[git] gnupg-doc - branch, master, updated. bfb83263ceadce7eaf18dc2d2fdcfd48f2fb6c4f

by Werner Koch cvs at cvs.gnupg.org
Fri Nov 22 10:33:17 CET 2013


This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "The GnuPG website and other docs".

The branch, master has been updated
       via  bfb83263ceadce7eaf18dc2d2fdcfd48f2fb6c4f (commit)
       via  f63d8666ca4d5a685f7efbb042e76c6cb06bd90e (commit)
       via  c54adcb07c68adecac306f4aba1e56ee78c93cca (commit)
      from  3603120c54d52a7d5192b0c95f5d2bfe535d4a13 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit bfb83263ceadce7eaf18dc2d2fdcfd48f2fb6c4f
Author: Werner Koch <wk at gnupg.org>
Date:   Thu Nov 21 20:20:02 2013 +0100

    Add dissenting opinion on the use of PGP/MIME.

diff --git a/web/faq/gnupg-faq.org b/web/faq/gnupg-faq.org
index 6a5aaa3..63e92f9 100644
--- a/web/faq/gnupg-faq.org
+++ b/web/faq/gnupg-faq.org
@@ -2047,10 +2047,9 @@ against all threats.
    :CUSTOM_ID: use_pgpmime
    :END:
 
-Probably not.
+This is controversial, thus there are two commonly given answers.
 
-# This is controversial.  rjh: we should discuss on how we can extend
-# this answer -wk
+*** 1. Probably not.
 
 PGP/MIME is the official, standardized way of using GnuPG with
 electronic mail.  PGP/MIME packages the data up as encrypted
@@ -2072,6 +2071,32 @@ mailing lists, it’s hard to claim that PGP/MIME is ready for
 widespread usage.  For now, it’s best to use inline traffic unless you
 can be certain that PGP/MIME messages will not be mangled in transit.
 
+*** 2. Yes, it is the safer solution.
+
+The problems with the mailing list software are annoying but harmless.
+
+In most other cases PGP/MIME works very well and avoids a lot of
+semantic problems when sending signed mails.  For example it is much
+easier for mail readers to indicate what parts of the mail are covered
+by the signature.  Many mail readers have bugs pertaining to inline
+signatures which can be used to trick the user into assuming that some
+parts of a mail are covered by the signatures while in reality they
+are not.
+
+For encrypted and signed mails there are no problems with signature
+verification because almost all software uses the combined
+signature+encryption approach of PGP/MIME and thus GnuPG takes care of
+it in exactly the same way as it does with inline traffic.
+
+Non-ASCII character encoding is problematic with inline data.
+Although OpenPGP provides a way to specify the encoding, that feature
+is not widely supported.  In good Unix tradition GnuPG does not try to
+interpret the data it signs or encrypts but relies on the peers to
+agree on a common encoding.  PGP/MIME provides a well established and
+matured way of doing exactly that.
+
+Some plugins for Outlook do not support PGP/MIME but after all the
+OpenPGP support in Outlook is anyway quite limited.
 
 
 ** What are the best algorithms in GnuPG?

commit f63d8666ca4d5a685f7efbb042e76c6cb06bd90e
Author: Werner Koch <wk at gnupg.org>
Date:   Thu Nov 21 20:19:06 2013 +0100

    Declare the FAQ official.
    
    Also include pointers to Claws-Mail and VMS

diff --git a/web/faq/gnupg-faq.org b/web/faq/gnupg-faq.org
index 4c34c81..6a5aaa3 100644
--- a/web/faq/gnupg-faq.org
+++ b/web/faq/gnupg-faq.org
@@ -72,10 +72,10 @@ for any errors.
   :CUSTOM_ID: welcome
   :END:
 
-Welcome to the *unofficial* GnuPG FAQ.
-
-*As of this writing, this FAQ is both inaccurate and incomplete. It is
-a work in progress. Do not rely on the answers found herein.*
+Welcome to the official GnuPG FAQ.  This FAQ has been written from
+scratch and makes the old FAQ obsolete.  Nevertheless this text is
+still incomplete but we believe it to be more accurate than the long
+outdated former FAQ.
 
 
 ** What conventions are used in this FAQ?
@@ -118,7 +118,7 @@ italicized, and initialed by their author.  The different editors are:
    :CUSTOM_ID: is_it_official
    :END:
 
-Not yet.
+Yes.
 
 
 ** When was this FAQ last checked for accuracy?
@@ -184,7 +184,7 @@ clients, such as Psi.
    :END:
 
 Largely, yes.  It can be made to interoperate with anything from PGP
-5.0 and onwards, and has excellent interoperability with the most
+2.6 and onwards, and has excellent interoperability with the most
 recent releases.
 
