1,530 reputation
113
bio website
location Konstanz, Germany
age 26
visits member for 1 year, 5 months
seen yesterday

Jun
22
answered Is storing the private key and public keys in same directory on server recommended, like OwnCloud does?
Jun
18
reviewed Reviewed False timestamps on files
Jun
18
reviewed No Action Needed When downloading from an https web page - will the download also use ssl?
Jun
18
reviewed No Action Needed The brute-force resistence of bcrypt versus MD5 for password hashing?
Jun
18
reviewed No Action Needed How can I convince my customers not to send Credit Card data over email?
Jun
11
answered Is PGP web of trust exportable?
Jun
11
awarded  Nice Answer
Jun
8
comment Fastest public-key algorithm for testing purposes
OpenPGP does not accept no public-private crypto algorithm. It actually accepts plain text as symmetric encryption, but I'm not sure whether the implementations accept it. ;)
Jun
8
comment Fastest public-key algorithm for testing purposes
What is the problem you're trying to solve with mass key generation? In a test suite, usually predictable execution is preferred. Why do you need to create new keys every time? Otherwise: Choose the smallest possible key size, as this requires less entropy. Waiting for random data will very likely be the determining time factor when creating lots of keys. You might want to have a look at the way cryptico uses a passphrase as seed, requiring less entropy and writing your own code to create key pairs.
May
28
answered Why do I have keys of strangers in my GPG keychain?
May
28
revised Why do I have keys of strangers in my GPG keychain?
Anonymized and generalized to keep the question on-topic.
May
28
suggested suggested edit on Why do I have keys of strangers in my GPG keychain?
May
27
comment Utility of multiple signing subkeys when we're restricted to a single encryption subkey in GnuPG (PGP)
Issuing certificates (signing other primary keys) is usually performed using the primary key. On the other hand, at least GnuPG per default creates both encryption- and signing-only subkeys, which are used for day-to-day work. I even think that subkeys even cannot be used to certify other keys, but I cannot find the appropriate statement in the specs right now. Anyway: This is a reason to have one signing subkey, the OPs question was about why to have multiple of them.
May
27
answered Utility of multiple signing subkeys when we're restricted to a single encryption subkey in GnuPG (PGP)
May
6
comment How to validate the confirmation link received when publishing a new PGP key?
This is not the Ubuntu key server sending that mail, but Launchpad. It doesn't have anything to do with the Ubuntu keyserver (apart from Launchpad might query it). It is also completely independent from sending encrypted mail. Again, as both @deed02392 and me seem not to understand this part of your question: Where do you want to encrypt, and where do you want to decrypt?
May
6
awarded  Commentator
May
6
comment How to validate the confirmation link received when publishing a new PGP key?
I'm not sure what you want to achieve. Ubuntu's key server doesn't validate mail addresses at all. What validation link are you speaking of? Where do you want to encrypt, and where do you want to decrypt?
May
5
revised GPG master key without email address
added 537 characters in body
May
5
answered GPG master key without email address
Apr
25
answered Does a PGP signature provide integrity verification?