mirror of
https://github.com/mikaela/mikaela.github.io/
synced 2025-02-23 17:00:40 +01:00
articles/*: fix everything
This commit is contained in:
Mikaela Suomalainen
parent
b2e4c8a582
commit
f949247f38
@ -1,63 +1,35 @@
|
|||||||
<!DOCTYPE html><html>
|
<!DOCTYPE html>
|
||||||
<head><meta name="description" content="Complaining about using HTML in emails" /> <meta name="keywords" content="HTML,text,txt,plain,email" /> <meta name="author" content="Mika Suomalainen" /> <meta charset="UTF-8" /> <link rel="canonical" href="http://mkaysi.github.com/articles/complaining/HTML.html"> <title>HTML in emails is annoying</title> <link rel="stylesheet" type="text/css" href="../../tyyli.css" /></head>
|
<html>
|
||||||
|
<head>
|
||||||
|
<meta name="description" content="Complaining about using HTML in emails" /> <meta name="keywords" content="HTML,text,txt,plain,email" /> <meta name="author" content="Mika Suomalainen" /> <meta charset="UTF-8" /> <link rel="canonical" href="http://mkaysi.github.com/articles/complaining/HTML.html">
|
||||||
|
<title>
|
||||||
|
HTML in emails is annoying
|
||||||
|
</title>
|
||||||
|
<link rel="stylesheet" type="text/css" href="../../tyyli.css" />
|
||||||
|
</head>
|
||||||
|
|
||||||
<h1 id="using-html-in-emails."
|
|
||||||
>Using HTML in emails.</h1
|
<h1 id="using-html-in-emails.">Using HTML in emails.</h1>
|
||||||
><p
|
<p>Emails which are written with HTML are annoying.</p>
|
||||||
>Emails which are written with HTML are annoying.</p
|
<h2 id="why-are-they-annoying">Why are they annoying?</h2>
|
||||||
><h2 id="why-are-they-annoying"
|
<ol class="incremental" style="list-style-type: decimal">
|
||||||
>Why are they annoying?</h2
|
<li><p>They look bad with some clients with plaintext inlines (at least on <a href="https://mozilla.org/thunderbird/">Icedove and Thunderbird</a>).</p></li>
|
||||||
><ol class="incremental" style="list-style-type: decimal"
|
<li><p>They add empty lines to emails. Have you ever tried looking at source of one?</p></li>
|
||||||
><li
|
<li><p>They can include very annoying formatting.</p></li>
|
||||||
><p
|
</ol>
|
||||||
>They look bad with some clients with plaintext inlines (at least on <a href="https://mozilla.org/thunderbird/"
|
<p>Do you like reading email which is for example, all in bold, cursive and with some notice attracting colour, like red? And what if it's even written with some very annoying font?</p>
|
||||||
>Icedove and Thunderbird</a
|
<ol class="incremental" start="4" style="list-style-type: decimal">
|
||||||
>).</p
|
<li><p>They don't show correctly in some emails clients.</p></li>
|
||||||
></li
|
<li><p>At least guidelines of <a href="http://www.debian.org/MailingLists/#codeofconduct">Debian mailing lists</a>, <a href="http://www.ubuntu.com/support/community/mailinglists">Ubuntu mailing lists</a> and <a href="http://vger.kernel.org/majordomo-info.html">Linux Kernel Developer mailing lists</a> forbid writing emails in HTML. Hopefully others do to, at least they should.</p></li>
|
||||||
><li
|
<li><p>PGP/INLINE signed or encrypted blocks get invalid, when HTML adds spaces to them. This seems to be very popular issue (probably, because K9 mail has interesting default settings of sending HTML and topposting...)</p></li>
|
||||||
><p
|
</ol>
|
||||||
>They add empty lines to emails. Have you ever tried looking at source of one?</p
|
<h2 id="my-email-client-cannot-write-messages-in-plaintext">My email client cannot write messages in plaintext!</h2>
|
||||||
></li
|
<p>Are you sure? <a href="https://wiki.debian.org/DebianMailingLists#HowTo_send_plain_text_emails_to_the_list">Debian wiki</a> has instructions how to write plain text with many clients.</p>
|
||||||
><li
|
<h2 id="but-i-use-webmail-i-cannot-send-plaintext">But I use webmail, I cannot send plaintext!</h2>
|
||||||
><p
|
<p>Are you sure? <a href="https://wiki.debian.org/DebianMailingLists#HowTo_send_plain_text_emails_to_the_list">Debian wiki, which was mentioned eaerier</a> also includes instructions for many webmails about writing in plaintext.</p>
|
||||||
>They can include very annoying formatting.</p
|
<div id="clustrmaps-widget"></div><script type="text/javascript">var _clustrmaps = {'url' : 'http://mkaysi.github.com/', 'user' : 1040881, 'server' : '4', 'id' : 'clustrmaps-widget', 'version' : 1, 'date' : '2012-09-02', 'lang' : 'en', 'corners' : 'square' };(function (){ var s = document.createElement('script'); s.type = 'text/javascript'; s.async = true; s.src = 'http://www4.clustrmaps.com/counter/map.js'; var x = document.getElementsByTagName('script')[0]; x.parentNode.insertBefore(s, x);})();</script><noscript>
|
||||||
></li
|
<a href="http://www4.clustrmaps.com/user/bd3fe1f1"><img src="http://www4.clustrmaps.com/stats/maps-no_clusters/mkaysi.github.com--thumb.jpg" alt="Locations of visitors to this page" /></a>
|
||||||
></ol
|
</noscript>
|
||||||
><p
|
|
||||||
>Do you like reading email which is for example, all in bold, cursive and with some notice attracting colour, like red? And what if it's even written with some very annoying font?</p
|
|
||||||
><ol class="incremental" start="4" style="list-style-type: decimal"
|
|
||||||
><li
|
|
||||||
><p
|
|
||||||
>They don't show correctly in some emails clients.</p
|
|
||||||
></li
|
|
||||||
><li
|
|
||||||
><p
|
|
||||||
>At least guidelines of <a href="http://www.debian.org/MailingLists/#codeofconduct"
|
|
||||||
>Debian mailing lists</a
|
|
||||||
>, <a href="http://www.ubuntu.com/support/community/mailinglists"
|
|
||||||
>Ubuntu mailing lists</a
|
|
||||||
> and <a href="http://vger.kernel.org/majordomo-info.html"
|
|
||||||
>Linux Kernel Developer mailing lists</a
|
|
||||||
> forbid writing emails in HTML. Hopefully others do to, at least they should.</p
|
|
||||||
></li
|
|
||||||
><li
|
|
||||||
><p
|
|
||||||
>PGP/INLINE signed or encrypted blocks get invalid, when HTML adds spaces to them. This seems to be very popular issue (probably, because K9 mail has interesting default settings of sending HTML and topposting...)</p
|
|
||||||
></li
|
|
||||||
></ol
|
|
||||||
><h2 id="my-email-client-cannot-write-messages-in-plaintext"
|
|
||||||
>My email client cannot write messages in plaintext!</h2
|
|
||||||
><p
|
|
||||||
>Are you sure? <a href="https://wiki.debian.org/DebianMailingLists#HowTo_send_plain_text_emails_to_the_list"
|
|
||||||
>Debian wiki</a
|
|
||||||
> has instructions how to write plain text with many clients.</p
|
|
||||||
><h2 id="but-i-use-webmail-i-cannot-send-plaintext"
|
|
||||||
>But I use webmail, I cannot send plaintext!</h2
|
|
||||||
><p
|
|
||||||
>Are you sure? <a href="https://wiki.debian.org/DebianMailingLists#HowTo_send_plain_text_emails_to_the_list"
|
|
||||||
>Debian wiki, which was mentioned eaerier</a
|
|
||||||
> also includes instructions for many webmails about writing in plaintext.</p
|
|
||||||
><div id="clustrmaps-widget"></div><script type="text/javascript">var _clustrmaps = {'url' : 'http://mkaysi.github.com/', 'user' : 1040881, 'server' : '4', 'id' : 'clustrmaps-widget', 'version' : 1, 'date' : '2012-09-02', 'lang' : 'en', 'corners' : 'square' };(function (){ var s = document.createElement('script'); s.type = 'text/javascript'; s.async = true; s.src = 'http://www4.clustrmaps.com/counter/map.js'; var x = document.getElementsByTagName('script')[0]; x.parentNode.insertBefore(s, x);})();</script><noscript><a href="http://www4.clustrmaps.com/user/bd3fe1f1"><img src="http://www4.clustrmaps.com/stats/maps-no_clusters/mkaysi.github.com--thumb.jpg" alt="Locations of visitors to this page" /></a></noscript>
|
|
||||||
|
|
||||||
</HTML>
|
</HTML>
|
||||||
|
|
||||||
|
|||||||
@ -1,38 +1,29 @@
|
|||||||
<!DOCTYPE html><html>
|
<!DOCTYPE html>
|
||||||
<head><meta name="description" content="Insert description here" /> <meta name="keywords" content="Insert,keywords,here" /> <meta name="author" content="Mika Suomalainen" /> <meta charset="UTF-8" /> <link rel="canonical" href="http://mkaysi.github.com/articles/complaining/topposting.html"> <title>Top-posting in emails is annoying</title> <link rel="stylesheet" type="text/css" href="../../tyyli.css" /></head>
|
<html>
|
||||||
<h1 id="top-posting"
|
<head>
|
||||||
>Top-posting</h1
|
<meta name="description" content="Insert description here" /> <meta name="keywords" content="Insert,keywords,here" /> <meta name="author" content="Mika Suomalainen" /> <meta charset="UTF-8" /> <link rel="canonical" href="http://mkaysi.github.com/articles/complaining/topposting.html">
|
||||||
><h2 id="what-is-top-posting"
|
<title>
|
||||||
>What is top-posting?</h2
|
Top-posting in emails is annoying
|
||||||
><p
|
</title>
|
||||||
>Top posting is replying before the text which you are replying to (and which is usually automatically quoted by your email client).</p
|
<link rel="stylesheet" type="text/css" href="../../tyyli.css" />
|
||||||
><p
|
</head>
|
||||||
>This example from <a href="https://wiki.debian.org/FAQsFromDebianUser#What_is_top-posting_.28and_why_shouldn.27t_I_do_it.29.3F"
|
|
||||||
>Debian wiki</a
|
<h1 id="top-posting">Top-posting</h1>
|
||||||
> answers to both, this and next question.</p
|
<h2 id="what-is-top-posting">What is top-posting?</h2>
|
||||||
><pre
|
<p>Top posting is replying before the text which you are replying to (and which is usually automatically quoted by your email client).</p>
|
||||||
><code
|
<p>This example from <a href="https://wiki.debian.org/FAQsFromDebianUser#What_is_top-posting_.28and_why_shouldn.27t_I_do_it.29.3F">Debian wiki</a> answers to both, this and next question.</p>
|
||||||
>A: Because it messes up the way you read
|
<pre><code>A: Because it messes up the way you read
|
||||||
Q: Why is top-posting bad?
