Spam from keyservers and email choice in GPGMail (web)
A big problem for me is that I do not want my email address published everywhere on the web. This has happened before, forcing me to change email addresses. And it originated from me sharing my key with a keyserver. So I believe that GPGtools should work without me having to risk it sharing my email with a keyserver, for example after an upgrade or otherwise. Thus far I have not dared enter my email in GPG Keychain Access for fear of it inadvertently or otherwise sharing the key. But I find that I am unable to use GPGMail without having specified an email address. I believe you should remove this limitation and let me choose key for signing and encryption irrespective of wheter it is tied to a specified email address.
Comments are currently closed for this discussion. You can start a new one.
Keyboard shortcuts
Generic
| ? | Show this help |
|---|---|
| ESC | Blurs the current field |
Comment Form
| r | Focus the comment reply box |
|---|---|
| ^ + ↩ | Submit the comment |
You can use Command ⌘ instead of Control ^ on Mac
Support Staff 1 Posted by Luke Le on 06 Oct, 2012 02:57 PM
Will most likely be possible at a later point.
2 Posted by MacPomoc.pl on 07 Oct, 2012 01:26 PM
Hi, but doesn't the fact you got too much spam point at the fact you have NO or very POOR spam protection?? Having things TEXT searchable is in general a VERY good thing. Breaking that should be done VERY carefully.
Support Staff 3 Posted by Steve on 07 Oct, 2012 01:57 PM
Dear anon,
a few remarks about your comment.
1) You don't have to upload your key to the key servers if you don't want to. You'll still be able to encrypt and decrypt mails with your key then. But your friends won't be able to find your pub key on the key servers.
2) If you don't trust GPG Keychain Access, because you think we might sell your mail adress: We do not have access to any of your data. All GPG Keychain Access info is located in your keyring. It is located on your machine.
3) If you don't trust GPG Keychain Access, which is signed by GPGTools and we developed it, then don't use it. You are free to use any alternative you prefer.
4) GPGMail and GPG Keychain Access are meant to be working together. I don't see the point of not having GPG Keychain Access to manage your keys.
Hope you find a solution that fits your needs.
All the best :)
steve
Luke Le closed this discussion on 09 Oct, 2012 09:57 PM.