[Enigmail] PGP, Encryption and general help - Barry H

[Faramir]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Charly Avital escribió:
> John Clizbe wrote the following on 6/26/08 8:21 PM:
>> Charly Avital wrote:
>>> I believe it is not possible to encrypt to a revoked key (revoked
>>> encryption subkey).
>> It /actually/ is possible. One has to remove the revocation first.
>> Details are left as a exercise for the reader.
>>
> 
> Exercise for the reader:
> 
>>From GnuPG's Guide <http://www.gnupg.org/gph/en/manual.html#REVOCATION>
> 
> "If you forget your passphrase or if your private key is compromised or
> lost, this revocation certificate may be published to notify others that
> the public key should no longer be used. *A revoked public key can still
> be used to verify signatures made by you in the past*, *but it cannot be
> used to encrypt future messages to you*. It also *does not affect your
> ability to decrypt messages sent to you in the past if you still do have
> access to the private key*."

  Yes... but remember there are some commands to force gpg to do things
you usually should not do... I don't *know* if there is a command to
force it to encrypt to a revoked key, but I *bet* there is such command...

  However, I get what Charly means... gpg won't do that using the normal
settings... it won't happen by mistake... at least, not unless you have
really messed the config file (I am talking about "happening by
mistake", in such context, it would be a messed config file... if it is
done on purpose, that is "hacking and testing" :) ).

Regards
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEcBAEBCAAGBQJIZGBaAAoJEMV4f6PvczxAP30IAJ/GEcRddTbnfnnlDW1Mik37
OlAulMvgcEii/93eiHND7MX2cppe6/oEf7hytjaxXzZiOMqvKFUPVsmFLeqEzLm7
x+LIdw4f99kS/MG95VbIXIY8OOgcDEVZ+Oe5yogLdzOgplXH+l5NEUxrUUpKfOXS
pZiVM2/8ZrHpDH/FomUhRhaDLv0PSBlUaNOnFlg/R4Ib0X27x4j/nRBa64biVec5
bvQKD28EyalU2JoViFQn9WPhM0T9LLqip4ZzaSmbev6GGq36sppar5oaMZpngjZP
cyiHbQ5G04457fAlNfCa6qzWfypMXzYnvtYmBPoRb5guMtsfXqNtf7SYwwTtxpc=
=NLpz
-----END PGP SIGNATURE-----