gmane.comp.security.pgp-basics

encryption practice

alf — 2013-05-01T14:13:15

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

anyone wanting practice using openpgp encryption should consider
joining the pgpnet yahoo group.  messages are encrypted to the public
keys of all current members.  twice a year pgpnet conducts a roll call
to make sure subscribers are still actively using pgp/gnupg.  therefore
there is always a pool of people willing and able to exchange encrypted
email.

pgpnet has newbies as well as members who have been using pgp since
shortly after its introduction.  it is a safe place to make mistakes
while learning the capabilities and limitations of openpgp.

yahoo members can find the group by searching for 'pgpnet' on the
website.  nonmembers can join by sending an email to

pgpnet-subscribe< at >yahoogroups.com

- --alf
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAlGBIvsACgkQnMbE8D83D361SACfQJ8iQgLoaEo/JThSFKBbgKei
/MgAnjejyfvAycAsU+HMZ6HLzHrJtPVA
=gqyI
-----END PGP SIGNATURE-----


------------------------------------

_______________________________________________________

Re: Newbie

Melissa — 2013-04-30T19:58:20

Hi,

On Monday, April 29, 2013, at 6:40:31 PM PST, I wrote:


Oops! That second "so" was a mistake. Was supposed to have been "to".

Re: Newbie

pjalajas — 2013-04-30T16:01:26


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I'm proud to report that my bookkeeper, whom I had previously coerced with cash into learning Gpg4Win/Kleopatra, has this week coerced her new assistant to do so as well.  (They each have their own keypairs.)

(If anyone is looking for a great bookkeeping team using PGP/GPG, let me know!) 

Pete
pub   3200R/1C23B5F0 2003-09-23
      Key fingerprint = 5D13 7C5C D003 D806 8BD1  438A B396 EC3D 1C23 B5F0
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iQGsBAEBAgAGBQJRf+qgAAoJELOW7D0cI7XwYngMf0yYjO1WSuYTJvJ3EEf+NJku
u0rQXl2KZaxKfJY2JF1IRxX+BLTtS/4EHVT3kInB79ISWqyr7VS5egxyPJRrhAd2
t4KlLNVljI9mBbDRWbXDhpPH3aNGRiIab3l9lAGGcHAg0sjrO2ZciwkNs4s4EHIv
/Gx5jK7AWEFtZc/U9OmVr7aIuQK/7YwnW5gfQGflrAnJ6VievKlAi/rw33D+dZdl
4CPYuhKyp7DQO3nHzpWUcVQPrzAN/bCH3ohAwwIuHdcWLV/U8RpRccDHbKMD/rWm
5+mWpWqcGL0m3+mi/3KbFL4pDHTEuTYZbw2id/UwW6ZPPww+23vPUem8CnjfA31l
kTp2UKRbX6ZFfhyO/WH1qaJ5K5DFlUF0rPMjtn9/s3Vmd5TQITuFsGJJH1eTQnDy
rfM2LtyhErfZkjBRCcNwTe0qI9oHX4RYr2AlBL5sMJvKgE7G9

Re: Newbie

Robert J. Hansen — 2013-04-30T03:57:34

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256


It's rather a lot worse than that, honestly.

Email is dying and has been for years.  Ask a college student today what
he or she thinks of email and you'll get told it's an antiquated
technology that their parents insist on still using.  The mean age of
habitual users of email keeps rising.  When it comes to technology and
demographics, a shrinking userbase that keeps rising in mean age is
about as bad as it gets.

So, why is it shrinking?

The first generation of internet protocols -- email being one of them,
since email is considerably older than TCP/IP -- were devoted to
creating commodity infrastructure.  Everyone was connected to everyone
else, information would flow like a mighty river, the huddled masses
would be freed from the chains of corporate control of data, and so on.

