#gpg4win

I guess... if it's not enough, you can still just save it. Maybe it'll increase in price over time.

★ hey, don't worry about it. i'm also sorry i didn't respond earlier as well. the reason it took me so long is because for days, i've been trying to get my wallet set up. i can't get past creating a working key pair and that's not even within monero itself... it's a big mess. i even tried uninstalling and reinstalling gpg4win/kleopatra but something is really fucked up. trying to import the signing key has completely bottlenecked me for a reason i'm not savvy enough to understand

Thunderbird adiciona suporte de criptografia de e-mail OpenPGP

O Thunderbird vai adicionar suporte interno ao padrão de criptografia de e-mail OpenPGP. A Mozilla anunciou planos esta semana para adicionar suporte nativo ao padrão de criptografia de e-mail OpenPGP dentro do Thunderbird, o cliente de e-mail de código aberto da organização. O apoio deve chegar no verão de 2020, disse a Mozilla em uma página wiki criada na segunda-feira. Thunderbird adiciona…

E-Mail- und Dateiverschlüsselung mit PGP

BEVOR ihr wegen der Länge der Scrolleiste durchdreht und wegklickt, möchte ich drauf hinweisen, dass dieser Artikel Windows UND Linux enthält, und daher etwas länger aussieht als er eigentlich ist. Nun denn: Ich werde euch nun ein nettes Workaround vorstellen, wir ihr ohne großartigen Aufwand eure E-Mails und Anhänge mit dem PGP (PrettyGoodPrivacy) Standart verschlüsseln könnt. Zunächst mal etwas…

I use Mailvelope: OpenPGP encryption for webmail….

Available for:

Chrome

My wife’s business requires her to deal with clients who prefer to use email encryption for sending important documents. This means she needs to be able to decrypt and then re-encrypt the documents to send them back.

Instead of paying for the Symantec product we decided to go with the free GPG4Win package instead. It is easy to install but, it isn’t quite so straightforward as to how to use it.…

Gpg4win is the free and open-source GNU Privacy Guard for Windows; the official GnuPG distribution for Windows. The entirety of the Gpg4win website is unprotected HTTP, and the same goes for downloads of Gpg4win binaries. Manually going to the HTTPS version of the site shows an untrusted certificate error.

The site has an entire page devoted to checking Gpg4win for integrity, which provides SHA1 checksums, OpenPGP signatures, file lengths, and a code signing certificate.

Since that page is sent over HTTP, you can throw the validity of SHA1 checksums and file lengths out the window — anyone intercepting the page on a network could alter that content to make it seem like the checksum is correct, even though the code has been modified.

OpenPGP signatures sound great, but the site says it's signed by the “Intevation File Distribution Key” — a user might wonder what Intevation is, and are they authorized to sign releases for Gpg4win?

Of course, a little research would confirm, and their public key has many signatures – but even though all users should verify this information, how many actually would? Think about all the journalists starting to use GPG without really knowing how it works. If the site was SSL, they could trust the name on that key a little more

And, how exactly is a user going to go about checking PGP signatures prior to downloading Gpg4win? Are they going to check it with the potentially compromised file they just downloaded?

I could spout off a dozen scenarios where having SSL might be a last resort — code signing private key compromise, server compromise, etc. — but even if all else goes wrong, SSL adds an extra layer of protection by ensuring authenticity and by ensuring that traffic isn't manipulated. That's defense in depth.

These issues might seem obscure and over-the-top, but encryption software is trusted to protect mighty secrets.

Gpg4win is an awesome product with an awesome team. They're rightfully concerned enough to provide multiple methods of integrity checks, but they should force HTTPS on their entire site.

(Submitted by Jeff)

Warum verschlüsseln nicht einfach ist?

Die Antwort: Google ist schuld!

Grundsätzlich kann ich Jürgen Schmidt nicht widersprechen. Sein Artikel trifft einen Aspekt vom Kern des Pudels.

In meinen Augen wird mit diesem Kommentar auf heise.de aber zu kurz gegriffen. Denn wie auch beim Konsum (Fastfood, Fast Fashion etc.) kann letzten Endes der User selbst entscheiden, bei welchem Provider er ein Mailkonto unterhält und ob er…