Collaborate Disseminate
I used my actual protonmail email address at the start of creating my own key. Can this email address be traced to me?
So when I sign something with my key and it’s decrypted, can anyone see the email address attached to it that I used to … Continue reading Can an email address attached to key be traced back to me? [closed]
The primary secret key should be stored offline and only be used for creating/signing keys.
There will be at least two secret keys: one primary key or subkey for signing, and one subkey for encryption; there might be a third key for author… Continue reading Which PGP fingerprint to share/publish as my digital identity?
I have an external drive fully encrypted with Symantec encryption desktop software using a pgp key.
It has been done 15 years ago.
Today I try to access the disk, but it’s not working. It doesn’t recognized the passphrase. I’m 100% sure of… Continue reading PGP disk passphrase not recognized [migrated]
As far as I understand, the only purpose of PGP signatures is to prove your identity. Assuming your email account is secure and has 2FA, haven’t you already proven your identity by sending an email from that address?
Continue reading What is the purpose of PGP email signatures?
I am unable to identify certain public keys on my keyring because the key owner generated their public key using a UID that contained no identifiable information. For instance they’re completely lacking of an identifying email address tha… Continue reading Using GPG is there a way to label public keys on my OpenPGP keyring?
I am writing a front-end to display details about the PGP keys that we have stored in a database. One question I have is how to know which user id is the "primary" user id. For example, a particular key has two user ids: aaa@test… Continue reading How to extract the primary user id from a PGP key
I want to use a GPG key instead of an SSH key. Looking online I found several guides on how to do it. But these guides are about using GPG for convenience. I instead want to know the pros and cons from the security perspective.
Firstly loo… Continue reading What are the security implications of using GPG instead of SSH keys for authentication
15 year PGP desktop user with a recent disk crash which has required a system rebuild. Lo and behold, Symantec (the latest PGP owner) has been purchased by Broadcom, and the PGP Desktop licensing server is no longer available (thank you Br… Continue reading Desperately seeking PGP (Symantec Encryption) Desktop Pro
Is there an online tool which allows users to verify that an armoured, detached PGP signature for a file is valid?
The closest thing I found was PGPTool.org, which is quite nice but unfortunately does not cater for detached signatures.
I’m… Continue reading User-Friendly PGP Verification tool [migrated]
The TLS 1.3 is not always correctly implemented on the DNS PKI. We shall replace it with the state-of-the-art Wiregard. There are several aspects to consider in the DNS:
The concentration of risk in a PKI
The generation of websites certif… Continue reading Would it be a good idea to converge towards a non-pyramidal DNS PKI with free certificates using the state-of-the-art Wireguard protocol? [closed]