[kwlug-disc] Looking for resources to better understand GPG.

[Mark Steffen]

Only those with a use case use it due to effort involved.  I would not be
surprised if to some degree adoption of GPG and other email encryption
measures are quietly discouraged at email service providers.  They will get
a lot of security requests, and I believe (at least documented in AT&T
case) this is a billable service to law enforcement.  Enabling/encouraging
end to end message encryption endangers this revenue stream, additionally
it makes it more difficult to target ads to users without content
analysis.  The business model just does not support it.  And most/many
people use Hotmail/Gmail/Yahoo/etc. (case in point, though my work email
address supports Outlook Message Encryption, still this is a walled-garden
style "key escrow" service, someone can see whatever you're sending).  Of
course, if you aren't doing anything wrong then you have nothing to hide,
right?

*Mark Steffen*
Office Direct: +1.226.476.1240 | Mobile/WhatsApp/Signal: +1.226.600.0464
*"Don't believe everything you read on the Internet." -Abraham Lincoln*



On Tue, Aug 15, 2017 at 5:42 PM, Khalid Baheyeldin <kb at 2bits.com> wrote:

> Although I know the merits of GPG for emails, I have always found that
> without widespread adoption, it is annoying more than useful. When
> someone with GPG sends a message to a client that does not understand,
> or does not have GPG enabled, the result is meaningless gibberish in
> the body of the message.
>
> It is one of these things that will remain niche if adoption remains the
> same. Think about people using Hotmail, Gmail, and all the corporate
> servers that do not have this enabled.
>
> We can't make the public at large conform to our technology, then it
> will not be as useful as it can be.
>
> On 8/14/17, stuart at lowlevel.ca <stuart at lowlevel.ca> wrote:
> > I've always found it painful and difficult to use/integrate... and if I
> > mention it to regular people they stop talking to me. Would be
> interesting
> > to see where things are at...
> >
> > Stuart
> >
> > Sent from my iPhone
> >
> >> On Aug 14, 2017, at 9:41 PM, Chamunks <chamunks at gmail.com> wrote:
> >>
> >> I'm genuinely slightly averse to PGP right now because it has no support
> >> for modern crypto.  No ECC support in the stable release at all, ed25519
> >> is nowhere to be found as far as I've seen.  Plus since we already have
> >> quantum computers that are no longer theoretical.  I'd like to see if we
> >> couldn't get ahead of the curve and work on trying to find something
> >> that's "quantum safe"
> >>
> >>> On Mon, Aug 14, 2017 at 7:09 PM Daniel Villarreal <
> youcanlinux at gmail.com>
> >>> wrote:
> >>> -----BEGIN PGP SIGNED MESSAGE-----
> >>> Hash: SHA256
> >>>
> >>> On 08/14/17 12:53, bob+kwlug at softscape.ca wrote:
> >>> > I've been using GPG for a very narrow set of purposes for many
> >>> > years now ... Thanks in advance, (the other)Bob.
> >>> ...
> >>> > [2] O'Reilly has always been my go-to for stuff like this but they
> >>> > just reference the No Starch Press book. Can anyone comment on how
> >>> > good a book this is or is there a better one?
> >>> ...
> >>>
> >>> Going by Michael W. Lucas' "Absolute OpenBSD, 2nd Edition, Unix for
> >>> the Practical Paranoid" (https://www.nostarch.com/obenbsd2e), he is a
> >>> really good tech writer.
> >>>
> >>>
> >>> PGP & GPG
> >>> Email for the Practical Paranoid
> >>> by Michael W. Lucas
> >>> https://www.nostarch.com/pgp.htm
> >>>
> >>> Have fun!
> >>>
> >>> - --
> >>> Daniel Villarreal
> >>> http://www.youcanlinux.org
> >>> youcanlinux at gmail.com
> >>> PGP key 2F6E 0DC3 85E2 5EC0 DA03  3F5B F251 8938 A83E 7B49
> >>> https://pgp.mit.edu/pks/lookup?op=get&search=0xF2518938A83E7B49
> >>> -----BEGIN PGP SIGNATURE-----
> >>>
> >>> iQEcBAEBCAAGBQJZkfXlAAoJEPJRiTioPntJ/M0H/im3XW5uWVSOaVrK9RHaVhqy
> >>> FlC60Y9UC2G9UjYGs9An4N002F04Cerk+LCZnx43ukUPctg4wMjimEPLI8YP9G6o
> >>> iNYlR7noOIMgR6c7x/LnW8NedNp9/DdNLhLW7frl8JY4l2RIj+Um7+WzNSsQV8sA
> >>> enyskvODOOKI1hVs1BEXFXrzpcGHnmERYS6/Y6nyq3RxfkUFuN5uue3e4iXuTfpa
> >>> US/8ll8hX8KJes9VmSTUgUqWOL0KScopm68dWTyctJdNPVqRrVhOoCux2kEbzPTW
> >>> p5uFjHwnGZs+SUV3u3WUyzuxwHWr1786SuETSopHSk7ojX74x9SIPGpyoGXJPMI=
> >>> =ZFI+
> >>> -----END PGP SIGNATURE-----
> >>>
> >>> _______________________________________________
> >>> kwlug-disc mailing list
> >>> kwlug-disc at kwlug.org
> >>> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
> >> _______________________________________________
> >> kwlug-disc mailing list
> >> kwlug-disc at kwlug.org
> >> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
> >
>
>
> --
> Khalid M. Baheyeldin
> 2bits.com, Inc.
> http://2bits.com
> Drupal optimization, development, customization and consulting.
> Simplicity is prerequisite for reliability. --  Edsger W.Dijkstra
> Simplicity is the ultimate sophistication. --   Leonardo da Vinci
>
> _______________________________________________
> kwlug-disc mailing list
> kwlug-disc at kwlug.org
> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20170815/fcacd651/attachment.htm>