mirror of
https://github.com/mikaela/mikaela.github.io/
synced 2025-02-23 17:00:40 +01:00
PGP/WhyDoISignEmails.html: Write clear explanation about why I sign my emails.
This commit is contained in:
Mikaela Suomalainen
parent
92ac625686
commit
cb27f1cb46
@ -1,13 +1 @@
|
|||||||
<h2 id="why-do-you-gpg-clearsign-your-emails-instead-of-using-pgpmime-or-something-less-spammy">Why do you GPG clearsign your emails instead of using PGP/MIME or something less spammy?</h2>
|
<meta HTTP-EQUIV="REFRESH" content="0; url=http://mkaysi.github.com/PGP/WhyDoISignEmails.html">
|
||||||
<p>I am clearsigning my emails instead of using PGP/MIME, because I am on multiple mailing lists and most of them use mailing list software, which messes up with headers and this way make PGP/MIME signatures unverifiable.</p>
|
|
||||||
<h2 id="but-clearsigned-signature-looks-ugly.">But clearsigned signature looks ugly.</h2>
|
|
||||||
<p>I know that clearsigned messages may look ugly to email clients, which don't support PGP, but they can at least be verified on all mailing lists.</p>
|
|
||||||
<h2 id="i-am-on-slow-connection-and-your-signature-is-too-big-for-me.">I am on slow connection and your signature is too big for me.</h2>
|
|
||||||
<p>I am sorry for that. But keep in mind that your email client would still download ther PGP/MIME signature (signature.asc) file even if I used PGP/MIME.</p>
|
|
||||||
<h2 id="which-mailing-lists-do-that">Which mailing lists do that?</h2>
|
|
||||||
<p>At least the following:</p>
|
|
||||||
<ol class="incremental" style="list-style-type: decimal">
|
|
||||||
<li><p><a href="https://lists.ubuntu.com">Ubuntu mailing lists</a>. See also <a href="https://bugs.launchpad.net/bugs/996581">bug 996581 at Launchpad</a>.</p></li>
|
|
||||||
<li><p><a href="https://www.mozdev.org/mailman/listinfo">Mozdev mailing lists</a>.</p></li>
|
|
||||||
<li><p><a href="http://lists.gnupg.org/mailman/listinfo/">GnuPG mailing lists</a>.</p></li>
|
|
||||||
</ol>
|
|
||||||
|
|||||||
@ -1,31 +0,0 @@
|
|||||||
Why do you GPG clearsign your emails instead of using PGP/MIME or something less spammy?
|
|
||||||
----------------------------------------------------------------------------------------
|
|
||||||
|
|
||||||
I am clearsigning my emails instead of using PGP/MIME, because I am on
|
|
||||||
multiple mailing lists and most of them use mailing list software,
|
|
||||||
which messes up with headers and this way make PGP/MIME signatures
|
|
||||||
unverifiable.
|
|
||||||
|
|
||||||
But clearsigned signature looks ugly.
|
|
||||||
-------------------------------------
|
|
||||||
|
|
||||||
I know that clearsigned messages may look ugly to email clients, which
|
|
||||||
don't support PGP, but they can at least be verified on all mailing lists.
|
|
||||||
|
|
||||||
I am on slow connection and your signature is too big for me.
|
|
||||||
-------------------------------------------------------------
|
|
||||||
|
|
||||||
I am sorry for that. But keep in mind that your email client would still
|
|
||||||
download ther PGP/MIME signature (signature.asc) file even if I used
|
|
||||||
PGP/MIME.
|
|
||||||
|
|
||||||
Which mailing lists do that?
|
|
||||||
----------------------------
|
|
||||||
|
|
||||||
At least the following:
|
|
||||||
|
|
||||||
1. [Ubuntu mailing lists](https://lists.ubuntu.com). See also [bug 996581 at Launchpad](https://bugs.launchpad.net/bugs/996581).
|
|
||||||
|
|
||||||
2. [Mozdev mailing lists](https://www.mozdev.org/mailman/listinfo).
|
|
||||||
|
|
||||||
3. [GnuPG mailing lists](http://lists.gnupg.org/mailman/listinfo/).
