mirror of
https://github.com/mikaela/mikaela.github.io/
synced 2025-02-23 17:00:40 +01:00
PGP/: fix everything
This commit is contained in:
Mikaela Suomalainen
parent
f949247f38
commit
9c05aeaa96
84
PGP/OTR.html
84
PGP/OTR.html
@ -1,52 +1,38 @@
|
|||||||
<!DOCTYPE html><html>
|
<!DOCTYPE html>
|
||||||
<head><meta name="description" content="My OTR keys" /> <meta name="keywords" content="PGP,OTR,Pidgin,Jabber,XMPP,encryption,IM" /> <meta name="author" content="Mika Suomalainen" /> <meta charset="UTF-8" /> <link rel="canonical" href="http://mkaysi.github.com/PGP/OTR.html"> <title>My OTR keys</title> <link rel="stylesheet" type="text/css" href="../tyyli.css" /></head>
|
<html>
|
||||||
<h1 id="otr"
|
<head>
|
||||||
>OTR</h1
|
<meta name="description" content="My OTR keys" /> <meta name="keywords" content="PGP,OTR,Pidgin,Jabber,XMPP,encryption,IM" /> <meta name="author" content="Mika Suomalainen" /> <meta charset="UTF-8" /> <link rel="canonical" href="http://mkaysi.github.com/PGP/OTR.html">
|
||||||
><p
|
<title>
|
||||||
>This page lists my OTR key finger prints. I have different keys for all devices, because the keys aren't as easy to sync than with GPG.</p
|
My OTR keys
|
||||||
><p
|
</title>
|
||||||
>To check PGP/GPG signature of this page, download the <a href="OTR.html.md"
|
<link rel="stylesheet" type="text/css" href="../tyyli.css" />
|
||||||
>markdown source</a
|
</head>
|
||||||
> and <a href="OTR.html.md.asc"
|
|
||||||
>signature</a
|
<h1 id="otr">OTR</h1>
|
||||||
> files...</p
|
<p>This page lists my OTR key finger prints. I have different keys for all devices, because the keys aren't as easy to sync than with GPG.</p>
|
||||||
><p
|
<p>To check PGP/GPG signature of this page, download the <a href="OTR.html.md">markdown source</a> and <a href="OTR.html.md.asc">signature</a> files...</p>
|
||||||
><code
|
<pre><code>curl -OL http://mkaysi.github.com/PGP/OTR.html.md
|
||||||
>curl -OL http://mkaysi.github.com/PGP/OTR.html.md curl -OL http://mkaysi.github.com/PGP/OTR.html.md.asc</code
|
curl -OL http://mkaysi.github.com/PGP/OTR.html.md.asc</code></pre>
|
||||||
></p
|
<p>...and then run...</p>
|
||||||
><p
|
<blockquote>
|
||||||
>...and then run...</p
|
<p>gpg --verify OTR.html.md.asc</p>
|
||||||
><blockquote
|
</blockquote>
|
||||||
><p
|
<p>... You should get something like "UNTRUSTED: Good signature from Mika Suomalainen".</p>
|
||||||
>gpg --verify OTR.html.md.asc</p
|
<h1 id="devgan">Devgan</h1>
|
||||||
></blockquote
|
<p>Devgan is a laptop.</p>
|
||||||
><p
|
<h2 id="pidgin">Pidgin</h2>
|
||||||
>... You should get something like "UNTRUSTED: Good signature from Mika Suomalainen".</p
|
<h3 id="debian">Debian</h3>
|
||||||
><h1 id="devgan"
|
<p>@chat.facebook.com || Fingerprint: 4DC7B798 3E3CB54E 62065108 8923A362 BD2B54C4 @gmail.com || Fingerprint: 3A833385 5A65443A 73A7C213 7A244290 2C24F709 @outlook.com || Fingerprint: 3F4BAAF4 BAA10452 28712AB0 12EC1282 D59C8257 @edu.ekami.fi || Fingerprint: B0DC80EC 7B9D4B70 80012C03 1AE2B1B0 E9F52DF6 @jabber.org || Fingerprint: D076B854 5A919CB1 DC32FFAA D0F956EC 086C7BDD @dukgo.com || Fingerprint: B3AE41C3 75946988 86936D92 A7929D23 A52CE715</p>
