Collaborate Disseminate
I guess I have halfway grasped the concepts of PGP, and I’ve halfway understood the concept of the Efail attack. However, I still don’t understand whether such attacks would be possible (and an MDC would be needed) even if all messages had… Continue reading Is there a use for an MDC even when all messages are signed?
I’m setting up a website on a Centos7 VPS with certbot and let’s encrypt.
I am no expert on network security. I checked to see if my epel-release was pulling certbot from a legit mirror.
I ran yum search epel-release three times back-to-b… Continue reading Certbot installation from cloudfront.net epel-release mirror
I had recently downloaded a file from the internet. I got the above warning while executing gpg verify. Is there anything I can do to get the right file to download? Should I notify the website owner/mamager? Or try downloading the file la… Continue reading What should I do next? WARNING: This key is not certified with a trusted signature. There is no indication that the signature belongs to the owner
My PGP primary key is only used for certification—I use a separate subkey for signing. Like this:
sec rsa4096/0x891781D0EDC66456 … Continue reading Move signing subkey to authentication slot on YubiKey (OpenPGP card)?
Why isn’t there a defined protocol to retrieve PGP keys from a destination mail server? Or am I just not searching with the right parameters?
I imagine a quite simple process like other established processes (AutoDiscovery, etc.):
Sender … Continue reading Why isn’t there a protocol to exchange PGP keys?
I want to buy a smart card to store a gpg private key (I have never used any before).
However all options seem quite expensive. If you look for ISO 7816 in AliExpress there are much more affordable options. Same thing for Java cards.
Can I… Continue reading Using smart card for gnupg
When running PINENTRY_USER_DATA="foo" gpg –change-pin in bash, how easy is it for other processes to capture “foo”?
Continue reading How exposed is user data when running PINENTRY_USER_DATA="foo" gpg –change-pin?
Using –passphrase-fd 3, –pinentry-mode loopback and 3<<<"foo bar" works to enter passphrase, but how can one change passphase (which requires two inputs)?
Continue reading How to change gpg passphrase using script? [migrated]
I don’t seem to find the option to save symmetric keys. What I want to do is that I simply want to encrypt a file and transfer the file and the symmetric key (which is encrypted with the recipients public key). But so far I have not found … Continue reading Where are the symmetric keys stored?
I noticed that 7zip provides an option to encrypt the contents of a folder using AES256 (Screenshot Below) and so does GPG using this command:
gpgtar –output <Name_Of_The_Output_File> -v –encrypt –symmetric –gpg-args "–ciph… Continue reading AES256 – 7zip Vs GPG