It was a great dream.  The only problem was it was horrifically naive.
The exact same things led to the internet turning into an open sewer.  A
lot of people, when looking at the

Re: Newbie

Melissa — 2013-04-30T01:40:31

Hi Vic,

On Monday, April 29, 2013, at 8:54:14 AM PST, you wrote:


Convincing your correspondents to use it will indeed be difficult.

I've been an enthusiastic proponent of OpenPGP since my first exposure
to it in 1998, and yet my circle of OpenPGP using personal
correspondents remains discouragingly small. Since I simply refuse to
discuss truly "personal" matters with anyone who won't bother to
encrypt, most of my email correspondence is on the level of "So how's
the weather?". :)

Though the advantages of using strong encryption for personal
correspondence seems *so obvious* so some of us, in this world of
every fart being broadcast via Facebook, Twitter, and YouTube
(voluntarily, no lsss!), it's equally obvious to me that most people
simply don't want to be bothered -- to think.

Re: Newbie

Kwazeemodem — 2013-04-29T15:54:14

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Tue, 23 Apr 2013 09:04:05 -0400
Mike Daigle <md5a932e53< at >yahoo.ca> wrote:


Thanks, Mike, but you probably should try to communicate with the
people on that list.  I sent emails to numbers 2 through 7 on the list.
Two of the messages bounced because the addresses are no longer valid.
Three recipients did not reply.  One Encryption Help Team member
responded.  He is very helpful and we have successfully exchanged
encrypted messages.  The help team list looks as dated as some of the
other group documents judging by the software version numbers.

Again, thanks to you and the others who replied to my initial post.  I
think I'm beginning to understand this stuff.  The hard part is going to
be to convince my correspondents to do the same.

Vic
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQIcBAEBCgAGBQJRfpemAAoJENNQUjg9e7CoXTsP/Rj80TPpRlJ2h3WiXJIF4cu7
K48yYIW3m0Fu78L2fwj4INwsacWtdMYDr92xn5Ta5Tpw6FmwAv1+9bgH+Zz7XyPu
30/Djb3prN3J3u1ql/F6Fz3U1bwj

Re: test signature

pjalajas — 2013-04-26T12:29:07

(I'm not signing this to avoid confusion.)

Lou's message verified fine.  

Mark's message did not verify for me either.  At the end of the gpg verify, I get:
====================
-----END PGP SIGNATURE-----


gpg: invalid armor header: www.pgp.com\n
petjal< at >TheEdge:~$ Charset: utf-8
Charset:: command not found
====================

Maybe it's a line-wrapping problem in Yahoo Groups?  Or perhaps that Yahoo Groups is redacting email-addresses (mark.walton< at >...)?

Pete

pub   3200R/1C23B5F0 2003-09-23
      Key fingerprint = 5D13 7C5C D003 D806 8BD1  438A B396 EC3D 1C23 B5F0
uid                  E.W. Peter Jalajas <pjalajas< at >tebuco.com>


--- In PGP-Basics< at >yahoogroups.com, George Worley <gworley< at >...> wrote:




------------------------------------

______________________________________________________________
Archives:                  http://groups.yahoo.com/group/PGP-Basics/messages
OT List:                         http://groups.yahoo.com/group/PGP-Basics-OT
OT Subscribe:                 mailto:PGP-Basics-OT-s

Re: Digest Number 3268

John Clizbe — 2013-04-26T05:21:33

Most Linux distributions have gpg and gpg2 pre-installed.



------------------------------------

______________________________________________________________
Archives:                  http://groups.yahoo.com/group/PGP-Basics/messages
OT List:                         http://groups.yahoo.com/group/PGP-Basics-OT
OT Subscribe:                 mailto:PGP-Basics-OT-subscribe< at >yahoogroups.com
Gossamer Spider Web of Trust                           http://www.gswot.org

RE: test signature

Mark W. Walton — 2013-04-26T01:28:08

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

My signature or yours?

