4 ms·

I don't know... I thought encrypted emails were cool in like 2002, so I probably have a key on a keyserver. I probably lost the ability to revoke that key, and

I don't know... I thought encrypted emails were cool in like 2002, so I probably have a key on a keyserver. I probably lost the ability to revoke that key, and simply stopped caring after not receiving a single encrypted email in 25 years. So I would be very surprised if someone sent me an encrypted email today. (I actually do know where my key material is. It's on a smartcard that nothing that exists today can read. Back in the day laptops had smartcard ports! Crazy.)

napoleongl 3y ago
The one feature of an HP Elitebook that could perhaps be called ”Elite” is that they come with smart card readers built in. USB-readers also exist.
- vladvasiliu 3y ago
  Not all of them. Some models don't support them at all, others only have it as an option. My EB845G8 has the slot, but there's no reader inside.
stingraycharles 3y ago
I also don't have access to that private key anymore anyway, but I'm still using the same email address.
- layer8 3y ago
  What is indeed missing is a limited validity period of the key, as a certificate would provide. Then everybody would be clear on how long the key can be used.
  - c0l0 3y ago
    OpenPGP Keys do have expiration dates/validity periods: https://datatracker.ietf.org/doc/html/rfc4880#section-5.2.3.6 https://datatracker.ietf.org/doc/html/rfc4880#section-5.2.3....
yau8edq12i 3y ago
The good thing about GDPR is that these keyservers must delete your info after some time unless you periodically renew your consent.
- TylerE 3y ago
  Good thing every company and web server on the planet is in the EU! How else would 10 people make lazy GDPR posts on everything vaguely related?
  - 0x073 3y ago
    Even if the web servers are not in EU they must use GDPR if they target EU users.
    - rrr_oh_man 3y ago
      Good look enforcing GDPR in Panama…
    - jazzyjackson 3y ago
      if a tree falls in the woods without any geo-ip blocking, does it have to comply with GDPR?
- hyperman1 3y ago
  Where in the GDPR do you find this 'some time'? AFAIK, and I might be wrong here, you do have the right to be forgotten - art 17. But there is no need to periodically renew consent. As long as the period for consent is understood and is relatable for the reason of the consent, it can be basically for ever. In this case, that period seems to be 'until he withdraws his consent' and that seems fine by my reading of the GDPR. https://gdpr-info.eu/art-17-gdpr/ https://gdpr-info.eu/art-17-gdpr/
  - yau8edq12i 3y ago
    https://commission.europa.eu/law/law-topic/data-protection/reform/rules-business-and-organisations/principles-gdpr/how-long-can-data-be-kept-and-it-necessary-update-it_en https://commission.europa.eu/law/law-topic/data-protection/r... > Your company/organisation should establish time limits to erase or review the data stored. https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN#d1e40-1-1 https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CEL... > In order to ensure that the personal data are not kept longer than necessary, time limits should be established by the controller for erasure or for a periodic review. Have you not gotten, over the past few years, emails from services you no longer use and probably forgot that you ever setup an account for, informing you that they will delete your account if you don't use it soon? It's because of the GDPR.
olabyne 3y ago
Hey, smartcards are still a thing ! My company still uses them. I have a 2022 Lenovo laptop whith a smartcard port.
- graywh 3y ago
  the government still uses them
lxgr 3y ago
USB smartcard readers supporting the CCID protocol are cheaply available these days and are natively supported on all major OSes! I do miss built-in smartcard readers though; carrying a USB reader is just not the same and I usually don't have mine with me when I need it. That said, I also wish browsers would support the ISO 7816 transport of CTAP2 for WebAuthN using these readers. That would allow me to use a card form factor WebAuthN authenticator not only on my phone (both iOS and Android support CTAP2 over contactless), but also on my computer.

napoleongl 3y ago

The one feature of an HP Elitebook that could perhaps be called ”Elite” is that they come with smart card readers built in. USB-readers also exist.

vladvasiliu 3y ago
Not all of them. Some models don't support them at all, others only have it as an option. My EB845G8 has the slot, but there's no reader inside.

stingraycharles 3y ago

I also don't have access to that private key anymore anyway, but I'm still using the same email address.

layer8 3y ago
What is indeed missing is a limited validity period of the key, as a certificate would provide. Then everybody would be clear on how long the key can be used.
- c0l0 3y ago
  OpenPGP Keys do have expiration dates/validity periods: https://datatracker.ietf.org/doc/html/rfc4880#section-5.2.3.6 https://datatracker.ietf.org/doc/html/rfc4880#section-5.2.3....

yau8edq12i 3y ago

The good thing about GDPR is that these keyservers must delete your info after some time unless you periodically renew your consent.

TylerE 3y ago
Good thing every company and web server on the planet is in the EU! How else would 10 people make lazy GDPR posts on everything vaguely related?
- 0x073 3y ago
  Even if the web servers are not in EU they must use GDPR if they target EU users.
  - rrr_oh_man 3y ago
    Good look enforcing GDPR in Panama…
  - jazzyjackson 3y ago
    if a tree falls in the woods without any geo-ip blocking, does it have to comply with GDPR?
hyperman1 3y ago
Where in the GDPR do you find this 'some time'? AFAIK, and I might be wrong here, you do have the right to be forgotten - art 17. But there is no need to periodically renew consent. As long as the period for consent is understood and is relatable for the reason of the consent, it can be basically for ever. In this case, that period seems to be 'until he withdraws his consent' and that seems fine by my reading of the GDPR. https://gdpr-info.eu/art-17-gdpr/ https://gdpr-info.eu/art-17-gdpr/
- yau8edq12i 3y ago
  https://commission.europa.eu/law/law-topic/data-protection/reform/rules-business-and-organisations/principles-gdpr/how-long-can-data-be-kept-and-it-necessary-update-it_en https://commission.europa.eu/law/law-topic/data-protection/r... > Your company/organisation should establish time limits to erase or review the data stored. https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN#d1e40-1-1 https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CEL... > In order to ensure that the personal data are not kept longer than necessary, time limits should be established by the controller for erasure or for a periodic review. Have you not gotten, over the past few years, emails from services you no longer use and probably forgot that you ever setup an account for, informing you that they will delete your account if you don't use it soon? It's because of the GDPR.

olabyne 3y ago

Hey, smartcards are still a thing ! My company still uses them. I have a 2022 Lenovo laptop whith a smartcard port.

graywh 3y ago
the government still uses them

lxgr 3y ago

USB smartcard readers supporting the CCID protocol are cheaply available these days and are natively supported on all major OSes! I do miss built-in smartcard readers though; carrying a USB reader is just not the same and I usually don't have mine with me when I need it. That said, I also wish browsers would support the ISO 7816 transport of CTAP2 for WebAuthN using these readers. That would allow me to use a card form factor WebAuthN authenticator not only on my phone (both iOS and Android support CTAP2 over contactless), but also on my computer.