Multiple email addresses - any alternative to ask everyone to sign all my keys?

Philipp Klaus Krause pkk at spth.de
Fri Jul 26 13:25:05 CEST 2013


Am 25.07.2013 07:49, schrieb Christopher J. Walters:
> On 7/24/2013 6:06 PM, Robert J. Hansen wrote:
>> (My original reply went just to Philipp.  My apologies.)
> 
> No apology necessary.
> 
> I also must apologize, as my original reply got sent to Robert J.
> Hansen, when it was intended for the list.
> 
>> On 7/24/2013 1:53 AM, Philipp Klaus Krause wrote:
>>
>> Unfortunately, this is not casting very much light on things.  The use
>> of phrases like CONFIDENTIAL, SECRET and TOP SECRET have very specific
>> meanings in NATO countries, and you're using them here in ways that are
>> at odds with their NATO meanings.
> 
> This is true, and NATO countries have very specific and well defined
> ways of dealing with data with those titles, depending on the country.
> 
>> Let me try this rephrasing:
> 
> [snip]
> 
>> Further, each piece of traffic can receive any of three classifications:
>> C, S or TS.  You can send C traffic to Bender: the necessary keys to
>> decrypt it are held there.  However, although you can technically send
>> TS traffic to Fry, Fry can't decrypt it: the keys aren't there.
>>
>> If I have this right, then you've walked straight into the Bell-LaPadula
>> security model.  You'll be well-served by reading up on it: a good
>> academic reference will answer many of your questions.
> 
> I'll have to look that up and read up on it, when I have the time.
> 
>> The short answer is, "OpenPGP by itself will not be sufficient for your
>> purposes.  It might be able to provide a couple of tools, but what you
>> want to achieve is far beyond the scope of OpenPGP."
> 
> That was my conclusion, as well.  That is why I suggested the bootable
> GNU/Linux or *BSD Live CD  (with some vital tools on it, of course) and
> a USB thumb drive - with an encrypted filesystem for storing the keys
> (I'm not familiar with the smart card's capabilities, and as every smart
> card reader I have is non-functional, I cannot test it out).
> 
> My suggestion went beyond OpenPGP and GnuPG to try to solve the problem
> Philipp described.

Sorry, but I want to be able to read encrypted mail sent to my
university email address on my university computer. Without any extra
effort of booting from a live-cd or such.

Philipp





More information about the Gnupg-users mailing list