|
Q: Why is top-posting bad?
|
||||||
A: Writing your answer before the question
|
A: Writing your answer before the question
|
||||||
Q: What is top-posting?
|
Q: What is top-posting?</code></pre>
|
||||||
</code
|
<h2 id="why-is-it-bad">Why is it bad?</h2>
|
||||||
></pre
|
<p>See the answer to the previous question.</p>
|
||||||
><h2 id="why-is-it-bad"
|
<p>It also makes harder to know what previous poster meant if he/she just said "+1" and other people have used different posting style and senders and replies are messed up. This happens often on Lubuntu mailing lists.</p>
|
||||||
>Why is it bad?</h2
|
<h2 id="rules">Rules</h2>
|
||||||
><p
|
<p>At least <a href="http://www.debian.org/MailingLists/#codeofconduct">Debian mailing lists</a> and <a href="http://www.ubuntu.com/support/community/mailinglists">Ubuntu mailing lists</a> forbid top-posting in their guidelines. In my opinion other mailing lists should do this too.</p>
|
||||||
>See the answer to the previous question.</p
|
<div id="clustrmaps-widget"></div><script type="text/javascript">var _clustrmaps = {'url' : 'http://mkaysi.github.com/', 'user' : 1040881, 'server' : '4', 'id' : 'clustrmaps-widget', 'version' : 1, 'date' : '2012-09-02', 'lang' : 'en', 'corners' : 'square' };(function (){ var s = document.createElement('script'); s.type = 'text/javascript'; s.async = true; s.src = 'http://www4.clustrmaps.com/counter/map.js'; var x = document.getElementsByTagName('script')[0]; x.parentNode.insertBefore(s, x);})();</script><noscript>
|
||||||
><p
|
<a href="http://www4.clustrmaps.com/user/bd3fe1f1"><img src="http://www4.clustrmaps.com/stats/maps-no_clusters/mkaysi.github.com--thumb.jpg" alt="Locations of visitors to this page" /></a>
|
||||||
>It also makes harder to know what previous poster meant if he/she just said "+1" and other people have used different posting style and senders and replies are messed up. This happens often on Lubuntu mailing lists.</p
|
</noscript>
|
||||||
><h2 id="rules"
|
|
||||||
>Rules</h2
|
|
||||||
><p
|
|
||||||
>At least <a href="http://www.debian.org/MailingLists/#codeofconduct"
|
|
||||||
>Debian mailing lists</a
|
|
||||||
> and <a href="http://www.ubuntu.com/support/community/mailinglists"
|
|
||||||
>Ubuntu mailing lists</a
|
|
||||||
> forbid top-posting in their guidelines. In my opinion other mailing lists should do this too.</p
|
|
||||||
><div id="clustrmaps-widget"></div><script type="text/javascript">var _clustrmaps = {'url' : 'http://mkaysi.github.com/', 'user' : 1040881, 'server' : '4', 'id' : 'clustrmaps-widget', 'version' : 1, 'date' : '2012-09-02', 'lang' : 'en', 'corners' : 'square' };(function (){ var s = document.createElement('script'); s.type = 'text/javascript'; s.async = true; s.src = 'http://www4.clustrmaps.com/counter/map.js'; var x = document.getElementsByTagName('script')[0]; x.parentNode.insertBefore(s, x);})();</script><noscript><a href="http://www4.clustrmaps.com/user/bd3fe1f1"><img src="http://www4.clustrmaps.com/stats/maps-no_clusters/mkaysi.github.com--thumb.jpg" alt="Locations of visitors to this page" /></a></noscript>
|
|
||||||
|
|
||||||
</HTML>
|
</HTML>
|
||||||
|
|
||||||
|
|||||||
@ -1,42 +1,28 @@
|
|||||||
<!DOCTYPE html><html>
|
<!DOCTYPE html>
|
||||||
<head><meta name="description" content="Guide for getting Flash and PDF plugins from Google Chrome to Chromium" /> <meta name="keywords" content="Google,Chrome,Chromium,Flash,Player,PDF,Linux,Debian,Ubuntu" /> <meta name="author" content="Mika Suomalainen" /> <meta charset="UTF-8" /> <link rel="canonical" href="http://mkaysi.github.com/articles/guides/ChromiumFlashPDF.html"> <title>Getting Google Chrome integrated flash and PDF player to Chromium</title> <link rel="stylesheet" type="text/css" href="../../tyyli.css" /></head>
|
<html>
|
||||||
<h1 id="what-do-you-need"
|
<head>
|
||||||
>What do you need?</h1
|
<meta name="description" content="Guide for getting Flash and PDF plugins from Google Chrome to Chromium" /> <meta name="keywords" content="Google,Chrome,Chromium,Flash,Player,PDF,Linux,Debian,Ubuntu" /> <meta name="author" content="Mika Suomalainen" /> <meta charset="UTF-8" /> <link rel="canonical" href="http://mkaysi.github.com/articles/guides/ChromiumFlashPDF.html">
|
||||||
><p
|
<title>
|
||||||
>You need <a href="https://www.google.com/intl/en/chrome/browser/"
|
Getting Google Chrome integrated flash and PDF player to Chromium
|
||||||
>Google Chrome</a
|
</title>
|
||||||
> and <a href="http://www.chromium.org/Home"
|
<link rel="stylesheet" type="text/css" href="../../tyyli.css" />
|
||||||
>Chromium</a
|
</head>
|
||||||
>. <a href="https://www.google.com/intl/en/chrome/browser/"
|
|
||||||
>Google Chrome</a
|
<h1 id="what-do-you-need">What do you need?</h1>
|
||||||
> contains the plugins, which you need and why would you want to get them into <a href="http://www.chromium.org/Home"
|
<p>You need <a href="https://www.google.com/intl/en/chrome/browser/">Google Chrome</a> and <a href="http://www.chromium.org/Home">Chromium</a>. <a href="https://www.google.com/intl/en/chrome/browser/">Google Chrome</a> contains the plugins, which you need and why would you want to get them into <a href="http://www.chromium.org/Home">Chromium</a> if you didn't have it?</p>
|
||||||
>Chromium</a
|
<p><a href="http://www.chromium.org/Home">Chromium</a> is probably packaged in your distribution and can be found either in package "chromium" (in Debian 7 (Wheezy) and above) or "chromium-browser" (Debian 6 (Squeeze)).</p>
|
||||||
> if you didn't have it?</p
|
<h1 id="how-to-get-the-plugins-into-chromium.">How to get the plugins into Chromium.</h1>
|
||||||
><p
|
<p>After you have installed Chrome and Chromium, you should have directories "/opt/google/chrome" and "/usr/lib/chromium".</p>
|
||||||
><a href="http://www.chromium.org/Home"
|
<p>The plugins, which you want are files "libpdf.so" and "libgcflashplayer.so" in the /opt/google/chrome" directory.</p>
|
||||||
>Chromium</a
|
<p>The easiest way to get them into Chromium is to symlink them with the following commands:</p>
|
||||||
> is probably packaged in your distribution and can be found either in package "chromium" (in Debian 7 (Wheezy) and above) or "chromium-browser" (Debian 6 (Squeeze)).</p
|
<pre><code>ln -s /opt/google/chrome/libpdf.so /usr/lib/chromium/
|
||||||
><h1 id="how-to-get-the-plugins-into-chromium."
|
ln -s /opt/google/chrome/libgcflashplayer.so /usr/lib/chromium</code></pre>
|
||||||
>How to get the plugins into Chromium.</h1
|
<p>Remember to keep Google Chrome installed, because when package managment upgrades it, those plugins are also upgraded in both Chrome and Chromium (because Chromium is same as Chrome with those plugins).</p>
|
||||||
><p
|
<p>Now open (or if it was already running, restart) Chromium and go to <a href="about:plugins">about:plugins</a>. There you should see two new plugins called "Chrome PDF Viewer" and "Flash". Enable them if they aren't enabled and they both should work now whenever you go into page with Flash script or PDF file.</p>
|
||||||
>After you have installed Chrome and Chromium, you should have directories "/opt/google/chrome" and "/usr/lib/chromium".</p
|
<p>NOTE: Flash might need you to install package flashplugin-nonfree from the repositories. I am not fully sure about this.</p>
|
||||||
><p
|
<div id="clustrmaps-widget"></div><script type="text/javascript">var _clustrmaps = {'url' : 'http://mkaysi.github.com/', 'user' : 1040881, 'server' : '4', 'id' : 'clustrmaps-widget', 'version' : 1, 'date' : '2012-09-02', 'lang' : 'en', 'corners' : 'square' };(function (){ var s = document.createElement('script'); s.type = 'text/javascript'; s.async = true; s.src = 'http://www4.clustrmaps.com/counter/map.js'; var x = document.getElementsByTagName('script')[0]; x.parentNode.insertBefore(s, x);})();</script><noscript>
|
||||||
>The plugins, which you want are files "libpdf.so" and "libgcflashplayer.so" in the /opt/google/chrome" directory.</p
|
<a href="http://www4.clustrmaps.com/user/bd3fe1f1"><img src="http://www4.clustrmaps.com/stats/maps-no_clusters/mkaysi.github.com--thumb.jpg" alt="Locations of visitors to this page" /></a>
|
||||||
><p
|
</noscript>
|
||||||
>The easiest way to get them into Chromium is to symlink them with the following commands:</p
|
|
||||||
><p
|
|
||||||
><code
|
|
||||||
>ln -s /opt/google/chrome/libpdf.so /usr/lib/chromium/ ln -s /opt/google/chrome/libgcflashplayer.so /usr/lib/chromium</code
|
|
||||||
></p
|
|
||||||
><p
|
|
||||||
>Remember to keep Google Chrome installed, because when package managment upgrades it, those plugins are also upgraded in both Chrome and Chromium (because Chromium is same as Chrome with those plugins).</p
|
|
||||||
><p
|
|
||||||
>Now open (or if it was already running, restart) Chromium and go to <a href="about:plugins"
|
|
||||||
>about:plugins</a
|
|
||||||
>. There you should see two new plugins called "Chrome PDF Viewer" and "Flash". Enable them if they aren't enabled and they both should work now whenever you go into page with Flash script or PDF file.</p
|
|
||||||
><p
|
|
||||||
>NOTE: Flash might need you to install package flashplugin-nonfree from the repositories. I am not fully sure about this.</p
|
|
||||||
><div id="clustrmaps-widget"></div><script type="text/javascript">var _clustrmaps = {'url' : 'http://mkaysi.github.com/', 'user' : 1040881, 'server' : '4', 'id' : 'clustrmaps-widget', 'version' : 1, 'date' : '2012-09-02', 'lang' : 'en', 'corners' : 'square' };(function (){ var s = document.createElement('script'); s.type = 'text/javascript'; s.async = true; s.src = 'http://www4.clustrmaps.com/counter/map.js'; var x = document.getElementsByTagName('script')[0]; x.parentNode.insertBefore(s, x);})();</script><noscript><a href="http://www4.clustrmaps.com/user/bd3fe1f1"><img src="http://www4.clustrmaps.com/stats/maps-no_clusters/mkaysi.github.com--thumb.jpg" alt="Locations of visitors to this page" /></a></noscript>
|
|
||||||
|
|
||||||
</HTML>
|
</HTML>
|
||||||
|
|
||||||
|
|||||||
@ -1,123 +1,60 @@
|
|||||||
<!DOCTYPE html><html>
|
<!DOCTYPE html>
|
||||||
<head><meta name="description" content="Enigmail guide" /> <meta name="keywords" content="Thunderbird,Icedove, Enigmail,GnuPG,gpg" /> <meta name="author" content="Mika Suomalainen" /> <meta charset="UTF-8" /> <link rel="canonical" href="http://mkaysi.github.com/articles/guides/GPG/Enigmail.html"> <title>Enigmail guide</title> <link rel="stylesheet" type="text/css" href="../../../tyyli.css" /></head>
|
<html>
|
||||||
<h1 id="quick-enigmail-guide."