|
||||||
>Devgan</h1
|
<h3 id="ubuntu">Ubuntu</h3>
|
||||||
><p
|
<p>Facebook || Fingerprint: B01D4904 8A3BD352 2729758A E42D51D5 BFF44871 GMail || Fingerprint: 8283844D 6F0CB2B5 AB23E239 AF583045 40A06B47 Jabber || Fingerprint: D01ABB87 A9B77C61 BB63EE7E 9AD9E9A6 313B8978 DukGo || Fingerprint: A62333B8 EF1D6615 9432FF5E 86BDAADE 722BCDA0</p>
|
||||||
>Devgan is a laptop.</p
|
<h1 id="ciblia">Ciblia</h1>
|
||||||
><h2 id="pidgin"
|
<p>Ciblia is my phone.</p>
|
||||||
>Pidgin</h2
|
<h2 id="gibberbot">GibberBot</h2>
|
||||||
><h3 id="debian"
|
<p>Gibberbot keys changed after installing Cyanogenmod 9.</p>
|
||||||
>Debian</h3
|
<p>I must find out what these news keys are before publishing them...</p>
|
||||||
><p
|
<div id="clustrmaps-widget"></div><script type="text/javascript">var _clustrmaps = {'url' : 'http://mkaysi.github.com/', 'user' : 1040881, 'server' : '4', 'id' : 'clustrmaps-widget', 'version' : 1, 'date' : '2012-09-02', 'lang' : 'en', 'corners' : 'square' };(function (){ var s = document.createElement('script'); s.type = 'text/javascript'; s.async = true; s.src = 'http://www4.clustrmaps.com/counter/map.js'; var x = document.getElementsByTagName('script')[0]; x.parentNode.insertBefore(s, x);})();</script><noscript>
|
||||||
>@chat.facebook.com || Fingerprint: 4DC7B798 3E3CB54E 62065108 8923A362 BD2B54C4 @gmail.com || Fingerprint: 3A833385 5A65443A 73A7C213 7A244290 2C24F709 @outlook.com || Fingerprint: 3F4BAAF4 BAA10452 28712AB0 12EC1282 D59C8257 @edu.ekami.fi || Fingerprint: B0DC80EC 7B9D4B70 80012C03 1AE2B1B0 E9F52DF6 @jabber.org || Fingerprint: D076B854 5A919CB1 DC32FFAA D0F956EC 086C7BDD @dukgo.com || Fingerprint: B3AE41C3 75946988 86936D92 A7929D23 A52CE715</p
|
<a href="http://www4.clustrmaps.com/user/bd3fe1f1"><img src="http://www4.clustrmaps.com/stats/maps-no_clusters/mkaysi.github.com--thumb.jpg" alt="Locations of visitors to this page" /></a>
|
||||||
><h3 id="ubuntu"
|
</noscript>
|
||||||
>Ubuntu</h3
|
|
||||||
><p
|
|
||||||
>Facebook || Fingerprint: B01D4904 8A3BD352 2729758A E42D51D5 BFF44871 GMail || Fingerprint: 8283844D 6F0CB2B5 AB23E239 AF583045 40A06B47 Jabber || Fingerprint: D01ABB87 A9B77C61 BB63EE7E 9AD9E9A6 313B8978 DukGo || Fingerprint: A62333B8 EF1D6615 9432FF5E 86BDAADE 722BCDA0</p
|
|
||||||
><h1 id="ciblia"
|
|
||||||
>Ciblia</h1
|
|
||||||
><p
|
|
||||||
>Ciblia is my phone.</p
|
|
||||||
><h2 id="gibberbot"
|
|
||||||
>GibberBot</h2
|
|
||||||
><p
|
|
||||||
>Gibberbot keys changed after installing Cyanogenmod 9.</p
|
|
||||||
><p
|
|
||||||
>I must find out what these news keys are before publishing them...</p
|
|
||||||
><div id="clustrmaps-widget"></div><script type="text/javascript">var _clustrmaps = {'url' : 'http://mkaysi.github.com/', 'user' : 1040881, 'server' : '4', 'id' : 'clustrmaps-widget', 'version' : 1, 'date' : '2012-09-02', 'lang' : 'en', 'corners' : 'square' };(function (){ var s = document.createElement('script'); s.type = 'text/javascript'; s.async = true; s.src = 'http://www4.clustrmaps.com/counter/map.js'; var x = document.getElementsByTagName('script')[0]; x.parentNode.insertBefore(s, x);})();</script><noscript><a href="http://www4.clustrmaps.com/user/bd3fe1f1"><img src="http://www4.clustrmaps.com/stats/maps-no_clusters/mkaysi.github.com--thumb.jpg" alt="Locations of visitors to this page" /></a></noscript>
