gchristensen changed the topic of #nixos-security to: Vulnerability Roundup Issues: https://github.com/NixOS/nixpkgs/issues?utf8=%E2%9C%93&q=is%3Aissue+is%3Aopen+Vulnerability+roundup + https://broken.sh
kleisli has quit [Remote host closed the connection]
kleisli has joined #nixos-security
anselmolsm has quit [Quit: Konversation terminated!]
andi- has quit [Ping timeout: 272 seconds]
andi- has joined #nixos-security
ris has quit [Ping timeout: 272 seconds]
ris has joined #nixos-security
ris has quit [Read error: Connection reset by peer]
ris has joined #nixos-security
ris has quit [Ping timeout: 246 seconds]
ris has joined #nixos-security
ris has quit [Remote host closed the connection]
ris has joined #nixos-security
kleisli has quit [Remote host closed the connection]
kleisli has joined #nixos-security
FRidh has joined #nixos-security
ris has quit [Ping timeout: 246 seconds]
ris has joined #nixos-security
_ris has joined #nixos-security
ris has quit [Ping timeout: 256 seconds]
c4rc4s_ has joined #nixos-security
c4rc4s has quit [Ping timeout: 265 seconds]
c4rc4s_ is now known as c4rc4s
_ris has quit [Read error: Connection reset by peer]
ris has joined #nixos-security
ckauhaus has joined #nixos-security
_ris has joined #nixos-security
ris has quit [Ping timeout: 265 seconds]
_ris has quit [Ping timeout: 272 seconds]
_ris has joined #nixos-security
_ris has quit [Ping timeout: 246 seconds]
_ris has joined #nixos-security
ris has joined #nixos-security
_ris has quit [Ping timeout: 265 seconds]
_ris has joined #nixos-security
ris has quit [Ping timeout: 264 seconds]
_ris has quit [Ping timeout: 260 seconds]
_ris has joined #nixos-security
ris has joined #nixos-security
_ris has quit [Ping timeout: 272 seconds]
ris has quit [Ping timeout: 272 seconds]
ris has joined #nixos-security
ris has quit [Ping timeout: 246 seconds]
ris has joined #nixos-security
_ris has joined #nixos-security
ris has quit [Read error: Connection reset by peer]
_ris has quit [Read error: Connection reset by peer]
_ris has joined #nixos-security
_ris has quit [Ping timeout: 246 seconds]
_ris has joined #nixos-security
ckauhaus has quit [Quit: WeeChat 2.7.1]
justanotheruser has quit [Ping timeout: 240 seconds]
_ris has quit [Ping timeout: 272 seconds]
kleisli has quit [Ping timeout: 240 seconds]
_ris has joined #nixos-security
justanotheruser has joined #nixos-security
_ris has quit [Ping timeout: 246 seconds]
FRidh has quit [Remote host closed the connection]
FRidh has joined #nixos-security
_ris has joined #nixos-security
<flokli> IMHO, as annoying gpg is, it's the most common denominator, and we should definitely provide a gpg contact, at least until other tooling is well-distributed on all platforms. I don't think that's currently the case.
kleisli has joined #nixos-security
<gchristensen> *sigh* probably
<flokli> :-)
<gchristensen> (is age not well distributed?)
<hexa-> (lol, nope)
<gchristensen> this is fine
<gchristensen> we can just have people encrypt messages to me using my SSH public key
<gchristensen> that is well distributed
FRidh has quit [Ping timeout: 256 seconds]
<flokli> gchristensen: let's define well-distributed with "there's a plugin for Apple Mail and Thunderbird" :-P
<gchristensen> ehhhhh I don't really care to optimise for that, actually
<flokli> :-P
<gchristensen> those plugins are sort of dangerous even
<flokli> gchristensen: oh, you can also add it to evolution-data-server natively
FRidh has joined #nixos-security
ris has joined #nixos-security
_ris has quit [Ping timeout: 272 seconds]
FRidh has quit [Ping timeout: 258 seconds]
FRidh has joined #nixos-security
ris has quit [Read error: Connection reset by peer]
ris has joined #nixos-security
<qyliss> Thunderbird is going to have it built in soon
<gchristensen> my preferred workflow is to save the file and decrypt
<qyliss> Does that work with PGP/MIME?