|
<head>
|
||||||
>Quick Enigmail guide.</h1
|
<meta name="description" content="Enigmail guide" /> <meta name="keywords" content="Thunderbird,Icedove, Enigmail,GnuPG,gpg" /> <meta name="author" content="Mika Suomalainen" /> <meta charset="UTF-8" /> <link rel="canonical" href="http://mkaysi.github.com/articles/guides/GPG/Enigmail.html">
|
||||||
><h1 id="what-do-you-need"
|
<title>
|
||||||
>What do you need</h1
|
Enigmail guide
|
||||||
><p
|
</title>
|
||||||
>This depends on your OS. You should also read my previous guides about <a href="GPG.html"
|
<link rel="stylesheet" type="text/css" href="../../../tyyli.css" />
|
||||||
>GPG</a
|
</head>
|
||||||
> and <a href="../Thunderbird-Icedove.html"
|
|
||||||
>Icedove / Thunderbird</a
|
<h1 id="quick-enigmail-guide.">Quick Enigmail guide.</h1>
|
||||||
>.</p
|
<h1 id="what-do-you-need">What do you need</h1>
|
||||||
><h2 id="debian-based-distributins"
|
<p>This depends on your OS. You should also read my previous guides about <a href="GPG.html">GPG</a> and <a href="../Thunderbird-Icedove.html">Icedove / Thunderbird</a>.</p>
|
||||||
>Debian based distributins</h2
|
<h2 id="debian-based-distributins">Debian based distributins</h2>
|
||||||
><p
|
<p>You need at least packages icedove or thunderbird and enigmail, but I recommend you to install gnupg2 and pinentry packages too.</p>
|
||||||
>You need at least packages icedove or thunderbird and enigmail, but I recommend you to install gnupg2 and pinentry packages too.</p
|
<blockquote>
|
||||||
><blockquote
|
<p>aptitude install thunderbird enigmail gnupg2 pinentry-curses pinentry-gtk2 pinentry-qt4</p>
|
||||||
><p
|
</blockquote>
|
||||||
>aptitude install thunderbird enigmail gnupg2 pinentry-curses pinentry-gtk2 pinentry-qt4</p
|
<p>NOTE: In Debian Thunderbird is called Icedove and the package is icedove.</p>
|
||||||
></blockquote
|
<h2 id="mac-os-x">Mac OS X</h2>
|
||||||
><p
|
<p>You need <a href="http://www.gpgtools.org/">GPG-tools</a>, <a href="https://www.mozilla.org/en-US/thunderbird/">Thunderbird</a> and <a href="http://enigmail.mozdev.org/home/index.php.html">Enigmail</a></p>
|
||||||
>NOTE: In Debian Thunderbird is called Icedove and the package is icedove.</p
|
<h2 id="windows">Windows</h2>
|
||||||
><h2 id="mac-os-x"
|
<p>You need <a href="http://www.gpg4win.org/">GPG4Win</a>, <a href="https://www.mozilla.org/en-US/thunderbird/">Thunderbird</a> and <a href="http://enigmail.mozdev.org/home/index.php.html">Enigmail</a>.</p>
|
||||||
>Mac OS X</h2
|
<h1 id="running-the-enigmail-wizard.">Running the Enigmail wizard.</h1>
|
||||||
><p
|
<p>If Enigmail wizard doesn't appear by itself, open it manually from OpenPGP (menu) --> Enigmail wizard.</p>
|
||||||
>You need <a href="http://www.gpgtools.org/"
|
<p>NOTE: Allow wizard to do changes, which it wants.</p>
|
||||||
>GPG-tools</a
|
<h2 id="enable-viewing-messages-in-original-html.">Enable viewing messages in original HTML.</h2>
|
||||||
>, <a href="https://www.mozilla.org/en-US/thunderbird/"
|
<p>You probably want to see the HTML in case the message has been sent using HTML.</p>
|
||||||
>Thunderbird</a
|
<p>You can see the messages in original HTML easily. Open View (menu) --> Message body as --> Original HTML.</p>
|
||||||
> and <a href="http://enigmail.mozdev.org/home/index.php.html"
|
<h2 id="if-the-wizard-fails">If the wizard fails</h2>
|
||||||
>Enigmail</a
|
<h3 id="sending-plaintext">Sending plaintext</h3>
|
||||||
></p
|
<p>This is documented in my <a href="../Thunderbird-Icedove.html#sending-utf-8">Icedove / Thunderbird guide</a>.</p>
|
||||||
><h2 id="windows"
|
<h3 id="signing-by-default.">Signing by default.</h3>
|
||||||
>Windows</h2
|
<p>Open Edit --> Account Settings --> OpenPGP security and select "Enable OpenPG support (Enigmail) with this user information". Then select "Use specific OpenPGP key" and press the "select key" button. Now just select your private key.</p>
|
||||||
><p
|
<p>After you have selected the key, I recommend you to select the first and the second boxes, which are about signing.</p>
|
||||||
>You need <a href="http://www.gpg4win.org/"
|
<p>Remember to do this for multiple identities. Select the account and then click the "manage identities" button.</p>
|
||||||
>GPG4Win</a
|
<h2 id="sending-utf-8">Sending UTF-8</h2>
|
||||||
>, <a href="https://www.mozilla.org/en-US/thunderbird/"
|
<p>I have documented this in my <a href="../Thunderbird-Icedove.html#sending-utf-8">Icedove / Thunderbird guide</a>.</p>
|
||||||
>Thunderbird</a
|
<p>This only changes the charset line to UTF-8 or removes the mentioning of charset in signature.</p>
|
||||||
> and <a href="http://enigmail.mozdev.org/home/index.php.html"
|
<h1 id="testing-that-everything-works">Testing that everything works</h1>
|
||||||
>Enigmail</a
|
<p>Adele is PGP email bot. You can send email to it and it will tell you if it can decrypt your email or is it signed.</p>
|
||||||
>.</p
|
<p>You can get the PGP key of Adele by running</p>
|
||||||
><h1 id="running-the-enigmail-wizard."
|
<blockquote>
|
||||||
>Running the Enigmail wizard.</h1
|
<p>gpg2 --keyserver pool.sks-keyservers.net --recv-keys 92AB3FF7</p>
|
||||||
><p
|
</blockquote>
|
||||||
>If Enigmail wizard doesn't appear by itself, open it manually from OpenPGP (menu) --> Enigmail wizard.</p
|
<p>Just send your email to adele-en@gnupp.de and it will reply shortly.</p>
|
||||||
><p
|
<h1 id="sending-pgpmime-instead-of-pgpinline">Sending PGP/MIME instead of PGP/INLINE</h1>
|
||||||
>NOTE: Allow wizard to do changes, which it wants.</p
|
<p>PGP/MIME puts the signature to signature.asc ataachment and PGP/INLINE into "mess" in the bottom of email.</p>
|
||||||
><h2 id="enable-viewing-messages-in-original-html."
|
<p>WARNING: This might not work with some mailing lists (for example Ubuntu, Mozdev and GnuPG mailing lists)!</p>
|
||||||
>Enable viewing messages in original HTML.</h2
|
<p>There is open bug report about PGP/MIME not working on Ubuntu MLs at LaunchPad, <a href="https://bugs.launchpad.net/ubuntu/+bug/996581">996581</a></p>
|
||||||
><p
|
<p>NOTE: If you want to sign emails and use HTML at the same time, you <em>must</em> use PGP/MIME or otherwise your signature cannot be verified!</p>
|
||||||
>You probably want to see the HTML in case the message has been sent using HTML.</p
|
<p>To send PGP/MIME by default, open Edit --> Account Settings --> OpenPGP security and check "Use always PGP/MIME".</p>
|
||||||
><p
|
<p>Remember to check to do this for your all identities in case you have more than one of them. Edit --> Account Settings --> "Manage Identities..." button and after selecting identity, you can find OpenPGP security tab.</p>
|
||||||
>You can see the messages in original HTML easily. Open View (menu) --> Message body as --> Original HTML.</p
|
<h1 id="openpgp-headers.">OpenPGP headers.</h1>
|
||||||
><h2 id="if-the-wizard-fails"
|
<p>To enable sending OpenPGP headers, return to OpenPGP settings (mentioned above) and click "advanced".</p>
|
||||||
>If the wizard fails</h2
|
<p>Select the both checkboxes and write URL where your key is located. If you don't have homepage, you can link to webui of your preferred keyserver.</p>
|
||||||
><h3 id="sending-plaintext"
|
<p>These headers appear in email source like this:</p>
|
||||||
>Sending plaintext</h3
|
<pre><code>OpenPGP: id=82A46728;
|
||||||
><p
|
url=http://mkaysi.github.com/PGP/key.txt</code></pre>
|
||||||
>This is documented in my <a href="../Thunderbird-Icedove.html#sending-utf-8"
|
<p><a rel="license" href="http://creativecommons.org/licenses/by-nc-sa/3.0/"><img alt="Creative Commons License" style="border-width:0" src="http://i.creativecommons.org/l/by-nc-sa/3.0/88x31.png" /></a><br /><span xmlns:dct="http://purl.org/dc/terms/" property="dct:title">Enigmail guide</span> is licensed under a <a rel="license" href="http://creativecommons.org/licenses/by-nc-sa/3.0/">Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported License</a>.<br />Based on a work at <a xmlns:dct="http://purl.org/dc/terms/" href="http://mkaysi.github.com/articles/guides/GPG/Enigmail.html" rel="dct:source">mkaysi.github.com</a>.</p>
|
||||||
>Icedove / Thunderbird guide</a
|
|
||||||
>.</p
|
|
||||||
><h3 id="signing-by-default."