 
@@ -329,6 +329,13 @@ Alternatively, you can install GnuPG using a package manager:
 sudo pkg_add -r gnupg
 #+end_example
 
+*** … for VMS?
+    :PROPERTIES:
+    :CUSTOM_ID: get_gnupg_vms
+    :END:
+
+A port to *VMS* is maintained by Steven M. Schweda at [[http://www.antinode.info/dec/sw/gnupg.html][antinode.info]].
+
 
 ** Is there source code available for it?
    :PROPERTIES:
@@ -658,7 +665,12 @@ Many email clients offer strong GnuPG integration.
   - Actively developed :: Yes
   Kontact is KDE’s integrated personal information manager of KDE.  It runs anywhere that KDE does, and even on some mobile devices as Kontact Touch.
 
-
+- Claws-Mail
+  - Plugin? :: Yes (internal plugin)
+  - Supports GnuPG versions :: 1.4, 2.0
+  - Supports PGP/MIME :: Yes
+  - Actively developed :: Yes
+  Claws-Mail for Windows is included in the [[http://www.gpg4win.org][Gpg4win]] installer.
 
 ** … Mac OS X?
    :PROPERTIES:
@@ -680,13 +692,16 @@ Many email clients offer strong GnuPG integration.
   - Supports GnuPG versions :: 1.4, 2.0
   - Supports PGP/MIME :: Yes
   - Actively developed :: Yes
+  EasyPG is part of Emacs 23, proper.  Thus there is no more need
+  to install the plugin.  See the Gnus manual for configuration hints.
 
 - Mutt
   - Plugin? :: No (natively supported)
   - Supports GnuPG versions :: 1.4, 2.0
   - Supports PGP/MIME :: Yes
   - Actively developed :: Yes
-  Make sure to put ~set crypt_use_gpgme~ in your =~/.muttrc= file.
+  For best experience make sure to put ~set crypt_use_gpgme~ in your
+  =~/.muttrc= file.
 
 - Apple Mail
   - Plugin? :: Yes, via [[http://www.gpgtools.org][GPGtools]]
@@ -717,13 +732,16 @@ Many email clients offer strong GnuPG integration.
   - Supports GnuPG versions :: 1.4, 2.0
   - Supports PGP/MIME :: Yes
   - Actively developed :: Yes
+  EasyPG is part of Emacs 23, proper.  Thus there is no more need
+  to install the plugin.  See the Gnus manual for configuration hints.
 
 - Mutt
   - Plugin? :: No (natively supported)
   - Supports GnuPG versions :: 1.4, 2.0
   - Supports PGP/MIME :: Yes
   - Actively developed :: Yes
-  Make sure to put ~set crypt_use_gpgme~ in your =~/.muttrc= file.
+  For best experience make sure to put ~set crypt_use_gpgme~ in your
+  =~/.muttrc= file.
 
 - Kontact
   - Plugin? :: No (natively supported)
@@ -740,13 +758,19 @@ Many email clients offer strong GnuPG integration.
   - Supports PGP/MIME :: Yes
   - Actively developed :: Yes
 
+- Claws-Mail
+  - Plugin? :: Yes (internal plugin)
+  - Supports GnuPG versions :: 1.4, 2.0
+  - Supports PGP/MIME :: Yes
+  - Actively developed :: Yes
 
 * Is GnuPG available as a ‘portable app’?
   :PROPERTIES:
   :CUSTOM_ID: portable_app
   :END:
 
-For Windows users, check [[http://portableapps.com/apps/internet/thunderbird_portable][PortableApps.com]].
+For Windows users, check [[http://portableapps.com/apps/internet/thunderbird_portable][PortableApps.com]].  To build you own portable
+application you may use the /mkportable/ tool which comes with [[http://www.gpg4win.org][Gpg4win]].
 
 
 * What do all these strange words mean?

commit c54adcb07c68adecac306f4aba1e56ee78c93cca
Author: Werner Koch <wk at gnupg.org>
Date:   Thu Nov 21 20:17:26 2013 +0100

    Add UNIX trademark and reorder list.

diff --git a/web/faq/gnupg-faq.org b/web/faq/gnupg-faq.org
index c8f8937..4c34c81 100644
--- a/web/faq/gnupg-faq.org
+++ b/web/faq/gnupg-faq.org
@@ -25,12 +25,13 @@ very litigious.
    :CUSTOM_ID: trademarks
    :END:
 
-- PGP is a trademark of Symantec Corporation.
-- Windows is a trademark of the Microsoft Corporation.
+- Linux is a trademark of Linus Torvalds.
 - Macintosh, OS X and Mac OS X are all trademarks of the Apple
   Corporation.
-- Linux is a trademark of Linus Torvalds.
+- PGP is a trademark of Symantec Corporation.
 - Solaris is a trademark of Oracle Corporation.
+- UNIX is a trademark of The Open Group.
+- Windows is a trademark of the Microsoft Corporation.
 - Some cryptographic algorithms mentioned in this FAQ may be
   trademarked.
 

-----------------------------------------------------------------------

Summary of changes:
 web/faq/gnupg-faq.org |   82 +++++++++++++++++++++++++++++++++++++++----------
 1 file changed, 66 insertions(+), 16 deletions(-)


hooks/post-receive
-- 
The GnuPG website and other docs
http://git.gnupg.org




More information about the Gnupg-commits mailing list