Starting with gnupg

Faramir faramir.cl at gmail.com
Sat Aug 2 17:02:30 CEST 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Jean-David Beyer escribió:
> Dwayne wrote:

>> hands". Should I be worried that the person has the encrypted file or
>> can I feel "safe" that the person doesn't have my privatekey+passphrase
>> and therefore cannot decrypt it?
> 
> He needs more than your public key. He needs your private key as well -- and
> the easiest way to get that is to get a copy of your secret keyring and your
> passphrase. But if he somehow got your private key, I do not believe he
> would need your passphrase. I hope you have _not_ sent your secret keyring
> anywhere.

  Well, the idea about having a passphrase is to protect the private key
if it falls in the wrong hands... with a strong passphrase, there is no
way to activate the private key... of course, if somebody gets the
private key, maybe he can get the passphrase too...

 Best Regards
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEcBAEBCAAGBQJIlHcGAAoJEMV4f6PvczxAXf4IAJpvPidB47DYAxCDeZH2B0ni
XSsxtTNcr7jLYdZ2FYgtxECVGpTX8iDYp0H8VCH/LDydjSl7MeJIqePlSiIVY+zE
/xaYXWIiYAj7wcPHk4dpO/d+RCYDYzAK+kfGgdO12vSTHn8LWhEacFmRXhJs2pT5
SIuXkJqjBtDX9nrrVnfP577dv9paV92Ao9N7UrJXgs/mojudU6+J5U6hg3sVpFsY
MRYTWoI6qykSgWq3YDeV9J02A83UfElDkNN+QFoypLHt1zahsfmTes211XbvHXnY
u1jzCa5ug9bjUCw83gYr4QaD06Kvz8QAWlLXka0dqN+oZonEUR8wLClTBl0kt1U=
=ObVP
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list