|
|
||||||
|
|
||||||
</HTML>
|
</HTML>
|
||||||
|
|
||||||
|
|||||||
@ -1,50 +1,44 @@
|
|||||||
<!DOCTYPE html><html>
|
<!DOCTYPE html>
|
||||||
<head><meta name="description" content="Tells what should be removed from PGP/INLINE signed emails when replying in case email client doesn't do it." /> <meta name="keywords" content="email,PGP,inline,PGP/INLINE,Enigmail,Thunderbird,Icedove,reply" /> <meta name="author" content="Mika Suomalainen" /> <link rel="canonical" href="http://mkaysi.github.com/PGP/Replies.html"> <meta charset="UTF-8" /> <title>What to remove in replies to PGP/INLINE signed emails.</title> <link rel="stylesheet" type="text/css" href="../tyyli.css" /></head>
|
<html>
|
||||||
<h1 id="what-you-should-remove-from-email-when-you-reply-into-pgpinline-signed-email."
|
<head>
|
||||||
>What you should remove from email, when you reply into PGP/INLINE signed email.</h1
|
<meta name="description" content="Tells what should be removed from PGP/INLINE signed emails when replying in case email client doesn't do it." /> <meta name="keywords" content="email,PGP,inline,PGP/INLINE,Enigmail,Thunderbird,Icedove,reply" /> <meta name="author" content="Mika Suomalainen" /> <link rel="canonical" href="http://mkaysi.github.com/PGP/Replies.html"> <meta charset="UTF-8" />
|
||||||
><h2 id="top"
|
<title>
|
||||||
>Top</h2
|
What to remove in replies to PGP/INLINE signed emails.
|
||||||
><p
|
</title>
|
||||||
>From top of the email, remove everything after</p
|
<link rel="stylesheet" type="text/css" href="../tyyli.css" />
|
||||||
><blockquote
|
</head>
|
||||||
><p
|
|
||||||
>-----BEGIN PGP SIGNED MESSAGE-----</p
|
<h1 id="what-you-should-remove-from-email-when-you-reply-into-pgpinline-signed-email.">What you should remove from email, when you reply into PGP/INLINE signed email.</h1>
|
||||||
></blockquote
|
<h2 id="top">Top</h2>
|
||||||
><p
|
<p>From top of the email, remove everything after</p>
|
||||||
>untill the first line change.</p
|
<blockquote>
|
||||||
><p
|
<p>-----BEGIN PGP SIGNED MESSAGE-----</p>
|
||||||
>For example:</p
|
</blockquote>
|
||||||
><p
|
<p>untill the first line change.</p>
|
||||||
>``` -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1</p
|
<p>For example:</p>
|
||||||
><p
|
<pre><code>-----BEGIN PGP SIGNED MESSAGE-----
|
||||||
>Hi, ```</p
|
Hash: SHA1
|
||||||
><p
|
|
||||||
>You would remove</p
|
Hi,</code></pre>
|
||||||
><p
|
<p>You would remove</p>
|
||||||
><code
|
<pre><code>-----BEGIN PGP SIGNED MESSAGE-----
|
||||||
>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1</code
|
Hash: SHA1</code></pre>
|
||||||
></p
|
<p>so the message would be</p>
|
||||||
><p
|
<blockquote>
|
||||||
>so the message would be</p
|
<p>Hi,</p>
|
||||||
><blockquote
|
</blockquote>
|
||||||
><p
|
<h1 id="bottom">Bottom</h1>
|
||||||
>Hi,</p
|
<p>Remove everything between lines</p>
|
||||||
></blockquote
|
<blockquote>
|
||||||
><h1 id="bottom"
|
<p>-----BEGIN PGP SIGNATURE-----</p>
