How to verify PGP signature with signing key using Enigmail in Thunderbird [migrated]

I received an email like this above:
—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1

Because anyone can claim to be me. There’s no validation of the user
name or email address when someone posts a comment. While I do try to
remove imposters… Continue reading How to verify PGP signature with signing key using Enigmail in Thunderbird [migrated]

What usually happens to the symmetric (session) key after decrypting an email? Can the key be recovered if changing private keys?

I’ve been preparing for a CISSP exam and was reading about applied cryptography in regard to email.
It’s my understanding that the popular schemes (PGP,S/Mime) use a combination of asymmetric and symmetric cryptography. If I’m reading thin… Continue reading What usually happens to the symmetric (session) key after decrypting an email? Can the key be recovered if changing private keys?

What is the standard way, if any, to announce via e-mail that you have a public PGP key and what it is?

I’m making an e-mail system/client. I’m trying to correctly detect incoming e-mails which can be replied to with PGP encryption. This means finding out their public PGP key. I currently do:

Parse the e-mail body for a PGP public key block… Continue reading What is the standard way, if any, to announce via e-mail that you have a public PGP key and what it is?