Collaborate Disseminate
I want to use a GPG key instead of an SSH key. Looking online I found several guides on how to do it. But these guides are about using GPG for convenience. I instead want to know the pros and cons from the security perspective.
Firstly loo… Continue reading What are the security implications of using GPG instead of SSH keys for authentication
I can regularly observe TLS 1.3 secured website duplications. The attacker indicates its presence by slight modifications on the web page. In particular I obseved this on the two following web pages:
https://en.wikipedia.org/wiki/Henry_Kis… Continue reading Can you guys help me on my decentralized and non-pyramidal DNS PKI secured with Wireguard and gnupg open source project?
I use GPG on awsLinux, currently version 2.0.22. Before exchanging a file with someone we exchange public keys, so signatures can be confirmed for the files transmitted. Their public key is imported into my keychain for this purposes.
When… Continue reading Get GPG signature without decryption
NOTE_0: Your edits are changing meaning of my question. Just add period at the end of this sentence for that ‘edited by schroeder’ ego boost Please
NOTE_1: I am not asking about Signing
NOTE_2: I did search for this, there are no answers t… Continue reading GPG encrypting with private key [closed]
I have a gpg key linked to my identity and real email address. I also use github with their private email functionality "id+username@users.noreply.github.com", which I set as my git email. The purpose is to avoid bots doing data … Continue reading Do git commit signatures reveal key uid if different from git email?
TL;DR: running npm i … not long after pass my-password allows a malicious package to steal my entire password store.
I use pass as a password manager, on Linux. And like probably all Linux users, I use sudo to run commands as root.
The … Continue reading How to securely use `pass`, `sudo`, and `npm` on the same machine
Hello I had used this pgp public key on my win10 OS with pgptool to message someone.
Then when i used that same public key in whonix OS console it came back with some type of warning about malicious item that could go into root?
SO i didnt… Continue reading PGP public key flagged as malicious to root. Was ran before
Using GPG, I have created a key pair. I clicked on "Protect the generated key with a passphrase". I have created a .asc file to backup this key pair. Is it safe to publish this .asc file in an unsecure shared file storage, as lon… Continue reading Is it secure to post a password-secured .asc file in public?
Problem
For some reason I forgot the passphrase for my GnuPG signing subkey, but I have my master key stored in a separate device. Is there a way to regain access to my subkey? Or should I replace my old subkey with a new one hoping the ol… Continue reading Reset forgotten subkey password using master key?
https://dev.gnupg.org/T6097
I am trying to get GnuPG to work with my SmartCard-HSM 4K on Windows, using the GP4Win bundle.
Kleopatra doesn’t recognise the SC-HSM 4K at all, even though, it does recognise the YubiKey 5 NFC in both PIV and O… Continue reading GnuPG: gpa.exe hangs when I click on "smartcards" AND scdaemon cannot recognise SC-HSM 4K