Collaborate Disseminate
I’m doing some research on .onion websites and was trying to verify an onion URL.
I got a public key from two different sources: side by side they are identical until about ten lines before the end. Which suggests to me that they’re differ… Continue reading These two pgp public keys are the same but different?
I am trying to understand in detail how does one "express" trust in someone else’s public key in PGP.
As far as I know, in PGP you associate uids (for simplicity, say that these are emails) to public keys, and this trust assignme… Continue reading How does trust work in PGP?
I am in the process of learning PGP (GnuPG more precisely).
I am trying to figure out which is the best strategy for my encryption ([E]) subkey in terms of expiration/revocation/renewal. Could you please tell me if the following affirmatio… Continue reading PGP expired encryption subkey : renew or replace?
How do I indicate that a specific document or transaction associated with a particular signature should no longer be considered valid?
I’m talking of recalling a signed document, not revoking the private key, because with the private key I… Continue reading Revoking a digital signature at the cryptographic level
I am planning on making a basic groupchat application only for me and my colleagues. It needs to be as secure and anonymous as possible without leaving any fingerprints. Already existing applications cannot be trusted.
This is how I would … Continue reading Implementing a anonymous encrypted peer-to-peer chat [closed]
I’ve been able to locate http://www.aaronsw.com/2002/draft-swartz-pgp-urn-00, but it appears to be an unofficial proposal never submitted to the IETF. Does it hold any water?
Continue reading Does an official IETF-codified URN exist for PGP keys?
Sometime back I installed GPG and been using it to encrypt files and text.
Command used to encrypt:
gpg -c file.zip > file.zip.gpg
Command used to decrypt:
gpg -d file.zip.gpg > file.zip
Till now, I didn’t pay attention to which ke… Continue reading GPG: Which key is gpg exactly using for encrypting and decrypting? [migrated]
I came across a PGP public key that seems invalid. The key is a secp256k1 public key that supported by GPG. In fact, GPG allows importing that key even if it has an invalid secp256k1 public key inside.
Running –list-packets on the key sho… Continue reading GPG allows importing an invalid secp256k1 public key
Eleptial Curve is now included in PGP. However when I run gpg2 –full-gen-key, I get
Please select what kind of key you want:
(1) RSA and RSA (default)
(2) DSA and Elgamal
(3) DSA (sign only)
(4) RSA (sign only)
(14) Existing… Continue reading Why is ECC (Eliptical Curve) an `–expert` feature in PGP?
If we are self hosting our own email server with mydomain.com with a self sign CA for S/MIME. What are some possible ways that our email content can get leaked?
Then if we use PGP email, does it make any difference? Since we agree that wit… Continue reading With selfhosting email server, selfsigned certificate, does it make a difference with PGP mail, What can be leaked?