IETF Logo Mail Archive

Re: [openpgp] Intent to deprecate: Insecure primitives

ianG <iang@iang.org> Mon, 23 March 2015 18:37 UTC

Return-Path: <iang@iang.org>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 69B6B1AD1EC for <openpgp@ietfa.amsl.com>; Mon, 23 Mar 2015 11:37:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CNYm8maObUaF for <openpgp@ietfa.amsl.com>; Mon, 23 Mar 2015 11:37:00 -0700 (PDT)
Received: from virulha.pair.com (virulha.pair.com [209.68.5.166]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 925211AD0F0 for <openpgp@ietf.org>; Mon, 23 Mar 2015 11:37:00 -0700 (PDT)
Received: from tormenta.local (iang.org [209.197.106.187]) by virulha.pair.com (Postfix) with ESMTPSA id 716CA6D7A7; Mon, 23 Mar 2015 14:36:59 -0400 (EDT)
Message-ID: <55105D4A.3030307@iang.org>
Date: Mon, 23 Mar 2015 18:36:58 +0000
From: ianG <iang@iang.org>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:31.0) Gecko/20100101 Thunderbird/31.3.0
MIME-Version: 1.0
To: openpgp@ietf.org
References: <r422Ps-1075i-0DAFD7F0DE904C66B37F279A05E0CB4A@Williams-MacBook-Pro.local>
In-Reply-To: <r422Ps-1075i-0DAFD7F0DE904C66B37F279A05E0CB4A@Williams-MacBook-Pro.local>
Content-Type: text/plain; charset="windows-1252"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: <http://mailarchive.ietf.org/arch/msg/openpgp/iQJ8ggvklaKkGU2-lBWKnAMutfg>
Subject: Re: [openpgp] Intent to deprecate: Insecure primitives
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Mar 2015 18:37:01 -0000

On 18/03/2015 22:38 pm, Bill Frantz wrote:
> The software works fine. The user has either lost the secret key file or
> has forgotten the passphrase. I don't know a technical solution,
> particularly to the 2nd problem. Any suggestions?


Keystores like Apple's do fine here.  Basically, if we see the pgo key 
password as just one password in 100 then it becomes clearer.

Just another thing that made sense in 1992, but things have moved on ;)

iang

v2.23.0 | Report a Bug | By Email