtdRg6if7ErzPWH3HBRwLZN073Pyb
mTve1qcb3vJUn3LI1hCM+E2aCTM/uAmbtS/vmk32O+xtSTV1pmdDc8Ywcw1R5vij
eHea7+osVV0=
=hxn0
-----END PGP SIGNATURE-----


________________________________________________
Current version is 1.62 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Reply via email to