Collaborate Disseminate
I’m wondering about the correct steps when you want to download Firefox from their server and validate it has not been tampered with.
Assume you download the latest Firefox tar-bz2-package from https://download.mozilla.org with wget. Is th… Continue reading How to verify the downloaded Mozilla Firefox binary? [duplicate]
The GnuPG Manual states that:
This [sshcontrol] file is deprecated in favor of the "Use-for-ssh"
attribute in the key files.
What is now the correct way to configure gpg / gpg-agent to use your key for SSH?
Specifically:
What types of certificates are there?
I was checking online and I found several different types, some at the level of the format of the certificate (x509, PEM, DER), and one at the application level (TLS/SSL, SSH, PGP).
Can someone please … Continue reading Types of certificate? [duplicate]
I need to add my GPG key to some lines in
~/.gnupg/gpg.conf
such as
default-key XXX
default-recipient XXX
Does it accept shell environment variables? Can I use
default-key $GPGKEY
default-recipient $GPGKEY
where $GPGKEY is defined in my … Continue reading Does ~/.gnupg/gpg.conf accept shell environment variables?
I have a process that needs secret keys to be passed as environment variables. That is for historical reasons.
I have a AWS machine where this process runs but I do not want to store these keys in files or scripts on the cloud.
What is the… Continue reading Launch a process with secrets as environment variables
AFAIK, the few ways private information from gpg can get leaked to other users on a shared Linux machine is:
someone with root access can access gpg’s files
someone with root access can access gpg’s process memory
gpg process’s pages co… Continue reading gpg security on a shared Linux machine
Specifying multiple keyservers doesn’t seem to work correctly, and gpg always uses just the first key server. I have the following two lines in my dirmngr.conf:
keyserver hkps://keys.openpgp.org
keyserver https://keyserver.ubuntu.com
gpg … Continue reading GnuPG (gpg) specify multiple keyservers
I had a key that I accidentally deleted from the keyring a while ago and I’d like to dissociate my name from it. I still have the key as well as the revocation certificate. I made another keypair since then with an entirely different passp… Continue reading GPG deleted key/disassociation
I have an encrypted data containig some of my data that I am unable to decrypt. It is archived with tar, compressed with gzip and encrypted with gnupg. Today I tried to decrypt it with gpg and it failed, even though I have the the password… Continue reading GPG can’t decrypt my data because of an invalid packet
I know this might sound counter-intuitive, but is it possible to configure gpg to store public keys in encrypted state on disks? Such that when encrypting a message to someone, user would be asked to first enter a passphrase to decrypt rec… Continue reading Does gpg support storing public keys in encrypted state?