|
|
||||||
>Signing by default.</h3
|
|
||||||
><p
|
|
||||||
>Open Edit --> Account Settings --> OpenPGP security and select "Enable OpenPG support (Enigmail) with this user information". Then select "Use specific OpenPGP key" and press the "select key" button. Now just select your private key.</p
|
|
||||||
><p
|
|
||||||
>After you have selected the key, I recommend you to select the first and the second boxes, which are about signing.</p
|
|
||||||
><p
|
|
||||||
>Remember to do this for multiple identities. Select the account and then click the "manage identities" button.</p
|
|
||||||
><h2 id="sending-utf-8"
|
|
||||||
>Sending UTF-8</h2
|
|
||||||
><p
|
|
||||||
>I have documented this in my <a href="../Thunderbird-Icedove.html#sending-utf-8"
|
|
||||||
>Icedove / Thunderbird guide</a
|
|
||||||
>.</p
|
|
||||||
><p
|
|
||||||
>This only changes the charset line to UTF-8 or removes the mentioning of charset in signature.</p
|
|
||||||
><h1 id="testing-that-everything-works"
|
|
||||||
>Testing that everything works</h1
|
|
||||||
><p
|
|
||||||
>Adele is PGP email bot. You can send email to it and it will tell you if it can decrypt your email or is it signed.</p
|
|
||||||
><p
|
|
||||||
>You can get the PGP key of Adele by running</p
|
|
||||||
><blockquote
|
|
||||||
><p
|
|
||||||
>gpg2 --keyserver pool.sks-keyservers.net --recv-keys 92AB3FF7</p
|
|
||||||
></blockquote
|
|
||||||
><p
|
|
||||||
>Just send your email to adele-en@gnupp.de and it will reply shortly.</p
|
|
||||||
><h1 id="sending-pgpmime-instead-of-pgpinline"
|
|
||||||
>Sending PGP/MIME instead of PGP/INLINE</h1
|
|
||||||
><p
|
|
||||||
>PGP/MIME puts the signature to signature.asc ataachment and PGP/INLINE into "mess" in the bottom of email.</p
|
|
||||||
><p
|
|
||||||
>WARNING: This might not work with some mailing lists (for example Ubuntu, Mozdev and GnuPG mailing lists)!</p
|
|
||||||
><p
|
|
||||||
>There is open bug report about PGP/MIME not working on Ubuntu MLs at LaunchPad, <a href="https://bugs.launchpad.net/ubuntu/+bug/996581"
|
|
||||||
>996581</a
|
|
||||||
></p
|
|
||||||
><p
|
|
||||||
>NOTE: If you want to sign emails and use HTML at the same time, you <em
|
|
||||||
>must</em
|
|
||||||
> use PGP/MIME or otherwise your signature cannot be verified!</p
|
|
||||||
><p
|
|
||||||
>To send PGP/MIME by default, open Edit --> Account Settings --> OpenPGP security and check "Use always PGP/MIME".</p
|
|
||||||
><p
|
|
||||||
>Remember to check to do this for your all identities in case you have more than one of them. Edit --> Account Settings --> "Manage Identities..." button and after selecting identity, you can find OpenPGP security tab.</p
|
|
||||||
><h1 id="openpgp-headers."
|
|
||||||
>OpenPGP headers.</h1
|
|
||||||
><p
|
|
||||||
>To enable sending OpenPGP headers, return to OpenPGP settings (mentioned above) and click "advanced".</p
|
|
||||||
><p
|
|
||||||
>Select the both checkboxes and write URL where your key is located. If you don't have homepage, you can link to webui of your preferred keyserver.</p
|
|
||||||
><p
|
|
||||||
>These headers appear in email source like this:</p
|
|
||||||
><p
|
|
||||||
><code
|
|
||||||
>OpenPGP: id=82A46728; url=http://mkaysi.github.com/PGP/key.txt</code
|
|
||||||
></p
|
|
||||||
><p
|
|
||||||
><a rel="license" href="http://creativecommons.org/licenses/by-nc-sa/3.0/"><img alt="Creative Commons License" style="border-width:0" src="http://i.creativecommons.org/l/by-nc-sa/3.0/88x31.png" /></a><br /><span xmlns:dct="http://purl.org/dc/terms/" property="dct:title">Enigmail guide</span> is licensed under a <a rel="license" href="http://creativecommons.org/licenses/by-nc-sa/3.0/">Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported License</a>.<br />Based on a work at <a xmlns:dct="http://purl.org/dc/terms/" href="http://mkaysi.github.com/articles/guides/GPG/Enigmail.html" rel="dct:source">mkaysi.github.com</a>.</p
|
|
||||||
>
|
|
||||||
|
|||||||
@ -1,515 +1,342 @@
|
|||||||
<!DOCTYPE html><html>
|
<!DOCTYPE html>
|
||||||
<head><meta name="description" content="GnuPG guide" /> <meta name="keywords" content="gpg,gnupg,terminal" /> <meta name="author" content="Mika Suomalainen" /> <meta charset="UTF-8" /> <link rel="canonical" href="http://mkaysi.github.com/articles/guides/GPG/GPG.html"> <link rel="stylesheet" type="text/css" href="../../../tyyli.css" /> <title>GPG guide</title></head>
|
<html>
|
||||||
<h1 id="quick-gpg-guide"
|
<head>
|
||||||
>Quick GPG guide</h1
|
<meta name="description" content="GnuPG guide" /> <meta name="keywords" content="gpg,gnupg,terminal" /> <meta name="author" content="Mika Suomalainen" /> <meta charset="UTF-8" /> <link rel="canonical" href="http://mkaysi.github.com/articles/guides/GPG/GPG.html"> <link rel="stylesheet" type="text/css" href="../../../tyyli.css" />
|
||||||
><p
|
<title>
|
||||||
>Note: If gpg2 gives you error about invalid/unknown/etc. command, use gpg instead.</p
|
GPG guide
|
||||||
><h2 id="what-do-you-need"
|
</title>
|
||||||
>What do you need:?</h2
|
</head>
|
||||||
><h3 id="linux-debian-based-distributions"
|
|
||||||
>Linux (Debian based distributions)</h3
|
<h1 id="quick-gpg-guide">Quick GPG guide</h1>
|
||||||
><p
|
<p>Note: If gpg2 gives you error about invalid/unknown/etc. command, use gpg instead.</p>
|
||||||
>You need at least package gnupg, but I recommend installing packages icedove enigmail pinentry pinentry-curses pinentry-gtk2 pinentry-qt4 signing-party and gnupg2.</p
|
<h2 id="what-do-you-need">What do you need:?</h2>
|
||||||
><blockquote
|
<h3 id="linux-debian-based-distributions">Linux (Debian based distributions)</h3>
|
||||||
><h1
|
<p>You need at least package gnupg, but I recommend installing packages icedove enigmail pinentry pinentry-curses pinentry-gtk2 pinentry-qt4 signing-party and gnupg2.</p>
|
||||||
>aptitude install gnupg gnupg2 icedove enigmail pinentry-curses pinentry-gtk2 pinentry-qt4 signing-party gnupg2</h1
|
<blockquote>
|
||||||
></blockquote
|
<h1>aptitude install gnupg gnupg2 icedove enigmail pinentry-curses pinentry-gtk2 pinentry-qt4 signing-party gnupg2</h1>
|
||||||
><p
|
</blockquote>
|
||||||
>NOTE: If you aren't using Debian, install package "thunderbird" instead of "icedove".</p
|
<p>NOTE: If you aren't using Debian, install package "thunderbird" instead of "icedove".</p>
|
||||||
><h3 id="mac-os-x"
|
<h3 id="mac-os-x">Mac OS X</h3>
|
||||||
>Mac OS X</h3
|
<p>You need at least <a href="http://www.gpgtools.org/">GPG-tools</a>, but I also recommend you to install <a href="https://www.mozilla.org/en-US/thunderbird/">Thunderbird</a> and <a href="Enigmail.html">Enigmail</a>.</p>
|
||||||
><p
|
<h3 id="windows">Windows</h3>
|
||||||
>You need at least <a href="http://www.gpgtools.org/"
|
<p>You need at least <a href="http://www.gpg4win.org/">GPG4Win</a>, but I recommend installing <a href="https://www.mozilla.org/en-US/thunderbird/">Thunderbird</a> and <a href="Enigmail.html">Enigmail</a> too.</p>
|
||||||
>GPG-tools</a
|
<h3 id="step-1">Step 1</h3>
|
||||||
>, but I also recommend you to install <a href="https://www.mozilla.org/en-US/thunderbird/"
|
<p>This depends are you generating a new key or importing old key.</p>
|
||||||
>Thunderbird</a
|
<h4 id="step-1-generating-a-new-key">Step 1: Generating a new key</h4>
|
||||||
> and <a href="Enigmail.html"
|
<p>Open terminal (or cmd.exe if you are using Windows) and run</p>
|
||||||
>Enigmail</a
|
<blockquote>
|
||||||
>.</p
|
<p>gpg2 --gen-key</p>
|
||||||
><h3 id="windows"
|
</blockquote>
|
||||||
>Windows</h3
|
<p>Notes:</p>
|
||||||
><p
|
<ol class="incremental" style="list-style-type: decimal">
|
||||||
>You need at least <a href="http://www.gpg4win.org/"
|
<li><p>When you are asked for key size, enter the maximum size.</p></li>
|
||||||
>GPG4Win</a
|
<li><p>When you are asked for email address, leave it empty. We will add it later.</p></li>
|
||||||
>, but I recommend installing <a href="https://www.mozilla.org/en-US/thunderbird/"
|
</ol>
|
||||||
>Thunderbird</a
|
<h5 id="adding-new-uids-user-identities">Adding new UIDs (User IDentities)</h5>
|
||||||
> and <a href="Enigmail.html"
|
<p>First you need to find out the ID of the key, which you just created. You can see it with two commands.</p>
