Stories
Slash Boxes
Comments

SoylentNews is people

posted by martyb on Tuesday December 08 2015, @07:29PM   Printer-friendly
from the getting-better-all-the-time dept.

The GnuPG team is pleased to announce the availability of a new release
of GnuPG modern: Version 2.1.10. The main features of this release are
support for TOFU (Trust-On-First-Use) and anonymous key retrieval via
Tor.
...
Noteworthy changes in version 2.1.10
====================================

[More after the break.]

  * gpg: New trust models "tofu" and "tofu+pgp".

  * gpg: New command --tofu-policy. New options --tofu-default-policy
      and --tofu-db-format.

  * gpg: New option --weak-digest to specify hash algorithms which
      should be considered weak.

  * gpg: Allow the use of multiple --default-key options; take the last
      available key.

  * gpg: New option --encrypt-to-default-key.

  * gpg: New option --unwrap to only strip the encryption layer.

  * gpg: New option --only-sign-text-ids to exclude photo IDs from key
      signing.

  * gpg: Check for ambigious or non-matching key specification in the
      config file or given to --encrypt-to.

  * gpg: Show the used card reader with --card-status.

  * gpg: Print export statistics and an EXPORTED status line.

  * gpg: Allow selecting subkeys by keyid in --edit-key.

  * gpg: Allow updating the expiration time of multiple subkeys at
      once.

  * dirmngr: New option --use-tor. For full support this requires
      libassuan version 2.4.2 and a patched version of libadns
      (e.g. adns-1.4-g10-7 as used by the standard Windows installer).

  * dirmngr: New option --nameserver to specify the nameserver used in
      Tor mode.

  * dirmngr: Keyservers may again be specified by IP address.

  * dirmngr: Fixed problems in resolving keyserver pools.

  * dirmngr: Fixed handling of premature termination of TLS streams so
      that large numbers of keys can be refreshed via hkps.

  * gpg: Fixed a regression in --locate-key [since 2.1.9].

  * gpg: Fixed another bug for keyrings with legacy keys.

  * gpgsm: Allow combinations of usage flags in --gen-key.

  * Make tilde expansion work with most options.

  * Many other cleanups and bug fixes.

A detailed description of the changes found in the 2.1 branch can be
found at https://gnupg.org/faq/whats-new-in-2.1.html.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 1, Redundant) by Snotnose on Tuesday December 08 2015, @07:56PM

    by Snotnose (1623) on Tuesday December 08 2015, @07:56PM (#273592)

    Gnu Proctor and Gamble? Can't imagine what else PG would be, heaven forbid the summary tell me. Although "key" indicates it could also be a locksmithing tool.

    --
    When the dust settled America realized it was saved by a porn star.
    Starting Score:    1  point
    Moderation   -1  
       Redundant=1, Total=1
    Extra 'Redundant' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   1  
  • (Score: 0) by Anonymous Coward on Tuesday December 08 2015, @08:04PM

    by Anonymous Coward on Tuesday December 08 2015, @08:04PM (#273599)

    Gnu Release? Like the animal? Were some gnus let free? I can't think on my own, heaven forbid the summary tell me.

  • (Score: 2, Flamebait) by ikanreed on Tuesday December 08 2015, @08:07PM

    by ikanreed (3164) Subscriber Badge on Tuesday December 08 2015, @08:07PM (#273600) Journal

    PG is extracted from PGP, which stands for "Pretty Good Protection" the encryption routine it's based on. They dropped the last P because they liked how it sounded as GPG. Like all open source naming, it's not very good at describing the product, but amuses the developers.

    • (Score: 1, Touché) by Anonymous Coward on Tuesday December 08 2015, @09:01PM

      by Anonymous Coward on Tuesday December 08 2015, @09:01PM (#273620)

      The aspergers is strong in this one.

    • (Score: 2) by fnj on Tuesday December 08 2015, @09:11PM

      by fnj (1654) on Tuesday December 08 2015, @09:11PM (#273624)

      GPG stands for Gnu Privacy Guard, Sparky. But you would know that if you read the first line on gnupg.org.

      • (Score: 1, Offtopic) by Snotnose on Tuesday December 08 2015, @09:39PM

        by Snotnose (1623) on Tuesday December 08 2015, @09:39PM (#273641)

        My point was, why should I have to click on a link to find out what a project does? Is it really that difficult to include a 1-2 line summary in the, err, summary?

        --
        When the dust settled America realized it was saved by a porn star.
        • (Score: 0) by Anonymous Coward on Tuesday December 08 2015, @10:45PM

          by Anonymous Coward on Tuesday December 08 2015, @10:45PM (#273674)

          Protip: They weren't responding to you. There is a post in between your's and their's.

    • (Score: 2) by VLM on Tuesday December 08 2015, @10:50PM

      by VLM (445) on Tuesday December 08 2015, @10:50PM (#273676)

      Like all open source naming, it's not very good at describing the product

      All software names are like that not just FOSS

      Excel, what is that, a sports drink or a condom brand or ... I suppose supporting people who insist on using it as a corporate DBMS system causes people to sweat, and its good birth control product along the line of military birth control glasses, so maybe not so much of a stretch.

      I will give credit that its only the FOSS names that are funny. Only a PHB could think "SAP" would be a funny name.

    • (Score: 3, Informative) by NotSanguine on Wednesday December 09 2015, @12:39AM

      by NotSanguine (285) <{NotSanguine} {at} {SoylentNews.Org}> on Wednesday December 09 2015, @12:39AM (#273729) Homepage Journal

      PG is extracted from PGP, which stands for "Pretty Good Protection" the encryption routine it's based on. They dropped the last P because they liked how it sounded as GPG. Like all open source naming, it's not very good at describing the product, but amuses the developers.

      Actually, GPG is Gnu Privacy Guard [gnupg.org].

      It's definitely a play on PGP, but you got the details wrong. Details. Who needs 'em?

      --
      No, no, you're not thinking; you're just being logical. --Niels Bohr