|
|
||||||
38
PGP/WhyDoISignEmails.html
Normal file
38
PGP/WhyDoISignEmails.html
Normal file
@ -0,0 +1,38 @@
|
|||||||
|
<h1 id="signing-emails.">Signing emails.</h1>
|
||||||
|
<h2 id="why-do-you-sign-all-your-messages">Why do you sign all your messages?</h2>
|
||||||
|
<p>The signature is evidence that message comes from me. If I sign all my messages, I can say that I sign all my messages and possibly unsigned offensive content, which is spoofed to "come" from my address, isn't sent by me.</p>
|
||||||
|
<h3 id="but-it-doesnt-prove-anything-you-can-just-leave-offensive-content-unsigned.">But it doesn't prove anything, you can just leave offensive content unsigned.</h3>
|
||||||
|
<p>True, I could do that. But I don't have habit of writing offensive text and saying that it doesn't come from me.</p>
|
||||||
|
<h2 id="your-signature-doesnt-mean-anything-anyway-because-you-arent-part-of-any-trust-web.">Your signature doesn't mean anything anyway, because you aren't part of any trust web.</h2>
|
||||||
|
<ol class="incremental" style="list-style-type: decimal">
|
||||||
|
<li><p>Some people at IRC lsign keys of each other, so I am in somekind of trustweb.</p></li>
|
||||||
|
<li><p>The signature can still prove that the email hasn't been modified after sending.</p></li>
|
||||||
|
<li><p>This can change in the future. My key doesn't have any signatures right now, because anyone else near here doesn't use PGP.</p></li>
|
||||||
|
</ol>
|
||||||
|
<h3 id="why-you-dont-get-signatures-using-cacert">Why you don't get signatures using <a href="https://cacert.org/">CAcert</a>?</h3>
|
||||||
|
<p>According to "Locate assurer" feature at <a href="https://cacert.org/">CAcert</a>, the nearest assurer is 110KM away from me.</p>
|
||||||
|
<h4 id="why-did-you-mention-cacert">Why did you mention <a href="https://cacert.org/">CAcert</a>?</h4>
|
||||||
|
<p><a href="https://wiki.cacert.org/PgpSigning">https://wiki.cacert.org/PgpSigning</a></p>
|
||||||
|
<h1 id="clearsigninginline-signing">Clearsigning/INLINE signing</h1>
|
||||||
|
<h2 id="why-do-you-gpg-clearsign-your-emails-instead-of-using-pgpmime-or-something-less-spammy">Why do you GPG clearsign your emails instead of using PGP/MIME or something less spammy?</h2>
|
||||||
|
<ol class="incremental" style="list-style-type: decimal">
|
||||||
|
<li><p>Some mailing list software mess up with headers and make PGP/MIME signatures unverifiable.</p>
|
||||||
|
<p>Which mailing lists do that?</p>
|
||||||
|
<p>At least the following:</p>
|
||||||
|
<ol class="incremental" style="list-style-type: decimal">
|
||||||
|
<li><p><a href="https://lists.ubuntu.com">Ubuntu mailing lists</a>. See also <a href="https://bugs.launchpad.net/bugs/996581">bug 996581 at Launchpad</a>.</p></li>
|
||||||
|
<li><p><a href="https://www.mozdev.org/mailman/listinfo">Mozdev mailing lists</a>.</p></li>
|
||||||
|
<li><p><a href="http://lists.gnupg.org/mailman/listinfo/">GnuPG mailing lists</a>.</p></li>
|
||||||
|
</ol></li>
|
||||||
|
<li><p>INLINE messages are easier to verify manually (presuming that charset doesn't cause problems).</p></li>
|
||||||
|
<li><p><a href="https://github.com/k9mail/k-9">K9 Mail</a> doesn't support PGP/MIME.</p></li>
|
||||||
|
</ol>
|
||||||
|
<h2 id="but-clearsigned-signature-looks-ugly.">But clearsigned signature looks ugly.</h2>
|
||||||
|
<p>This is the problem of your email client. If you use <a href="https://mozilla.org/thunderbird">Thunderbird or Icedove or Seamonkey</a>, you can probably install <a href="http://enigmail.mozdev.org/home/index.php.html">Enigmail</a> and that signature block gets hidden. If you use some other email client, please report bug for that package in your distribution or upstream bug tracker.</p>
|
||||||
|
<h2 id="i-am-on-slow-connection-and-your-signature-is-too-big-for-me.">I am on slow connection and your signature is too big for me.</h2>
|
||||||
|
<p>And what does that have to do with INLINE signature? In PGP/MIME you would download the same mess, but inside signature.asc file.</p>
|
||||||
|
<h1 id="other-things">Other things</h1>
|
||||||
|
<h2 id="why-did-you-write-this-page">Why did you write this page?</h2>
|
||||||
|
<p>Because I am fed up explaining myself on some mailing lists. This page will be linked in my email signature and I will ignore every question about things, which read on this page.</p>
|
||||||
|
<h2 id="so-you-are-just-ignorant-and-want-to-spam-people">So you are just ignorant and want to spam people?</h2>
|
||||||
|
<p>I want to raise awareness about PGP and that it's very easy to spoof emails from addresses of other people. As stated previously, I will also ignore claims like that.</p>
|
||||||
82
PGP/WhyDoISignEmails.html.md
Normal file
82
PGP/WhyDoISignEmails.html.md
Normal file
@ -0,0 +1,82 @@
|
|||||||
|
# Signing emails.
|
||||||
|
|
||||||
|
## Why do you sign all your messages?
|
||||||
|
|
||||||
|
The signature is evidence that message comes from me. If I sign all my messages,
|
||||||
|
I can say that I sign all my messages and possibly unsigned offensive
|
||||||
|
content, which is spoofed to "come" from my address, isn't sent by me.