|
||||||
>Bottom</h1
|
</blockquote>
|
||||||
><p
|
<p>and</p>
|
||||||
>Remove everything between lines</p
|
<blockquote>
|
||||||
><blockquote
|
<p>-----END PGP SIGNATURE-----</p>
|
||||||
><p
|
</blockquote>
|
||||||
>-----BEGIN PGP SIGNATURE-----</p
|
<div id="clustrmaps-widget"></div><script type="text/javascript">var _clustrmaps = {'url' : 'http://mkaysi.github.com/', 'user' : 1040881, 'server' : '4', 'id' : 'clustrmaps-widget', 'version' : 1, 'date' : '2012-09-02', 'lang' : 'en', 'corners' : 'square' };(function (){ var s = document.createElement('script'); s.type = 'text/javascript'; s.async = true; s.src = 'http://www4.clustrmaps.com/counter/map.js'; var x = document.getElementsByTagName('script')[0]; x.parentNode.insertBefore(s, x);})();</script><noscript>
|
||||||
></blockquote
|
<a href="http://www4.clustrmaps.com/user/bd3fe1f1"><img src="http://www4.clustrmaps.com/stats/maps-no_clusters/mkaysi.github.com--thumb.jpg" alt="Locations of visitors to this page" /></a>
|
||||||
><p
|
</noscript>
|
||||||
>and</p
|
|
||||||
><blockquote
|
|
||||||
><p
|
|
||||||
>-----END PGP SIGNATURE-----</p
|
|
||||||
></blockquote
|
|
||||||
><div id="clustrmaps-widget"></div><script type="text/javascript">var _clustrmaps = {'url' : 'http://mkaysi.github.com/', 'user' : 1040881, 'server' : '4', 'id' : 'clustrmaps-widget', 'version' : 1, 'date' : '2012-09-02', 'lang' : 'en', 'corners' : 'square' };(function (){ var s = document.createElement('script'); s.type = 'text/javascript'; s.async = true; s.src = 'http://www4.clustrmaps.com/counter/map.js'; var x = document.getElementsByTagName('script')[0]; x.parentNode.insertBefore(s, x);})();</script><noscript><a href="http://www4.clustrmaps.com/user/bd3fe1f1"><img src="http://www4.clustrmaps.com/stats/maps-no_clusters/mkaysi.github.com--thumb.jpg" alt="Locations of visitors to this page" /></a></noscript>
|
|
||||||
|
|
||||||
</html>
|
</html>
|
||||||
|
|
||||||
|
|||||||
@ -1,146 +1,64 @@
|
|||||||
<!DOCTYPE html><html>
|
<!DOCTYPE html>
|
||||||
<head><meta name="description" content="Explaining about why do I sign my emails using PGP." /> <meta name="keywords" content="PGP,email,GPG,spoofing,cacert,inline,PGP/INLINE,PGP/MINE,clearsign,Thunderbird,Icedove,Enigmail," /> <meta name="author" content="Mika Suomalainen" /> <link rel="canonical" href="http://mkaysi.github.com/PGP/WhyDoISignEmails.html"> <meta charset="UTF-8" /> <title>Why do I sign emails, which I send?</title> <link rel="stylesheet" type="text/css" href="tyyli.css" /></head>
|
<html>
|
||||||
<h1 id="signing-emails."
|
<head>
|
||||||
>Signing emails.</h1
|
<meta name="description" content="Explaining about why do I sign my emails using PGP." /> <meta name="keywords" content="PGP,email,GPG,spoofing,cacert,inline,PGP/INLINE,PGP/MINE,clearsign,Thunderbird,Icedove,Enigmail," /> <meta name="author" content="Mika Suomalainen" /> <link rel="canonical" href="http://mkaysi.github.com/PGP/WhyDoISignEmails.html"> <meta charset="UTF-8" />
|
||||||
><h2 id="why-do-you-sign-all-your-messages"
|
<title>
|
||||||
>Why do you sign all your messages?</h2
|
Why do I sign emails, which I send?