Mark Walton
mark.walton< at >sympatico.ca 

- -----Original Message-----
From: PGP-Basics< at >yahoogroups.com [mailto:PGP-Basics< at >yahoogroups.com] On
Behalf Of George Worley
Sent: Thursday, April 25, 2013 3:00 AM
To: PGP-Basics< at >yahoogroups.com
Subject: Re: test signature

Mark,

For some reason the signature of this message got corrupted... the original
message from Lou was fine.



-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 10.2.0 (Build 2599) - not licensed for commercial use:
www.pgp.com
Charset: utf-8

wj8DBQFRedghHRaqEjvQ2I4RAtz3AKC1acMjYdld7tg46D2VDsq5w9h6jACg2HI6
43aIYyCfIYDLxC1VY0QP1OQ=
=D5WM
-----END PGP SIGNATURE-----



------------------------------------

______________________________________________________________
Archives:                  http://groups.yahoo.com/group/PGP-Basics/messages
OT List:                         http://groups.yahoo.com/group/PGP-Basics-OT
OT Subscribe:                 mailto:PGP-Basics-OT-subscribe

Re: Digest Number 3268

Robert J. Hansen — 2013-04-25T20:54:49

http://www.gnupg.org/download

If you're running Windows, GPG4WIN might be more appropriate:

http://www.gpg4win.org

If you're running Mac OS X, GPGTools might be best:

https://gpgtools.org/





------------------------------------

______________________________________________________________
Archives:                  http://groups.yahoo.com/group/PGP-Basics/messages
OT List:                         http://groups.yahoo.com/group/PGP-Basics-OT
OT Subscribe:                 mailto:PGP-Basics-OT-subscribe< at >yahoogroups.com
Gossamer Spider Web of Trust                           http://www.gswot.org

Re: Digest Number 3268

Sin Trenton — 2013-04-25T14:59:11

Den 25 apr 2013 16:50 skrev "Dominic D&apos;Antoni" <mrgoodfella25< at >yahoo.com

Check GnuPG, http://www.gnupg.org,
Free, open source, everything you could possibly need.

Best,
Sin Trenton


[Non-text portions of this message have been removed]



------------------------------------

______________________________________________________________
Archives:                  http://groups.yahoo.com/group/PGP-Basics/messages
OT List:                         http://groups.yahoo.com/group/PGP-Basics-OT
OT Subscribe:                 mailto:PGP-Basics-OT-subscribe< at >yahoogroups.com
Gossamer Spider Web of Trust                           http://www.gswot.org

Re: Digest Number 3268

Dominic D'Antoni — 2013-04-25T14:47:15

Is there a free pgp program/software i can use or i
Do i have to buy one????

Sent from Yahoo! Mail on Android



[Non-text portions of this message have been removed]



------------------------------------

______________________________________________________________
Archives:                  http://groups.yahoo.com/group/PGP-Basics/messages
OT List:                         http://groups.yahoo.com/group/PGP-Basics-OT
OT Subscribe:                 mailto:PGP-Basics-OT-subscribe< at >yahoogroups.com
Gossamer Spider Web of Trust                           http://www.gswot.org

Re: test signature

George Worley — 2013-04-25T07:00:29

Mark,

For some reason the signature of this message got corrupted... the
original message from Lou was fine.

George
Mark W. Walton wrote, On 4/23/2013 21:19:




[Non-text portions of this message have been removed]



------------------------------------

______________________________________________________________
Archives:                  http://groups.yahoo.com/group/PGP-Basics/messages
OT List:                         http://groups.yahoo.com/group/PGP-Basics-OT
OT Subscribe:                 mailto:PGP-Basics-OT-subscribe< at >yahoogroups.com
Gossamer Spider Web of Trust                           http://www.gswot.org

Re: Newbie

Bruce Tindall — 2013-04-24T03:12:24

What Robert said. I'm confident that there is sufficient free-floating
geekiness in the world that if there were anything funny going on in the
GnuPG code, somebody would find it and make a name for themselves by
pointing it out to the public at large.  Nobody has done so, as far as I
know.