<gchristensen> I'm not sure, but it hasn't ever failed to work
<qyliss> Hmm, okay
<gchristensen> if you want to mail me a test email I can try it :)
<qyliss> It's definitely basically impossible to send modern PGP email without a client plugin
<gchristensen> hrm
<qyliss> (or built-in client support, of course)
justanotheruser has quit [Ping timeout: 265 seconds]
justanotheruser has joined #nixos-security
<gchristensen> well, I guess then I should definitely remove my GPG key then, since I don't use a client which supports it -- and another tool for encryption would be better
<Valodim> fwiw, inline pgp does still work
<LnL> do you actually need a client?
<gchristensen> qyliss says yes
<LnL> not that I have all that much experience with it in general, but the plugin for my client just puts the message in an attachment
_ris has joined #nixos-security
ris has quit [Ping timeout: 246 seconds]
<gchristensen> I'm inclined to believe her
<gchristensen> she is serious about good mail stuff
kleisli has quit [Remote host closed the connection]
kleisli has joined #nixos-security
<LnL> I always assumed all that stuff is for convenience
<LnL> at the end of the day an email is still a text file with some headers, so I would expect you could strip out the pgp section and decrypt it separately
<Valodim> pgp/mime is structured encrypted mail
<Valodim> whereas "pgp/inline" is a retronym for "putting pgp ascii armored data in a mail message"
<Valodim> so yes, to send pgp/mime you need client support
<Valodim> but pgp/inline is generally still around and supported by clients
<gchristensen> does the pgp/mime version not appear as an attachment?
<Valodim> it does, for clients that don't support it
<LnL> right for sending, but what about receiving/decrypting
<Valodim> so on the receiving side, you can copy the text for pgp/inline, or open the attachment for pgp/mime
<gchristensen> ah yeah so for receiving, I just download and decrypt
<Valodim> yes
<gchristensen> for sending, I usually copy in an armored blob
<Valodim> yup, that'd be "pgp/inline"
<gchristensen> yeah
<Valodim> pretty annoying to deal with for mail clients that want to support it "structurally" :D but that's kind of a solved problem at this point
<Valodim> (street cred: been working on pgp things for a few years. here's one of the things I did https://twitter.com/Valodim/status/1161940700679811072 :)
<gchristensen> nice
<gchristensen> very cool!
FRidh has quit [Ping timeout: 246 seconds]
FRidh has joined #nixos-security
ris has joined #nixos-security
_ris has quit [Ping timeout: 246 seconds]
FRidh has quit [Client Quit]
<qyliss> Most clients IME don't support inline PGP any more
<qyliss> Mine doesn't.
<qyliss> And so I'd recommend against ever sending inline PGP
<Valodim> qyliss: what client do you use?
<qyliss> Emacs
<qyliss> But I think this was possibly also the case for Neomutt
<Valodim> both of those have an easy time piping mail content through a process so I wouldn't be too worried
tokudan[m] has joined #nixos-security
tilpner has quit [Ping timeout: 246 seconds]
anselmolsm has joined #nixos-security
ris has quit [Ping timeout: 272 seconds]
ris has joined #nixos-security
justanotheruser has quit [Ping timeout: 240 seconds]
justanotheruser has joined #nixos-security
kleisli has quit [Remote host closed the connection]
kleisli has joined #nixos-security
n3t has quit [Ping timeout: 256 seconds]
ris has quit [Remote host closed the connection]
ris has joined #nixos-security
kgz has quit [Ping timeout: 260 seconds]
kgz has joined #nixos-security
anselmolsm has quit [Remote host closed the connection]
anselmolsm has joined #nixos-security