|
||||||
><p
|
</title>
|
||||||
>The signature is evidence that message comes from me. If I sign all my messages, I can say that I sign all my messages and possibly unsigned offensive content, which is spoofed to "come" from my address, isn't sent by me.</p
|
<link rel="stylesheet" type="text/css" href="../tyyli.css" />
|
||||||
><h3 id="but-it-doesnt-prove-anything-you-can-just-leave-offensive-content-unsigned."
|
</head>
|
||||||
>But it doesn't prove anything, you can just leave offensive content unsigned.</h3
|
|
||||||
><p
|
<h1 id="signing-emails.">Signing emails.</h1>
|
||||||
>True, I could do that. But I don't have habit of writing offensive text and saying that it doesn't come from me.</p
|
<h2 id="why-do-you-sign-all-your-messages">Why do you sign all your messages?</h2>
|
||||||
><h2 id="your-signature-doesnt-mean-anything-anyway-because-you-arent-part-of-any-trust-web."
|
<p>The signature is evidence that message comes from me. If I sign all my messages, I can say that I sign all my messages and possibly unsigned offensive content, which is spoofed to "come" from my address, isn't sent by me.</p>
|
||||||
>Your signature doesn't mean anything anyway, because you aren't part of any trust web.</h2
|
<h3 id="but-it-doesnt-prove-anything-you-can-just-leave-offensive-content-unsigned.">But it doesn't prove anything, you can just leave offensive content unsigned.</h3>
|
||||||
><p
|
<p>True, I could do that. But I don't have habit of writing offensive text and saying that it doesn't come from me.</p>
|
||||||
>Actually, I am, but my key is only signed by bots (see below).</p
|
<h2 id="your-signature-doesnt-mean-anything-anyway-because-you-arent-part-of-any-trust-web.">Your signature doesn't mean anything anyway, because you aren't part of any trust web.</h2>
|
||||||
><p
|
<p>Actually, I am, but my key is only signed by bots (see below).</p>
|
||||||
>You might have "import-minimal" or "import-clean" in your keyserver-options in your gpg.conf, so you don't see the signatures. If you don't have them, run</p
|
<p>You might have "import-minimal" or "import-clean" in your keyserver-options in your gpg.conf, so you don't see the signatures. If you don't have them, run</p>
|
||||||
><blockquote
|
<blockquote>
|
||||||
><p
|
<p>gpg --keyserver pool.sks-keyservers.net --refresh-keys 0x4DB53CFE82A46728</p>
|
||||||
>gpg --keyserver pool.sks-keyservers.net --refresh-keys 0x4DB53CFE82A46728</p
|
</blockquote>
|
||||||
></blockquote
|
<p>and signatures should appear.</p>
|
||||||
><p
|
<p><em>NOTE</em>: My key contains information, that my preferred keyserver is pool.sks-keyservers.net, so it's used with --refresh-keys with my key even if you speify another keyserver. This isn't the case if you use very old version of my key.</p>
|
||||||
>and signatures should appear.</p
|
<h3 id="why-you-dont-get-signatures-from-some-bot-certificate-authority">Why you don't get signatures from some bot certificate authority?</h3>
|
||||||
><p
|
<h4 id="pgp-global-directory"><a href="https://keyserver.pgp.com/vkd/GetWelcomeScreen.event">PGP Global Directory</a></h4>
|
||||||
><em
|
<p>I have got signature from <a href="https://keyserver.pgp.com/vkd/GetWelcomeScreen.event">PGP Global Directory</a>, it wanted only to confirm my email addresses.</p>
|
||||||
>NOTE</em
|
<h3 id="hushmail"><a href="https://www.hushtools.com/">Hushmail</a></h3>
|
||||||
>: My key contains information, that my preferred keyserver is pool.sks-keyservers.net, so it's used with --refresh-keys with my key even if you speify another keyserver. This isn't the case if you use very old version of my key.</p