|
||||||
|
|
||||||
|
### But it doesn't prove anything, you can just leave offensive content unsigned.
|
||||||
|
|
||||||
|
True, I could do that. But I don't have habit of writing offensive text and saying that it doesn't come from me.
|
||||||
|
|
||||||
|
## Your signature doesn't mean anything anyway, because you aren't part of any trust web.
|
||||||
|
|
||||||
|
1. Some people at IRC lsign keys of each other, so I am in somekind of trustweb.
|
||||||
|
|
||||||
|
2. The signature can still prove that the email hasn't been modified after sending.
|
||||||
|
|
||||||
|
3. This can change in the future. My key doesn't have any signatures right now, because anyone else near here doesn't use PGP.
|
||||||
|
|
||||||
|
### Why you don't get signatures using [CAcert]?
|
||||||
|
|
||||||
|
According to "Locate assurer" feature at [CAcert], the nearest assurer is
|
||||||
|
110KM away from me.
|
||||||
|
|
||||||
|
#### Why did you mention [CAcert]?
|
||||||
|
|
||||||
|
[https://wiki.cacert.org/PgpSigning](https://wiki.cacert.org/PgpSigning)
|
||||||
|
|
||||||
|
[CAcert]:https://cacert.org/
|
||||||
|
|
||||||
|
# Clearsigning/INLINE signing
|
||||||
|
|
||||||
|
## Why do you GPG clearsign your emails instead of using PGP/MIME or something less spammy?
|
||||||
|
|
||||||
|
1. Some mailing list software mess up with headers and make PGP/MIME signatures unverifiable.
|
||||||
|
|
||||||
|
Which mailing lists do that?
|
||||||
|
|
||||||
|
At least the following:
|
||||||
|
|
||||||
|
1. [Ubuntu mailing lists](https://lists.ubuntu.com). See also [bug 996581 at Launchpad](https://bugs.launchpad.net/bugs/996581).
|
||||||
|
|
||||||
|
2. [Mozdev mailing lists](https://www.mozdev.org/mailman/listinfo).
|
||||||
|
|
||||||
|
3. [GnuPG mailing lists](http://lists.gnupg.org/mailman/listinfo/).
|
||||||
|
|
||||||
|
2. INLINE messages are easier to verify manually (presuming that charset doesn't cause problems).
|
||||||
|
|
||||||
|
3. [K9 Mail] doesn't support PGP/MIME.
|
||||||
|
|
||||||
|
[K9 Mail]:https://github.com/k9mail/k-9
|
||||||
|
|
||||||
|
|
||||||
|
## But clearsigned signature looks ugly.
|
||||||
|
|
||||||
|
This is the problem of your email client. If you use [Thunderbird or Icedove or Seamonkey],
|
||||||
|
you can probably install [Enigmail] and that signature block gets hidden.
|
||||||
|
If you use some other email client, please report bug for that package in
|
||||||
|
your distribution or upstream bug tracker.
|
||||||
|
|
||||||
|
[Thunderbird or Icedove or Seamonkey]:https://mozilla.org/thunderbird
|
||||||
|
[Enigmail]:http://enigmail.mozdev.org/home/index.php.html
|
||||||
|
|
||||||
|
## I am on slow connection and your signature is too big for me.
|
||||||
|
|
||||||
|
And what does that have to do with INLINE signature? In PGP/MIME you would
|
||||||
|
download the same mess, but inside signature.asc file.
|
||||||
|
|
||||||
|
# Other things
|
||||||
|
|
||||||
|
## Why did you write this page?
|
||||||
|
|
||||||
|
Because I am fed up explaining myself on some mailing lists. This page will
|
||||||
|
be linked in my email signature and I will ignore every question about things,
|
||||||
|
which read on this page.
|
||||||
|
|
||||||
|
## So you are just ignorant and want to spam people?
|
||||||
|
|
||||||
|
I want to raise awareness about PGP and that it's very easy to spoof emails
|
||||||
|
from addresses of other people. As stated previously, I will also ignore
|
||||||
|
claims like that.
|
||||||
Loading…
x
Reference in New Issue
Block a user