On Tue, Apr 23, 2013 at 4:58 PM, Robert J. Hansen <rjh< at >sixdemonbag.org>wrote:



[Non-text portions of this message have been removed]



------------------------------------

______________________________________________________________
Archives:                  http://groups.yahoo.com/group/PGP-Basics/messages
OT List:                         http://groups.yahoo.com/group/PGP-Basics-OT
OT Subscribe:                 mailto:PGP-Basics-OT-subscribe< at >yahoogroups.com
Gossamer Spider Web of Trust                           http://www.gswot.org

RE: test signature

Mark W. Walton — 2013-04-24T02:19:19

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

OK here too.

Mark Walton
mark.walton< at >sympatico.ca 

- -----Original Message-----
From: PGP-Basics< at >yahoogroups.com [mailto:PGP-Basics< at >yahoogroups.com] On
Behalf Of lou
Sent: Tuesday, April 23, 2013 1:22 PM
To: PGP-Basics< at >yahoogroups.com
Subject: test signature

* PGP Signed: 4/23/2013 at 1:21:37 PM

Please check my sig.
Public key should be uploaded to a couple of servers.

Thanks,
Lou

* lou (Lou's key for email) <lou< at >lous-stuff.com>
* 0x889A390E(L)


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 10.2.0 (Build 2599) - not licensed for commercial use:
www.pgp.com
Charset: utf-8

wj8DBQFRd0EbHRaqEjvQ2I4RAuddAKDFRjxfxiIR3vsKg5Tf0eGaA/2HIgCg77Ej
UR/yKA6ZAZE3hJ2lUqO/0wo=
=RYol
-----END PGP SIGNATURE-----



------------------------------------

______________________________________________________________
Archives:                  http://groups.yahoo.com/group/PGP-Basics/messages
OT List:                         http://groups.yahoo.com/group/PGP-Basics-OT
OT

Re: Newbie

Robert J. Hansen — 2013-04-23T23:58:47

Not necessarily.  It depends on your paranoia level.  There are people
on this list who have gone through the GnuPG source code pretty closely
and can attest to the quality of the codebase.  If you trust them, then
you can trust the source.



------------------------------------

______________________________________________________________
Archives:                  http://groups.yahoo.com/group/PGP-Basics/messages
OT List:                         http://groups.yahoo.com/group/PGP-Basics-OT
OT Subscribe:                 mailto:PGP-Basics-OT-subscribe< at >yahoogroups.com
Gossamer Spider Web of Trust                           http://www.gswot.org

Re: test signature

Grant Olson — 2013-04-23T19:05:07

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 4/23/13 1:21 PM, lou wrote:

UNTRUSTED Good signature from lou (Lou's key for email)
<lou< at >lous-stuff.com>
Key ID: 0x889A390E / Signed on: 4/23/13 1:21 PM
Key fingerprint: 2EF9 5FEA A9EA BBF3 303F E2C4 9113 F79F 889A 390E

Looks good to me.

- -- 
Grant

http://rubygems-openpgp-ca.org - Sign Your Gems.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.18-git85f906b (Darwin)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBCgAGBQJRdttjAAoJEP5F5V2hilTWiNgH/jdpfFIeLtvORBMsSnkcvdpQ
LORmnG0zsg3+oGc2NmHfFxYhewiCg3wLTK15AToTGf1xQf9pYoKqxgpXVmxkUMjY
uEITg0LEX3wH4k8ethdKVWHuEX2414iNeEbve61e/fYyZ6xuaJ5nV8yGwC0cta6w
IN2DtQkY8UpehSo7xuWg2hzZ822HripJ1+723PWuIPdFH3Yt9ue+hG3U97N4wYWS
C4eSfxvbWftgqTd9XQT1WZaNg8dBX0a3k3LyDgUbbtFZfDmXeeLjKpILCKPDKrf/
/vWE13EVKVsILqbD6uhinPg27KfiFa9qIZx6CuH94ClJEGj89MmlHOm15q5uo7k=
=tmcZ
-----END PGP SIGNATURE-----


------------------------------------

_________________________________________________________

test signature

lou — 2013-04-23T17:21:40

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Please check my sig.
Public key should be uploaded to a couple of servers.

