Collaborate Disseminate
Using Enigmail for Thunderbird, the setup wizard automatically sets itself to PGP/MIME and also disables HTML formatting. I am looking for security and have no idea which to use, though I do know HTML will not work with PGP Inline but will… Continue reading Is using PGP/MIME or PGP Inline more secure?
I began using GPG4Win/Kleopatra, the GNU Privacy Guard implementation for Windows. More recently I wanted to verify a download of Qubes OS, for which a guide is offered here. They describe a master public key (RSA 4096-bit) u… Continue reading Verify a key was signed by another key
I have created a new OpenPGP key pair. So I wish to revoke the former, I have used.
Here’s what I managed to do so far.
This way I found that my email’s ID is 3C76732B:
gpg –search [email address removed for crawlers not… Continue reading Why does the revocation sent to the OpenPGP keyservers not show up?
What is the purpose of the –sig-notation and –cert-notation options in GnuPG? What are the intended use cases?
In the first part the a @ character is used, so I guess the options are for providing certain e-mail addresses. But which ema… Continue reading What is the purpose and meaning of the –sig-notation and –cert-notation options in GnuPG?
Over the past few years, Google has increasingly improved the online security and protections of its Gmail users.
Besides two-factor authentication and HTTPS, Google has added new tools and features to Gmail that ensures users security and privacy, … Continue reading 5 Things Google has Done for Gmail Privacy and Security
I am thinking about starting again with a new master key. My current master key was not compromised, but I had stored it on my private server temporarily, which is against good practices (but I am the only one who can access this server an… Continue reading What is the recommended procedure to migrate to a new OpenPGP master key?
I fairly understand the math behind RSA, Elgamal, AES, SHA but not how things are used in practise. How are subkeys different from master key? I understand its purpose from various websites but How is it internally implemented? How is it b… Continue reading What exactly is a subkey?
I am learning how to use OpenPGP keys in GnuPG, and I am wondering what is the threshold people generally use to maintain separate OpenPGP keys. Maintaining an incredibly large number of keys is not good since it makes it dif… Continue reading How many OpenPGP keys should I make?
I am learning how to use OpenPGP keys in GnuPG, and I am wondering what is the threshold people generally use to maintain separate OpenPGP keys. Maintaining an incredibly large number of keys is not good since it makes it dif… Continue reading How many OpenPGP keys should I make?
I’ve created a new OpenPGP key to sign a software package in a source repository with an expiration date three years from now. It seemed like a good security measure, because if the key is compromised or stolen the damage will be limited.
… Continue reading Does OpenPGP key expiration add to security?