|
||||||
>Enigmail</a
|
<blockquote>
|
||||||
> too.</p
|
<p>gpg2 --list-keys</p>
|
||||||
><h3 id="step-1"
|
</blockquote>
|
||||||
>Step 1</h3
|
<p>Example output:</p>
|
||||||
><p
|
<pre><code>% gpg --list-keys
|
||||||
>This depends are you generating a new key or importing old key.</p
|
pub 4096R/82A46728 2012-03-27
|
||||||
><h4 id="step-1-generating-a-new-key"
|
uid Mika Suomalainen
|
||||||
>Step 1: Generating a new key</h4
|
sub 4096R/A4271AC5 2012-03-27</code></pre>
|
||||||
><p
|
<p>or</p>
|
||||||
>Open terminal (or cmd.exe if you are using Windows) and run</p
|
<blockquote>
|
||||||
><blockquote
|
<p>gpg2 --fingerprint</p>
|
||||||
><p
|
</blockquote>
|
||||||
>gpg2 --gen-key</p
|
<p>Example output:</p>
|
||||||
></blockquote
|
<pre><code>% gpg2 --fingerprint
|
||||||
><p
|
pub 4096R/82A46728 2012-03-27
|
||||||
>Notes:</p
|
Key fingerprint = 24BC 1573 B8EE D666 D10A AA65 4DB5 3CFE 82A4 6728
|
||||||
><ol class="incremental" style="list-style-type: decimal"
|
uid Mika Suomalainen
|
||||||
><li
|
sub 4096R/A4271AC5 2012-03-27</code></pre>
|
||||||
><p
|
<p>The second command also shows the key fingerprint which is usually used to identify the key. Note that you can see both keyid formats in fingerprint. The last eght characters in keyid are the short format and the last sixteen characters are the long format. If you want to see the long keyid, run</p>
|
||||||
>When you are asked for key size, enter the maximum size.</p
|
<blockquote>
|
||||||
></li
|
<p>gpg2 --list-keys --keyid-format long</p>
|
||||||
><li
|
</blockquote>
|
||||||
><p
|
<p>Now add the uid with the following commands:</p>
|
||||||
>When you are asked for email address, leave it empty. We will add it later.</p
|
<blockquote>
|
||||||
></li
|
<p>gpg2 --edit-key KEYID</p>
|
||||||
></ol
|
</blockquote>
|
||||||
><h5 id="adding-new-uids-user-identities"
|
<p>and enter command:</p>
|
||||||
>Adding new UIDs (User IDentities)</h5
|
<blockquote>
|
||||||
><p
|
<p>adduid</p>
|
||||||
>First you need to find out the ID of the key, which you just created. You can see it with two commands.</p
|
</blockquote>
|
||||||
><blockquote
|
<p>and you are asked for name and email address again. This time you can give them both.</p>
|
||||||
><p
|
<p>If that UID which has only your first name isn't the first UID, select it by giving command, which is the number of the UID, for example:</p>
|
||||||
>gpg2 --list-keys</p
|
<blockquote>
|
||||||
></blockquote
|
<p>2</p>
|
||||||
><p
|
</blockquote>
|
||||||
>Example output:</p
|
<p>and * appears to that UID to tell you that that UID is selected. Now give command</p>
|
||||||
><p
|
<blockquote>
|
||||||
><code
|
<p>primary</p>
|
||||||
>% gpg --list-keys pub 4096R/82A46728 2012-03-27 uid Mika Suomalainen sub 4096R/A4271AC5 2012-03-27</code
|
</blockquote>
|
||||||
></p
|
<p>to make it the primary UID again.</p>
|
||||||
><p
|
<p>Now you can exit from GPG with</p>
|
||||||
>or</p
|
<blockquote>
|
||||||
><blockquote
|
<p>quit</p>
|
||||||
><p
|
</blockquote>
|
||||||
>gpg2 --fingerprint</p
|
<p>and confirm to save changes with</p>
|
||||||
></blockquote
|
<blockquote>
|
||||||
><p
|
<p>y</p>
|
||||||
>Example output:</p
|
</blockquote>
|
||||||
><p
|
<h6 id="setting-preferred-keyserver-of-the-key.">Setting preferred keyserver of the key.</h6>
|
||||||
><code
|
<p>Preferred keyserver is where the key is refreshed when someone runs "gpg2 --refresh-keys".</p>
|
||||||
>% gpg2 --fingerprint pub 4096R/82A46728 2012-03-27 Key fingerprint = 24BC 1573 B8EE D666 D10A AA65 4DB5 3CFE 82A4 6728 uid Mika Suomalainen sub 4096R/A4271AC5 2012-03-27</code
|
<p>To set it run</p>
|
||||||
></p
|
<blockquote>
|
||||||
><p
|
<p>gpg2 --edit-key KEYID</p>
|
||||||
>The second command also shows the key fingerprint which is usually used to identify the key. Note that you can see both keyid formats in fingerprint. The last eght characters in keyid are the short format and the last sixteen characters are the long format. If you want to see the long keyid, run</p
|
</blockquote>
|
||||||
><blockquote
|
<blockquote>
|
||||||
><p
|
<p>keyserver</p>
|
||||||
>gpg2 --list-keys --keyid-format long</p
|
</blockquote>
|
||||||
></blockquote
|
<p>and enter the keyserver address, for example hkp://pool.sks-keyservers.net (I recommend this keyserver).</p>
|
||||||
><p
|
<h4 id="step-1-importing-old-key">Step 1: Importing old key</h4>
|
||||||
>Now add the uid with the following commands:</p
|
<p>You can import your old private key same way as you import public keys. This means:</p>
|
||||||
><blockquote
|
<blockquote>
|
||||||
><p
|
<p>gpg2 --import key.asc</p>
|
||||||
>gpg2 --edit-key KEYID</p
|
</blockquote>
|
||||||
></blockquote
|
<p>Where key.asc is the file, which contains the (private) key(s)</p>
|
||||||
><p
|
<h3 id="step-2-backing-up-the-key">Step 2: backing up the key</h3>
|
||||||
>and enter command:</p
|
<p>You need to know your keyid. I told you how to get it in "Adding new uids". To back up your private key, run</p>
|
||||||
><blockquote
|
<blockquote>
|
||||||
><p
|
<p>gpg2 --export-secret-keys -a KEYID</p>
|
||||||
>adduid</p
|
</blockquote>
|
||||||
></blockquote
|
<p>and save the output of that command to file. If you are on Linux or Mac OS X, you can forward the output directly to file, with</p>
|
||||||
><p
|
<blockquote>
|
||||||
>and you are asked for name and email address again. This time you can give them both.</p
|
<p>gpg2 --export-secret-keys -a KEYID > privatekey.asc</p>
|
||||||
><p
|
</blockquote>
|
||||||
>If that UID which has only your first name isn't the first UID, select it by giving command, which is the number of the UID, for example:</p
|
<p>The previous command creates a file called "privatekey.asc", which contains the output of the first command.</p>
|
||||||
><blockquote
|
<h3 id="step-3-configuring-gpg2">Step 3: Configuring gpg(2)</h3>
|
||||||
><p
|
<p>The configuring of gpg happens in gpg configuration directory. In Linux and Mac this is ~/.gnupg/gpg.conf.</p>
|
||||||
>2</p
|
<p>I recommend you to add following lines to it. I'll try to explain them with my best ability.</p>
|
||||||
></blockquote
|
<p><code># Options for GnuPG # Copyright 1998, 1999, 2000, 2001, 2002, 2003, # 2012— Mika Suomalainen (Mkaysi) https://raw.github.com/Mkaysi/shell-things/master/gnupg/gpg.conf # 2010 Free Software Foundation, Inc. # # This file is free software; as a special exception the author gives # unlimited permission to copy and/or distribute it, with or without # modifications, as long as this notice is preserved. # # This file is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY, to the extent permitted by law; without even the # implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.</code> License information so I won't break license of the default config file, which I have appended.</p>
|
||||||
><p
|
<blockquote>
|
||||||
>and * appears to that UID to tell you that that UID is selected. Now give command</p
|
<p>default-key KEYID</p>
|
||||||
><blockquote
|
</blockquote>
|
||||||
><p
|
<p>So KEYID is used by default if there are multiple secret keys.</p>
|
||||||
>primary</p
|
<pre><code>default-recipient-self
|
||||||
></blockquote
|
encrypt-to KEYID</code></pre>
|
||||||
><p
|
<p>So everything what you encrypt is also encrypted to you.</p>
|
||||||
>to make it the primary UID again.</p
|
<blockquote>
|
||||||
><p
|
<p>keyid-format 0xLONG</p>
|
||||||
>Now you can exit from GPG with</p
|
</blockquote>
|
||||||
><blockquote
|
<p>So keyids are shown in the longest format, including 0x prefix, which marks them as hexadecimanls.</p>
|
||||||
><p
|
<p>Example outputs from --list-keys and gpg --fingerprint after setting 0xLONG as keyid format.</p>
|
||||||
>quit</p
|
<p>After you set 0xLONG as keyid-format, keys appear like 0x4DB53CFE82A46728 instead of 82A46728.</p>
|
||||||
></blockquote
|
<blockquote>
|
||||||
><p
|
<p>charset UTF-8</p>
|
||||||
>and confirm to save changes with</p
|
</blockquote>
|
||||||
><blockquote
|
<p>So UTF-8 is used as default character set and most of characters can be used.</p>
|
||||||
><p
|
<blockquote>
|
||||||
>y</p
|
<p>armor</p>
|
||||||
></blockquote
|
</blockquote>
|
||||||
><h6 id="setting-preferred-keyserver-of-the-key."
