Trust of GPG4Win - Part 1

Henry Hertz Hobbit hhhobbit at securemecca.net
Sat Jul 27 07:22:03 CEST 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

All

Disclamimer:  I have no connections with the GnuPG effort other
than as a thankful end user.

I have a much longer Part 2 of this.  After my tongue in cheek
statment about the article at Technology Review I came up with
what they were citing, not realizing the damage that it would
do.  Here is the pointer to the ACM delivery.  You need to
understand that they were talking about GnuPG running on a VM
(Virtual Machine) in "the cloud":

https://dl.acm.org/citation.cfm?id=2382230

That is nothing close to what GPG4Win is doing running natively
on Windows.  I believe they picked GnuPG for a specific reason.
It is probably one of the most reliable programs written and
they were using that for proof of just how unsafe cloud computing
is.  Ergo ... if GnuPG (GNU Privacy Guard) can't do it then
nothing probably can.

For a second corroborating source of the SHA1 hashes and file
sizes look here for the current and potential new ones:

http://securemecca.com/public/GnuPG/gpg4win-2_1_1.txt
http://securemecca.com/public/GnuPG/

I don't want to deliver part 2 any sooner than 12:00 UTC
2013-07-29.  Why such a long time? I have to get it right.
I have already made at least 30 edits and am no where near
satisfied with what I have written.

HHH
- -- 
Gnome 3, Ubuntu Unity, Windows 8 - poor iPhone GUI on Desktop.
Thinking has been suspended indefinitely.
Anybody caught thinking will be immediately shot!
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBCAAGBQJR81j7AAoJEMhFIk/IOUbw29QH/RQBlO1PxKcI5BJBvVW5Wwrl
bButjKZ4zhngzYuIpNcl8QycjdJwsD7CEFBRjQvHYxCRjsEjTnobXidfaSf85NV2
JT8j0ZvjS2y5amFLz1kMW49C400gQlzttfkjumGE6mouUlSbx6TZ3hhxxby529A5
J7geCyhlePuZ17GKyKTs4QKI5OrRssASsd1TE8yree2nzBKJLu8ezJugPyCVQ0NK
ctdif2LWcX+y13Yc4nDiTVsB7MacnyxKKvFs6vCrSo44GFThMTY8YAERWissbw12
oJS8KxhmfR3bXpdfLPjlEoHGqFx+ntE0IioI3j7rTtHYWlHyqOuL1DOm/08btWA=
=kqhr
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list