|
<p>I have got signature from <a href="https://www.hushtools.com/">Hushmail</a>. It wanted only to confirm email addresses too.</p>
|
||||||
><h3 id="why-you-dont-get-signatures-from-some-bot-certificate-authority"
|
<h3 id="cacert"><a href="https://cacert.org/">CAcert</a></h3>
|
||||||
>Why you don't get signatures from some bot certificate authority?</h3
|
<p>According to "Locate assurer" feature at <a href="https://cacert.org/">CAcert</a>, the nearest assurer is 110KM away from me.</p>
|
||||||
><h4 id="pgp-global-directory"
|
<h4 id="why-did-you-mention-cacert">Why did you mention <a href="https://cacert.org/">CAcert</a>?</h4>
|
||||||
><a href="https://keyserver.pgp.com/vkd/GetWelcomeScreen.event"
|
<p><a href="https://wiki.cacert.org/PgpSigning">https://wiki.cacert.org/PgpSigning</a></p>
|
||||||
>PGP Global Directory</a
|
<h1 id="clearsigninginline-signing">Clearsigning/INLINE signing</h1>
|
||||||
></h4
|
<h2 id="why-do-you-gpg-clearsign-your-emails-instead-of-using-pgpmime-or-something-less-spammy">Why do you GPG clearsign your emails instead of using PGP/MIME or something less spammy?</h2>
|
||||||
><p
|
<ol class="incremental" style="list-style-type: decimal">
|
||||||
>I have got signature from <a href="https://keyserver.pgp.com/vkd/GetWelcomeScreen.event"
|
<li><p>Some mailing list software mess up with headers and make PGP/MIME signatures unverifiable at least to Enigmail. Some people say that that what those mailing lists do is completely valid. It's up to you to believe in Enigmail developers or other people.</p>
|
||||||
>PGP Global Directory</a
|
<p>Which mailing lists do that?</p>
|
||||||
>, it wanted only to confirm my email addresses.</p
|
<p>At least the following:</p>
|
||||||
><h3 id="hushmail"
|
<ol class="incremental" style="list-style-type: decimal">
|
||||||
><a href="https://www.hushtools.com/"
|
<li><p><a href="https://lists.ubuntu.com">Ubuntu mailing lists</a>. See also <a href="https://bugs.launchpad.net/bugs/996581">bug 996581 at Launchpad</a>.</p></li>
|
||||||
>Hushmail</a
|
<li><p><a href="https://www.mozdev.org/mailman/listinfo">Mozdev mailing lists</a>.</p></li>
|
||||||
></h3
|
<li><p><a href="http://lists.gnupg.org/mailman/listinfo/">GnuPG mailing lists</a>.</p></li>
|
||||||
><p
|
</ol></li>
|
||||||
>I have got signature from <a href="https://www.hushtools.com/"
|
<li><p>INLINE messages are easier to verify manually (presuming that charset doesn't cause problems).</p>
|
||||||
>Hushmail</a
|
<p>There are many web archives and sometimes people want to verify signatures of emails, which they didn't receive. Think about <a href="http://bugs.debian.org/">Debian BTS</a>.</p></li>
|
||||||
>. It wanted only to confirm email addresses too.</p
|
<li><p><a href="https://github.com/k9mail/k-9">K9 Mail</a> doesn't support PGP/MIME.</p></li>
|
||||||
><h3 id="cacert"
|
<li><p><a href="http://bugs.debian.org/">Debian BTS</a> doesn't send working PGP/MIME back in subscribtion confirmations.</p>
|
||||||
><a href="https://cacert.org/"
|
<p>In my opinion, it's easier to check did you request something with [Ðebian BTS] if it has content, which is signed with your key.</p></li>
|
||||||
>CAcert</a
|
</ol>
|
||||||
></h3
|
<h2 id="but-clearsigned-signature-looks-ugly.">But clearsigned signature looks ugly.</h2>
|
||||||
><p
|