|
<p>So you don't need to specify -a to get ASCII armoured text.</p>
|
||||||
>Setting preferred keyserver of the key.</h6
|
<pre><code>keyserver hkp://pool.sks-keyservers.net
|
||||||
><p
|
keyserver-options auto-key-retrieve no-include-revoked verbose import-clean</code></pre>
|
||||||
>Preferred keyserver is where the key is refreshed when someone runs "gpg2 --refresh-keys".</p
|
<p>So default keyserver is specified and unknown keys are always received when something what requires missing key is procressses and revoked keys aren't included in search results and verbose output is used and signatures by unknown keys are automatically removed.</p>
|
||||||
><p
|
<p>By the way, you can find my gpg.conf <a href="https://raw.github.com/Mkaysi/shell-things/master/gnupg/gpg.conf">here</a>.</p>
|
||||||
>To set it run</p
|
<h4 id="group-lines">Group lines</h4>
|
||||||
><blockquote
|
<p>Group lines are a way to write email to one recepient and have it encrypted to multiple keys automatically.</p>
|
||||||
><p
|
<p>Example group line:</p>
|
||||||
>gpg2 --edit-key KEYID</p
|
<p>group touchlay-server@googlegroups.com=0x4DB53CFE82A46728 0x0BD622288449A12B 0x729DF464666CC0DD 0xCACC5B094EC00206</p>
|
||||||
></blockquote
|
<p>With that line, when recepient is touchlay-server@googlegroups.com, then emails are encrypted to those 4 keys.</p>
|
||||||
><blockquote
|
<p>NOTE: KEYIDs in group line should be in format 0xLONG. If you don't use that format by default, use "gpg2 --keyid-format 0xLONG --list-keys".</p>
|
||||||
><p
|
<p>See also my <a href="Enigmail.html">Enigmail</a> instructions about group lines.</p>
|
||||||
>keyserver</p
|
<h3 id="comments">Comments</h3>
|
||||||
></blockquote
|
<p>GPG can automatically add comments to signed and encrypted content. They are usually hidden by email clients, which support GPG.</p>
|
||||||
><p
|
<p>Example comment:</p>
|
||||||
>and enter the keyserver address, for example hkp://pool.sks-keyservers.net (I recommend this keyserver).</p
|
<pre><code>-----BEGIN PGP SIGNED MESSAGE-----
|
||||||
><h4 id="step-1-importing-old-key"
|
Hash: SHA1
|
||||||
>Step 1: Importing old key</h4
|
|
||||||
><p
|
Signed content.
|
||||||
>You can import your old private key same way as you import public keys. This means:</p
|
-----BEGIN PGP SIGNATURE-----
|
||||||
><blockquote
|
Version: GnuPG v2.0.19 (GNU/Linux)
|
||||||
><p
|
Comment: This is a comment.
|
||||||
>gpg2 --import key.asc</p
|
|
||||||
></blockquote
|
iQIcBAEBAgAGBQJP0ypzAAoJEE21PP6CpGcojpsP/jV8o398xaCOCtdk5gyZtSZG
|
||||||
><p
|
KYDbyV8dNk1jxyNb7yPuEHGdm2BNXuKDHoG1vOli1yfavDvZ7Ir6i6HqDINRt6QF
|
||||||
>Where key.asc is the file, which contains the (private) key(s)</p
|
TFcWQgurMtXEJ4zCbMwBHM5OCpRL0gtuK/ERZFWeA+zDuM/pDKWLcX9REriT5CaG
|
||||||
><h3 id="step-2-backing-up-the-key"
|
CWBBvCIf/C2imGqe3+KBKSy13pis7MXARCTHesTOV/z04vKfsVqh7+M60ss/sc48
|
||||||
>Step 2: backing up the key</h3
|
kkL7CR/RiovomeoDhWuwS63oDE49eG+hlMDswgehnx71bvYr2NBZ3qfls4utx3fj
|
||||||
><p
|
ro4ubRGW52tY9wIC1tZoNiqa/n9Z6jOIq76Vn5DaJQ1dKWn3MnA5Sv2ztV4GlaIO
|
||||||
>You need to know your keyid. I told you how to get it in "Adding new uids". To back up your private key, run</p
|
iTLkvavAe7KHVxDCKcHpI7vnj9JlahF1u8+JDHXbTePDE3MiQvK1uEK91EQP9kYT
|
||||||
><blockquote
|
EYQwuClDfVGNBgqORTzZUpszYrT1dCdLte+29RdkHzsC+32x540xLvkDFvkZ+92Y
|
||||||
><p
|
7LxCX83aKzIdAZmehNmSrzQAL+NCfMW3YjkvWOYoFFMd//nSVifCbxvRLsyv7npr
|
||||||
>gpg2 --export-secret-keys -a KEYID</p
|
Fowb/UnnZW3ScT/sFNJWH/xY5skDS8WZd3H6O7MJ8gHUeOR9YQepQX56kvSRVtbj
|
||||||
></blockquote
|
ncnVEtqLjlbMpHEFy9ykKgM6rzuRTzLRct7Tf787Ww4hgSN92lhetPZmi6BGcS1z
|
||||||
><p
|
ZRzFq367A+HsVMlihBjd
|
||||||
>and save the output of that command to file. If you are on Linux or Mac OS X, you can forward the output directly to file, with</p
|
=HKS4
|
||||||
><blockquote
|
-----END PGP SIGNATURE-----</code></pre>
|
||||||
><p
|
<p>To add comments, use "--comment" flag or add "comment" lines to gpg.conf:</p>
|
||||||
>gpg2 --export-secret-keys -a KEYID > privatekey.asc</p
|
<p>For example:</p>
|
||||||
></blockquote
|
<blockquote>
|
||||||
><p
|
<p>comment "Something"</p>
|
||||||
>The previous command creates a file called "privatekey.asc", which contains the output of the first command.</p
|
</blockquote>
|
||||||
><h3 id="step-3-configuring-gpg2"
|
<p>Appears as</p>
|
||||||
>Step 3: Configuring gpg(2)</h3
|
<pre><code>-----BEGIN PGP SIGNED MESSAGE-----
|
||||||
><p
|
Hash: SHA1
|
||||||
>The configuring of gpg happens in gpg configuration directory. In Linux and Mac this is ~/.gnupg/gpg.conf.</p
|
|
||||||
><p
|
|
||||||
>I recommend you to add following lines to it. I'll try to explain them with my best ability.</p
|
This is signed content, which has comment, which reads "Something".
|
||||||
><p
|
|
||||||
><code
|
-----BEGIN PGP SIGNATURE-----
|
||||||
># Options for GnuPG # Copyright 1998, 1999, 2000, 2001, 2002, 2003, # 2012— Mika Suomalainen (Mkaysi) https://raw.github.com/Mkaysi/shell-things/master/gnupg/gpg.conf # 2010 Free Software Foundation, Inc. # # This file is free software; as a special exception the author gives # unlimited permission to copy and/or distribute it, with or without # modifications, as long as this notice is preserved. # # This file is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY, to the extent permitted by law; without even the # implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.</code
|
Version: GnuPG v2.0.19 (GNU/Linux)
|
||||||
> License information so I won't break license of the default config file, which I have appended.</p
|
Comment: Something
|
||||||
><blockquote
|
|
||||||
><p
|
iQIcBAEBAgAGBQJP0yt8AAoJEE21PP6CpGcoHskP/jLift0y8tA7VnmbIyFfOr2J
|
||||||
>default-key KEYID</p
|
RVJfcc/cl8xvbnhSKIOa5rS47Z9MgVqf8KDY373E1CZMvOsdx4yPINMJb4901iBQ
|
||||||
></blockquote
|
71RCRcg45YUI+yWRlZ2+ZsE7NBgUWm2cdSbwfaWrxH2eL8zRN+G5c3qiAQu0pXY5
|
||||||
><p
|
Mc1MG6ZQQzz3v+SrYPB6aZn8R8uNQR6U1YfbhtG1daxIfzdbXQNqMi/pIDV+M5GY
|
||||||
>So KEYID is used by default if there are multiple secret keys.</p
|
IS3Wbbp57pvJ8R3EjvqMsDKv76L/ZFySlrAugQaZIj4lQVUzXhivBwzkaHslj6dP
|
||||||
><p
|
HSGamz3C4yX5GPe/QBJ8jgANAtmdx2+1IpoRRqiLrOOT48vRkCFM40VwjMVO4W+B
|
||||||
><code
|
wNg9BQUpB53/QBtpQ5kDHrpPA+6bS4QkzUIzMsMuSvF9w15vG+Ae7qozD/YTLeD/
|
||||||
>default-recipient-self encrypt-to KEYID</code
|
IBaRlqPIRI/CrOEfUfn0DE6bFKTMgf4WE5M8IZ2kBVAE/mBqicJ9QKI53it8Ru4M
|
||||||
></p
|
hznPzwtmQTHf02yaj06LjB1P0SYU3gjwioRN+3RVoCRC92rjW5gN4MBYR0jKydp6
|
||||||
><p
|
MHf2Mg+ped1BegBDEVD4FyDPw/LNmveZb5O8/KIpjdb9dMgP5uqDpvJEzS64OQf0
|
||||||
>So everything what you encrypt is also encrypted to you.</p
|
vtzYEnCrJW+/1ABuGoF2aKG7+i24gLt9re+jOb02dj5NxRc1tWmhVNVM/acwReVr
|
||||||
><blockquote
|
1ELecm6kOS0qlPF//OnU
|
||||||
><p
|
=Ilhi
|
||||||
>keyid-format 0xLONG</p
|
-----END PGP SIGNATURE-----</code></pre>
|
||||||
></blockquote
|
<p>Comments can be whatever you want. For example they can have link to your homepage or command to receive your key from keyserver etc.</p>
|
||||||
><p
|
<h3 id="step-4-sharing-your-public-key">Step 4: Sharing your public key</h3>
|
||||||
>So keyids are shown in the longest format, including 0x prefix, which marks them as hexadecimanls.</p
|
<p>There are two ways to share your key. I personally use and recommend them both.</p>
|
||||||
><p
|
<h4 id="without-keyservers">Without keyservers</h4>
|
||||||
>Example outputs from --list-keys and gpg --fingerprint after setting 0xLONG as keyid format.</p
|
<p>If you have homepage, it's recommended that you put your key there. My key can be found at <a href="../../PGP/key.txt">PGP/key.txt</a></p>
|
||||||
><p
|
<p>You can get your public key with command</p>
|
||||||
>After you set 0xLONG as keyid-format, keys appear like 0x4DB53CFE82A46728 instead of 82A46728.</p
|
<blockquote>
|
||||||
><blockquote
|
<p>gpg2 --export -a KEYID</p>
|
||||||
><p
|
</blockquote>
|
||||||
>charset UTF-8</p
|
<p>or if you use Linux and have installed package signing-party, you can use</p>
|
||||||
></blockquote
|
<blockquote>
|
||||||
><p
|
<p>pgp-clean KEYID</p>
|
||||||
>So UTF-8 is used as default character set and most of characters can be used.</p
|
</blockquote>
|
||||||
><blockquote
|
<p>to get your public key without signatures (I will explain them later). WARNING: pgp-clean seems to also remove encryption subkey.</p>
|
||||||
><p
|