Thanks,
Lou


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJRdsMhAAoJEJET95+ImjkO1NgIAIm/T9WOq26lRcd6C76B4yQX
7WpQYZ28e+tOH7RFWN5CwG3NcKhmc4rP+W6GVY4gGvg/MQctR/46HMjxaUMmZLW1
qUYOkT1OjeTKng5g1J1HP6DHE9t/+bWAb3bk7kyPiZpWtlSisYp3mxPw9+ORkDmL
+TlVo1KMFgaXzlLUoxUSVzV2JGm0ExeogrsLg+37f0Mjo08Ls9ykuHbrH5ymDl7J
w9rjqxbM7NSSxag1wbDAB5CdGp+w9ViW2y4oEXGU6E7q7KJ3VyEkcAHlKB5iLjVd
2o5S/xyYh7iJe0/c1qEsE5iRlCMazRzJzzi4kvlTIOsaumj3ub6G9Hf5u4z+GQ8=
=fPMe
-----END PGP SIGNATURE-----



------------------------------------

______________________________________________________________
Archives:                  http://groups.yahoo.com/group/PGP-Basics/messages
OT List:                         http://groups.yahoo.com/group/PGP-Basics-OT
OT Subscribe:                 mailto:PGP-Basics-OT-subscribe< at >yahoogroups

Re: Newbie

Mike Daigle — 2013-04-23T13:04:05

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

In reply to Kwazeemodem's message sent 23-Apr-13 08:53:


Yes, a Yahoo Groups membership is required to access web features.

I have set the help team document to be sent upon subscription, and a
copy follows:


The following Members of PGP-Basics have kindly offered to help new
Members who would like practise in sending and receiving encrypted
messages. If you would like to send encrypted messages to the Members
listed below, simply open PGPKeys and perform a search using the Key ID
numbers as a search criteria.

The List is in no particular order, so please peruse the List and choose
at random, or make a choice based either on PGP/Mail Client versions, or
the Member's Operating System if you like.

Remember that encrypted messages are encrypted *TO* a particular Public
Key, and that Public Key must be on your Public Key Ring. Once you
search for and find the Public Key of the Member you wish to write to,
simply import that Key onto your Public Key Ring. T

Re: Newbie

Kwazeemodem — 2013-04-23T12:53:36

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Tue, 23 Apr 2013 08:04:51 -0400
Mike Daigle <md5a932e53< at >yahoo.ca> wrote:


I think that requires a Yahoo membership.

Vic
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
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=9cIe
-----END PGP SIGNATURE-----


-----------

Re: Newbie

Mike Daigle — 2013-04-23T12:04:51

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

In reply to Kwazeemodem's message sent 23-Apr-13 07:40:


The founder of PGP-Basics, Nick Andriash.


That sounds about right if you're bent on compiling from a source you
have the expertise to audit, otherwise the availability of the source
and the possibility other experts have done so may be enough to generate
some degree of trust in an application.

Although a PGP user for years, I prefer GnuPG because of its
versatility and small footprint. I didn't migrate to GnuPG just
because the source code is no longer published for PGP, nor have I the
expertise to evaluate code.


The list is in the Files section on the PGP-Basics Yahoo Group.


Your message was signed and I was able to verify :)


- -- 
Mike Daigle                                 http://www.mikedaigle.ca
-----BEGIN PGP SIGNATURE-----
Comment: Mike Daigle   Ontario, Canada         www.mikedaigle.ca

iQFHBAEBAwAxBQJRdnjfKhhodHRwOi8vbGlua3MubWlrZWRhaWdsZS5jYS9NaWtl
RGFpZ2xlLmFzYwAKCRBxySXiIMOhh3ezB