<p>This is the problem of your email client. If you use <a href="https://mozilla.org/thunderbird">Thunderbird or Icedove or Seamonkey</a>, you can probably install <a href="http://enigmail.mozdev.org/home/index.php.html">Enigmail</a> and that signature block gets hidden. If you use some other email client, please report bug for that package in your distribution or upstream bug tracker.</p>
|
||||||
>According to "Locate assurer" feature at <a href="https://cacert.org/"
|
<h2 id="i-am-on-slow-connection-and-your-signature-is-too-big-for-me.">I am on slow connection and your signature is too big for me.</h2>
|
||||||
>CAcert</a
|
<p>And what does that have to do with INLINE signature? In PGP/MIME you would download the same mess, but inside signature.asc file.</p>
|
||||||
>, the nearest assurer is 110KM away from me.</p
|
<h1 id="other-things">Other things</h1>
|
||||||
><h4 id="why-did-you-mention-cacert"
|
<h2 id="why-did-you-write-this-page">Why did you write this page?</h2>
|
||||||
>Why did you mention <a href="https://cacert.org/"
|
<p>Because I am fed up explaining myself on some mailing lists. This page will be linked in my email signature and I will ignore every question about things, which read on this page.</p>
|
||||||
>CAcert</a
|
<h2 id="so-you-are-just-ignorant-and-want-to-spam-people">So you are just ignorant and want to spam people?</h2>
|
||||||
>?</h4
|
<p>I want to raise awareness about PGP and that it's very easy to spoof emails from addresses of other people. As stated previously, I will also ignore claims like that.</p>
|
||||||
><p
|
<div id="clustrmaps-widget"></div><script type="text/javascript">var _clustrmaps = {'url' : 'http://mkaysi.github.com/', 'user' : 1040881, 'server' : '4', 'id' : 'clustrmaps-widget', 'version' : 1, 'date' : '2012-09-02', 'lang' : 'en', 'corners' : 'square' };(function (){ var s = document.createElement('script'); s.type = 'text/javascript'; s.async = true; s.src = 'http://www4.clustrmaps.com/counter/map.js'; var x = document.getElementsByTagName('script')[0]; x.parentNode.insertBefore(s, x);})();</script><noscript>
|
||||||
><a href="https://wiki.cacert.org/PgpSigning"
|
<a href="http://www4.clustrmaps.com/user/bd3fe1f1"><img src="http://www4.clustrmaps.com/stats/maps-no_clusters/mkaysi.github.com--thumb.jpg" alt="Locations of visitors to this page" /></a>
|
||||||
>https://wiki.cacert.org/PgpSigning</a
|
</noscript>
|
||||||
></p
|
|
||||||
><h1 id="clearsigninginline-signing"
|
|
||||||
>Clearsigning/INLINE signing</h1
|
|
||||||
><h2 id="why-do-you-gpg-clearsign-your-emails-instead-of-using-pgpmime-or-something-less-spammy"
|
|
||||||
>Why do you GPG clearsign your emails instead of using PGP/MIME or something less spammy?</h2
|
|
||||||
><ol class="incremental" style="list-style-type: decimal"
|
|
||||||
><li
|
|
||||||
><p
|
|
||||||
>Some mailing list software mess up with headers and make PGP/MIME signatures unverifiable at least to Enigmail. Some people say that that what those mailing lists do is completely valid. It's up to you to believe in Enigmail developers or other people.</p
|
|
||||||
><p
|
|
||||||
>Which mailing lists do that?</p
|
|
||||||
><p
|
|
||||||
>At least the following:</p
|
|
||||||
><ol class="incremental" style="list-style-type: decimal"
|
|
||||||
><li
|
|
||||||
><p
|
|
||||||
><a href="https://lists.ubuntu.com"
|
|
||||||
>Ubuntu mailing lists</a
|
|
||||||
>. See also <a href="https://bugs.launchpad.net/bugs/996581"
|
|
||||||
>bug 996581 at Launchpad</a
|
|
||||||
>.</p
|
|
||||||
></li
|
|
||||||
><li
|
|
||||||
><p
|
|
||||||
><a href="https://www.mozdev.org/mailman/listinfo"
|
|
||||||
>Mozdev mailing lists</a
|
|
||||||
>.</p
|
|
||||||
></li
|
|
||||||
><li