<h4 id="with-keyservers">With keyservers</h4>
|
||||||
>armor</p
|
<p>If you followed my configuration, you are usng pool.sks-keyservers.net as your keyserver and you are automatically receiving unknown keys from t, whenever you try to verify something, what is signed with unknown key.</p>
|
||||||
></blockquote
|
<p>To send your public key to keyserver, run</p>
|
||||||
><p
|
<blockquote>
|
||||||
>So you don't need to specify -a to get ASCII armoured text.</p
|
<p>gpg2 --send-keys KEYID</p>
|
||||||
><p
|
</blockquote>
|
||||||
><code
|
<p>To receive key from keyserver, run</p>
|
||||||
>keyserver hkp://pool.sks-keyservers.net keyserver-options auto-key-retrieve no-include-revoked verbose import-clean</code
|
<blockquote>
|
||||||
></p
|
<p>gpg2 --recv-keys KEYID</p>
|
||||||
><p
|
</blockquote>
|
||||||
>So default keyserver is specified and unknown keys are always received when something what requires missing key is procressses and revoked keys aren't included in search results and verbose output is used and signatures by unknown keys are automatically removed.</p
|
<p>To search keys from keyserver, use</p>
|
||||||
><p
|
<blockquote>
|
||||||
>By the way, you can find my gpg.conf <a href="https://raw.github.com/Mkaysi/shell-things/master/gnupg/gpg.conf"
|
<p>gpg2 --search-keys QUERY WORDS</p>
|
||||||
>here</a
|
</blockquote>
|
||||||
>.</p
|
<p>or if you are using Linux and have packages signing-party and dialog installed, you can use</p>
|
||||||
><h4 id="group-lines"
|
<blockquote>
|
||||||
>Group lines</h4
|
<p>keylookup QUERY WORDS</p>
|
||||||
><p
|
</blockquote>
|
||||||
>Group lines are a way to write email to one recepient and have it encrypted to multiple keys automatically.</p
|
<h5 id="word-of-warning">Word of warning</h5>
|
||||||
><p
|
<p>Keyservers only append content. Information on keyserver cannot be removed. This means, that when you delete uid, signature or whatever, it reappears when you run</p>
|
||||||
>Example group line:</p
|
<blockquote>
|
||||||
><p
|
<p>gpg2 --refresh-keys</p>
|
||||||
>group touchlay-server@googlegroups.com=0x4DB53CFE82A46728 0x0BD622288449A12B 0x729DF464666CC0DD 0xCACC5B094EC00206</p
|
</blockquote>
|
||||||
><p
|
<p>or receive your key from keyserver again. Thought content (uids, signatures, keys etc.) can be revoked.</p>
|
||||||
>With that line, when recepient is touchlay-server@googlegroups.com, then emails are encrypted to those 4 keys.</p
|
<h1 id="you-can-now-move-to-icedove-thunderbird-guide-and-after-that-or-enigmail-guide-because-things-after-this-are-usually-done-by-email-client.">You can now move to Icedove / Thunderbird guide and after that | or Enigmail guide, because things after this are usually done by email client.</h1>
|
||||||
><p
|
<p>But you should continue reading to understand how to use GPG without email client.</p>
|
||||||
>NOTE: KEYIDs in group line should be in format 0xLONG. If you don't use that format by default, use "gpg2 --keyid-format 0xLONG --list-keys".</p
|
<h2 id="trusting-keys.">Trusting keys.</h2>
|
||||||
><p
|
<p>If you want to make gpg know that you trust key of another person, you have two opinons. Enter the "key editing shell", with</p>
|
||||||
>See also my <a href="Enigmail.html"
|
<blockquote>
|
||||||
>Enigmail</a
|
<p>gpg2 --edit-key KEYID</p>
|
||||||
> instructions about group lines.</p
|
</blockquote>
|
||||||
><h3 id="comments"
|
<p>and</p>
|
||||||
>Comments</h3
|
<h3 id="way-1-lsign">Way 1: lsign</h3>
|
||||||
><p
|
<p>Lsign signs the key locally making it impossible to export the signature. Use it if you trust the key owner to be who the key says, but you haven't met him/her personally.</p>
|
||||||
>GPG can automatically add comments to signed and encrypted content. They are usually hidden by email clients, which support GPG.</p
|
<p>Lsign the key with</p>
|
||||||
><p
|
<blockquote>
|
||||||
>Example comment:</p
|
<p>lsign</p>
|
||||||
><p
|
</blockquote>
|
||||||
>``` -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1</p
|
<p>and then you can exit gpg with</p>
|
||||||
><p
|
<blockquote>
|
||||||
>Signed content. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (GNU/Linux) Comment: This is a comment.</p
|
<p>quit</p>
|
||||||
><p
|
</blockquote>
|
||||||
>iQIcBAEBAgAGBQJP0ypzAAoJEE21PP6CpGcojpsP/jV8o398xaCOCtdk5gyZtSZG KYDbyV8dNk1jxyNb7yPuEHGdm2BNXuKDHoG1vOli1yfavDvZ7Ir6i6HqDINRt6QF TFcWQgurMtXEJ4zCbMwBHM5OCpRL0gtuK/ERZFWeA+zDuM/pDKWLcX9REriT5CaG CWBBvCIf/C2imGqe3+KBKSy13pis7MXARCTHesTOV/z04vKfsVqh7+M60ss/sc48 kkL7CR/RiovomeoDhWuwS63oDE49eG+hlMDswgehnx71bvYr2NBZ3qfls4utx3fj ro4ubRGW52tY9wIC1tZoNiqa/n9Z6jOIq76Vn5DaJQ1dKWn3MnA5Sv2ztV4GlaIO iTLkvavAe7KHVxDCKcHpI7vnj9JlahF1u8+JDHXbTePDE3MiQvK1uEK91EQP9kYT EYQwuClDfVGNBgqORTzZUpszYrT1dCdLte+29RdkHzsC+32x540xLvkDFvkZ+92Y 7LxCX83aKzIdAZmehNmSrzQAL+NCfMW3YjkvWOYoFFMd//nSVifCbxvRLsyv7npr Fowb/UnnZW3ScT/sFNJWH/xY5skDS8WZd3H6O7MJ8gHUeOR9YQepQX56kvSRVtbj ncnVEtqLjlbMpHEFy9ykKgM6rzuRTzLRct7Tf787Ww4hgSN92lhetPZmi6BGcS1z ZRzFq367A+HsVMlihBjd =HKS4 -----END PGP SIGNATURE----- ```</p
|
<p>confirming to svae changes with</p>
|
||||||
><p
|
<blockquote>
|
||||||
>To add comments, use "--comment" flag or add "comment" lines to gpg.conf:</p
|
<p>y</p>
|
||||||
><p
|
</blockquote>
|
||||||
>For example:</p
|
<h3 id="way-2-sign">Way 2: sign</h3>
|
||||||
><blockquote
|
<p>If you trust the key owner to be whom the key says and you have met him/her personally and have seen proof of his/her identify (i.e. passport) or he/she is member of your family or long time friend, you can sign the key with</p>
|
||||||
><p
|
<blockquote>
|
||||||
>comment "Something"</p
|
<p>sign</p>
|
||||||
></blockquote
|
</blockquote>
|
||||||
><p
|
<p>making the signature exportable or sendable to keyserver. Now exit gpg with</p>
|
||||||
>Appears as</p
|
<blockquote>
|
||||||
><p
|
<p>quit</p>
|
||||||
>``` -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1</p
|
</blockquote>
|
||||||
><p
|
<p>saving the changes with</p>
|
||||||
>This is signed content, which has comment, which reads "Something".</p
|
<blockquote>
|
||||||
><p
|
<p>y</p>
|
||||||
>-----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (GNU/Linux) Comment: Something</p
|
</blockquote>
|
||||||
><p
|
<p>and send the signed key to keyserver with</p>
|
||||||
>iQIcBAEBAgAGBQJP0yt8AAoJEE21PP6CpGcoHskP/jLift0y8tA7VnmbIyFfOr2J RVJfcc/cl8xvbnhSKIOa5rS47Z9MgVqf8KDY373E1CZMvOsdx4yPINMJb4901iBQ 71RCRcg45YUI+yWRlZ2+ZsE7NBgUWm2cdSbwfaWrxH2eL8zRN+G5c3qiAQu0pXY5 Mc1MG6ZQQzz3v+SrYPB6aZn8R8uNQR6U1YfbhtG1daxIfzdbXQNqMi/pIDV+M5GY IS3Wbbp57pvJ8R3EjvqMsDKv76L/ZFySlrAugQaZIj4lQVUzXhivBwzkaHslj6dP HSGamz3C4yX5GPe/QBJ8jgANAtmdx2+1IpoRRqiLrOOT48vRkCFM40VwjMVO4W+B wNg9BQUpB53/QBtpQ5kDHrpPA+6bS4QkzUIzMsMuSvF9w15vG+Ae7qozD/YTLeD/ IBaRlqPIRI/CrOEfUfn0DE6bFKTMgf4WE5M8IZ2kBVAE/mBqicJ9QKI53it8Ru4M hznPzwtmQTHf02yaj06LjB1P0SYU3gjwioRN+3RVoCRC92rjW5gN4MBYR0jKydp6 MHf2Mg+ped1BegBDEVD4FyDPw/LNmveZb5O8/KIpjdb9dMgP5uqDpvJEzS64OQf0 vtzYEnCrJW+/1ABuGoF2aKG7+i24gLt9re+jOb02dj5NxRc1tWmhVNVM/acwReVr 1ELecm6kOS0qlPF//OnU =Ilhi -----END PGP SIGNATURE----- ```</p
|
<blockquote>
|
||||||
><p
|
<p>gpg2 --send-keys KEYID</p>
|
||||||
>Comments can be whatever you want. For example they can have link to your homepage or command to receive your key from keyserver etc.</p
|
</blockquote>
|
||||||
><h3 id="step-4-sharing-your-public-key"
|
<p>Other people will see your signature next time when they receive the key agan or run</p>
|
||||||
>Step 4: Sharing your public key</h3
|
<blockquote>
|
||||||
><p
|
<p>gpg2 --refresh-keys</p>
|
||||||
>There are two ways to share your key. I personally use and recommend them both.</p
|
</blockquote>
|
||||||
><h4 id="without-keyservers"
|
<p>NOTE: You can upgrade lsigned signature to signed signature with the "sign" command.</p>
|
||||||
>Without keyservers</h4
|
<h4 id="trust">Trust</h4>
|
||||||
><p
|
<p>Trust determines does gpg trust the key to validate other keys. Trust is only visible to you. You can se trust with</p>
|
||||||
>If you have homepage, it's recommended that you put your key there. My key can be found at <a href="../../PGP/key.txt"
|
<blockquote>
|
||||||
>PGP/key.txt</a
|
<p>trust</p>
|
||||||
></p
|
</blockquote>
|
||||||
><p
|
<p>and then exit gpg with</p>
|
||||||
>You can get your public key with command</p
|
<blockquote>
|
||||||
><blockquote
|
<p>quit</p>
|
||||||
><p
|
</blockquote>
|
||||||
>gpg2 --export -a KEYID</p
