From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms1.migadu.com with LMTPS id mCmwMwyAMmY6GgEAqHPOHw:P1 (envelope-from ) for ; Wed, 01 May 2024 19:46:52 +0200 Received: from aspmx1.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0.migadu.com with LMTPS id mCmwMwyAMmY6GgEAqHPOHw (envelope-from ) for ; Wed, 01 May 2024 19:46:52 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=lease-up.com header.s=2017 header.b=f0djfl0n; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" ARC-Seal: i=1; s=key1; d=yhetil.org; t=1714585612; a=rsa-sha256; cv=none; b=EzMmDveNxMK7EuapVi0Sr6tYXT0jTrQYfbUXJtyj9ZdJqG8Gn4RevKihRDqMFqKS8djiXR txRRJD/6S8Sr53HYWf8a1zVDnJZbdG3t+AXgvqAhjIF0Wpl4Hm65C5UK3ngJFFPAcZcMWv jiBeUGaRbnXpPoX5bxXAMx8vH8ERObYCmTiPgAHFmgXTwQRoRfT8H05OubeYADouUBJhfc W4NLiF586PUapU2ynQleRlSI5YK5gTam3ydj6/WPMj4AaTMKDKNrZzKjyM0dsQYInyHKpn 6K23sx/aWZocFoakheR8I6TxiLXsKNl/Vd4w8b3ApjHlE/V1b/jhnAkXN/e9mA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=lease-up.com header.s=2017 header.b=f0djfl0n; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1714585612; h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=rTxH/jd3/aHyDwU0EOiOfEosV85IaclxWtzO/UsK/dc=; b=bnV6obfF0E1IJTJC5ecTLCBx7kEhi3rD6wk+3MOUYqSbt3dh2ejjq0B25GPc8xa4ohD5ih 0EVWvTw/V3bxPkDoJqyBeo7XTND2E+UnV5s6RmneY3Wnkjnatm/sQ0Ys7cu9SHLot0iosU wT73O6kffqlqs/ysQQn3SCIG/F8kWxJmMRosQSVUKKGlyl+ib0lRjP5K4yPX7MyyiiW6Ct GM0uejfbI5Qhd+m6elGwJDRrqK00pHfgG59C7kbsg6aAkObi65IUZ78nv87XfO1mxzbxk7 sYgOOgoiSbZQBePnzKSCQbszWwuJWEnBwYWD8+ZViLsX7CU/Ekie+InPK3hWzA== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 67FBB64AA3 for ; Wed, 1 May 2024 19:46:52 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1s2E2K-0004on-NX; Wed, 01 May 2024 13:46:32 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1s2E23-0004kE-6k for help-guix@gnu.org; Wed, 01 May 2024 13:46:15 -0400 Received: from sail-ipv4.us-core.com ([208.82.101.137]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_CHACHA20_POLY1305:256) (Exim 4.90_1) (envelope-from ) id 1s2E20-0004aS-P7 for help-guix@gnu.org; Wed, 01 May 2024 13:46:14 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; s=2017; bh=zV3xn8LxBlC3gZJ /aZF7qqA2KxYps5Ktv66J40hoXDw=; h=date:references:in-reply-to:subject: cc:to:from; d=lease-up.com; b=f0djfl0nVbEmCdsCCSkyDYfJNT77IUbp6jVEJGTa K84f2WwbBjjE6wFWM0aBv9aY4xyCux/lEHBD/8uvraeRceSuEp2TVY9mVPbNruX3EfauI1 nThLeQ9mjm+g98ZkhUQqJT0SNXjBKlAXjpQMlt/9hgLt10qPTIXq/XlG/hLgE= Received: by sail-ipv4.us-core.com (OpenSMTPD) with ESMTPSA id c6e9a043 (TLSv1.3:TLS_CHACHA20_POLY1305_SHA256:256:NO); Wed, 1 May 2024 17:46:08 +0000 (UTC) To: gfp , Tomas Volf <~@wolfsden.cz> Cc: help-guix@gnu.org Subject: Re: pgp key In-Reply-To: <78a66e8d-1c91-946a-054d-7c64d9c0c230@posteo.at> References: <87zftazc6v.fsf@lease-up.com> <78a66e8d-1c91-946a-054d-7c64d9c0c230@posteo.at> Date: Wed, 01 May 2024 10:46:08 -0700 Message-ID: <87ttjhzaqn.fsf@lease-up.com> MIME-Version: 1.0 Content-Type: text/plain Received-SPF: pass client-ip=208.82.101.137; envelope-from=felix.lechner@lease-up.com; helo=sail-ipv4.us-core.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Felix Lechner From: Felix Lechner via Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: help-guix-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Migadu-Queue-Id: 67FBB64AA3 X-Migadu-Scanner: mx12.migadu.com X-Migadu-Spam-Score: -3.95 X-Spam-Score: -3.95 X-TUID: Fs2a1SBnGmFO Hi Gottfried, On Wed, May 01 2024, gfp@posteo.at wrote: > I would not like to send it unencrypted, so that somebody may misuse > it during the sending. What type of misuse do you envision? If you want to share the song with the world, you are not looking for encryption. That would help keep your song confidential. Are you looking for signatures? When used properly, they prevent someone from tampering with the content you distribute. There are two way to do that. You can sign a PGP/MIME email with PGP. That happens regularly on Guix mailing lists, although probably more often on guix-devel. Here is how to do it in Emacs's Message Mode. [1] Most modern mail clients will automatically check the signature and light up when the message was modified in transit. You could also publish "detached signatures." Those are basically hashes of your songs (with algorithms like SHA-512) that you sign with your private key. GnuPG is a tool that allows you to do that [2] although it would be good to remind recipients that they should verify your signatures manually. Kind regards Felix [1] https://www.gnu.org/software/emacs/manual/html_node/message/Signing-and-encryption.html [2] https://www.gnupg.org/gph/en/manual/x135.html