|
|
||||||
><p
|
|
||||||
><a href="http://lists.gnupg.org/mailman/listinfo/"
|
|
||||||
>GnuPG mailing lists</a
|
|
||||||
>.</p
|
|
||||||
></li
|
|
||||||
></ol
|
|
||||||
></li
|
|
||||||
><li
|
|
||||||
><p
|
|
||||||
>INLINE messages are easier to verify manually (presuming that charset doesn't cause problems).</p
|
|
||||||
><p
|
|
||||||
>There are many web archives and sometimes people want to verify signatures of emails, which they didn't receive. Think about <a href="http://bugs.debian.org/"
|
|
||||||
>Debian BTS</a
|
|
||||||
>.</p
|
|
||||||
></li
|
|
||||||
><li
|
|
||||||
><p
|
|
||||||
><a href="https://github.com/k9mail/k-9"
|
|
||||||
>K9 Mail</a
|
|
||||||
> doesn't support PGP/MIME.</p
|
|
||||||
></li
|
|
||||||
><li
|
|
||||||
><p
|
|
||||||
><a href="http://bugs.debian.org/"
|
|
||||||
>Debian BTS</a
|
|
||||||
> doesn't send working PGP/MIME back in subscribtion confirmations.</p
|
|
||||||
><p
|
|
||||||
>In my opinion, it's easier to check did you request something with [Ðebian BTS] if it has content, which is signed with your key.</p
|
|
||||||
></li
|
|
||||||
></ol
|
|
||||||
><h2 id="but-clearsigned-signature-looks-ugly."
|
|
||||||
>But clearsigned signature looks ugly.</h2
|
|
||||||
><p
|
|
||||||
>This is the problem of your email client. If you use <a href="https://mozilla.org/thunderbird"
|
|
||||||
>Thunderbird or Icedove or Seamonkey</a
|
|
||||||
>, you can probably install <a href="http://enigmail.mozdev.org/home/index.php.html"
|
|
||||||
>Enigmail</a
|
|
||||||
> and that signature block gets hidden. If you use some other email client, please report bug for that package in your distribution or upstream bug tracker.</p
|
|
||||||
><h2 id="i-am-on-slow-connection-and-your-signature-is-too-big-for-me."
|
|
||||||
>I am on slow connection and your signature is too big for me.</h2
|
|
||||||
><p
|
|
||||||
>And what does that have to do with INLINE signature? In PGP/MIME you would download the same mess, but inside signature.asc file.</p
|
|
||||||
><h1 id="other-things"
|
|
||||||
>Other things</h1
|
|
||||||
><h2 id="why-did-you-write-this-page"
|
|
||||||
>Why did you write this page?</h2
|
|
||||||
><p
|
|
||||||
>Because I am fed up explaining myself on some mailing lists. This page will be linked in my email signature and I will ignore every question about things, which read on this page.</p
|
|
||||||
><h2 id="so-you-are-just-ignorant-and-want-to-spam-people"
|
|
||||||
>So you are just ignorant and want to spam people?</h2
|
|
||||||
><p
|
|
||||||
>I want to raise awareness about PGP and that it's very easy to spoof emails from addresses of other people. As stated previously, I will also ignore claims like that.</p
|
|
||||||
><div id="clustrmaps-widget"></div><script type="text/javascript">var _clustrmaps = {'url' : 'http://mkaysi.github.com/', 'user' : 1040881, 'server' : '4', 'id' : 'clustrmaps-widget', 'version' : 1, 'date' : '2012-09-02', 'lang' : 'en', 'corners' : 'square' };(function (){ var s = document.createElement('script'); s.type = 'text/javascript'; s.async = true; s.src = 'http://www4.clustrmaps.com/counter/map.js'; var x = document.getElementsByTagName('script')[0]; x.parentNode.insertBefore(s, x);})();</script><noscript><a href="http://www4.clustrmaps.com/user/bd3fe1f1"><img src="http://www4.clustrmaps.com/stats/maps-no_clusters/mkaysi.github.com--thumb.jpg" alt="Locations of visitors to this page" /></a></noscript>
|
|
||||||
|
|
||||||
</html>
|
</html>
|
||||||
|
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user