|
<p>saving the changes with</p>
|
||||||
></blockquote
|
<blockquote>
|
||||||
><p
|
<p>y</p>
|
||||||
>or if you use Linux and have installed package signing-party, you can use</p
|
</blockquote>
|
||||||
><blockquote
|
<h2 id="signing">Signing</h2>
|
||||||
><p
|
<h3 id="signing-a-message">Signing a message</h3>
|
||||||
>pgp-clean KEYID</p
|
<p>Run</p>
|
||||||
></blockquote
|
<blockquote>
|
||||||
><p
|
<p>gpg2 --clearsign</p>
|
||||||
>to get your public key without signatures (I will explain them later). WARNING: pgp-clean seems to also remove encryption subkey.</p
|
</blockquote>
|
||||||
><h4 id="with-keyservers"
|
<p>and write your message. When you are ready, add one empty line and press CTRL-D and gpg outputs signed message.</p>
|
||||||
>With keyservers</h4
|
<h3 id="signing-a-plaintext-file">Signing a plaintext file</h3>
|
||||||
><p
|
<p>Just run</p>
|
||||||
>If you followed my configuration, you are usng pool.sks-keyservers.net as your keyserver and you are automatically receiving unknown keys from t, whenever you try to verify something, what is signed with unknown key.</p
|
<blockquote>
|
||||||
><p
|
<p>gpg2 --clearsign file.txt</p>
|
||||||
>To send your public key to keyserver, run</p
|
</blockquote>
|
||||||
><blockquote
|
<p>and the signed content will be found from file.txt.asc</p>
|
||||||
><p
|
<p>NOTE: .asc is same as .txt and can be opened with normal text editor.</p>
|
||||||
>gpg2 --send-keys KEYID</p
|
<h3 id="verifying-signature">Verifying signature</h3>
|
||||||
></blockquote
|
<h4 id="clearsigned-messages">Clearsigned messages</h4>
|
||||||
><p
|
<p>Just run</p>
|
||||||
>To receive key from keyserver, run</p
|
<blockquote>
|
||||||
><blockquote
|
<p>gpg2</p>
|
||||||
><p
|
</blockquote>
|
||||||
>gpg2 --recv-keys KEYID</p
|
<p>and paste the signed content, add one empty line and press CTRL-D.</p>
|
||||||
></blockquote
|
<h4 id="detached-signatures">Detached signatures</h4>
|
||||||
><p
|
<p>Run</p>
|
||||||
>To search keys from keyserver, use</p
|
<blockquote>
|
||||||
><blockquote
|
<p>gpg2 --verify file.sig</p>
|
||||||
><p
|
</blockquote>
|
||||||
>gpg2 --search-keys QUERY WORDS</p
|
<p>and you are asked for signed file.</p>
|
||||||
></blockquote
|
<h2 id="encrypting">Encrypting</h2>
|
||||||
><p
|
<p>To encrypt a message, just run</p>
|
||||||
>or if you are using Linux and have packages signing-party and dialog installed, you can use</p
|
<blockquote>
|
||||||
><blockquote
|
<p>gpg2 --encrypt -a -r receiver (-r receiver...)</p>
|
||||||
><p
|
</blockquote>
|
||||||
>keylookup QUERY WORDS</p
|
<p>If you followed my configuration instructions, you are automatically receiver. Replace "receiver" with KEYID. Write your message, add empty line and press CTRL-D and gpg outputs encrypted content.</p>
|
||||||
></blockquote
|
<h3 id="decrypting">Decrypting</h3>
|
||||||
><h5 id="word-of-warning"
|
<p>Just run</p>
|
||||||
>Word of warning</h5
|
<blockquote>
|
||||||
><p
|
<p>gpg2 --decrypt</p>
|
||||||
>Keyservers only append content. Information on keyserver cannot be removed. This means, that when you delete uid, signature or whatever, it reappears when you run</p
|
</blockquote>
|
||||||
><blockquote
|
<p>paste the encrypted content, add empty line and press CTRL-D and gpg outputs, the decrypted content.</p>
|
||||||
><p
|
<h2 id="read-also">Read also</h2>
|
||||||
>gpg2 --refresh-keys</p
|
<p>My <a href="../Thunderbird-Icedove.html">Icedove / Thunderbird guide</a> and <a href="Enigmail.html">Enigmail guide</a>.</p>
|
||||||
></blockquote
|
<h2 id="license">License</h2>
|
||||||
><p
|
<p><a rel="license" href="http://creativecommons.org/licenses/by-nc-sa/3.0/"><img alt="Creative Commons License" style="border-width:0" src="http://i.creativecommons.org/l/by-nc-sa/3.0/88x31.png" /></a><br /><span xmlns:dct="http://purl.org/dc/terms/" property="dct:title">GPG guide</span> by <a xmlns:cc="http://creativecommons.org/ns#" href="http://mkaysi.github.com/articles/guides/GPG/GPG.html" property="cc:attributionName" rel="cc:attributionURL">Mika Suomalainen</a> is licensed under a <a rel="license" href="http://creativecommons.org/licenses/by-nc-sa/3.0/">Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported License</a>.</p>
|
||||||
>or receive your key from keyserver again. Thought content (uids, signatures, keys etc.) can be revoked.</p
|
<h2 id="questions-and-asnwers">Questions and asnwers</h2>
|
||||||
><h1 id="you-can-now-move-to-icedove-thunderbird-guide-and-after-that-or-enigmail-guide-because-things-after-this-are-usually-done-by-email-client."
|
<h3 id="how-do-i-ask-question">How do I ask question?</h3>
|
||||||
>You can now move to Icedove / Thunderbird guide and after that | or Enigmail guide, because things after this are usually done by email client.</h1
|
<p>Just email me, the addresses can be found from my GPG key, which has been mentioned on this page some times. Please cleasign your question, so I won't get power to fake it, and please don't use HTML.</p>
|
||||||
><p
|
|
||||||
>But you should continue reading to understand how to use GPG without email client.</p
|
|
||||||
><h2 id="trusting-keys."
|
|
||||||
>Trusting keys.</h2
|
|
||||||
><p
|
|
||||||
>If you want to make gpg know that you trust key of another person, you have two opinons. Enter the "key editing shell", with</p
|
|
||||||
><blockquote
|
|
||||||
><p
|
|
||||||
>gpg2 --edit-key KEYID</p
|
|
||||||
></blockquote
|
|
||||||
><p
|
|
||||||
>and</p
|
|
||||||
><h3 id="way-1-lsign"
|
|
||||||
>Way 1: lsign</h3
|
|
||||||
><p
|
|
||||||
>Lsign signs the key locally making it impossible to export the signature. Use it if you trust the key owner to be who the key says, but you haven't met him/her personally.</p
|
|
||||||
><p
|
|
||||||
>Lsign the key with</p
|
|
||||||
><blockquote
|
|
||||||
><p
|
|
||||||
>lsign</p
|
|
||||||
></blockquote
|
|
||||||
><p
|
|
||||||
>and then you can exit gpg with</p
|
|
||||||
><blockquote
|
|
||||||
><p
|
|
||||||
>quit</p
|
|
||||||
></blockquote
|
|
||||||
><p
|
|
||||||
>confirming to svae changes with</p
|
|
||||||
><blockquote
|
|
||||||
><p
|
|
||||||
>y</p
|
|
||||||
></blockquote
|
|
||||||
><h3 id="way-2-sign"
|
|
||||||
>Way 2: sign</h3
|
|
||||||
><p
|
|
||||||
>If you trust the key owner to be whom the key says and you have met him/her personally and have seen proof of his/her identify (i.e. passport) or he/she is member of your family or long time friend, you can sign the key with</p
|
|
||||||
><blockquote
|
|
||||||
><p
|
|
||||||
>sign</p
|
|
||||||
></blockquote
|
|
||||||
><p
|
|
||||||
>making the signature exportable or sendable to keyserver. Now exit gpg with</p
|
|
||||||
><blockquote
|
|
||||||
><p
|
|
||||||
>quit</p
|
|
||||||
></blockquote
|
|
||||||
><p
|
|
||||||
>saving the changes with</p
|
|
||||||
><blockquote
|
|
||||||
><p
|
|
||||||
>y</p
|
|
||||||
></blockquote
|
|
||||||
><p
|
|
||||||
>and send the signed key to keyserver with</p
|
|
||||||
><blockquote
|
|
||||||
><p
|
|
||||||
>gpg2 --send-keys KEYID</p
|
|
||||||
></blockquote
|
|
||||||
><p
|
|
||||||
>Other people will see your signature next time when they receive the key agan or run</p
|
|
||||||
><blockquote
|
|
||||||
><p
|
|
||||||
>gpg2 --refresh-keys</p
|
|
||||||
></blockquote
|
|
||||||
><p
|
|
||||||
>NOTE: You can upgrade lsigned signature to signed signature with the "sign" command.</p
|
|
||||||
><h4 id="trust"
|
|
||||||
>Trust</h4
|
|
||||||
><p
|
|
||||||
>Trust determines does gpg trust the key to validate other keys. Trust is only visible to you. You can se trust with</p
|
|
||||||
><blockquote
|
|
||||||
><p
|
|
||||||
>trust</p
|
|
||||||
></blockquote
|
|
||||||
><p
|
|
||||||
>and then exit gpg with</p
|
|
||||||
><blockquote
|
|
||||||
><p
|
|
||||||
>quit</p
|
|
||||||
></blockquote
|
|
||||||
><p
|
|
||||||
>saving the changes with</p
|
|
||||||
><blockquote
|
|
||||||
><p
|
|
||||||
>y</p
|
|
||||||
></blockquote
|
|
||||||
><h2 id="signing"
|
|
||||||
>Signing</h2
|
|
||||||
><h3 id="signing-a-message"
|
|
||||||
>Signing a message</h3
|
|
||||||
><p
|
|
||||||
>Run</p
|
|
||||||
><blockquote
|
|
||||||
><p
|
|
||||||
>gpg2 --clearsign</p
|
|
||||||
></blockquote
|
|
||||||
><p
|
|
||||||
>and write your message. When you are ready, add one empty line and press CTRL-D and gpg outputs signed message.</p
|
|
||||||
><h3 id="signing-a-plaintext-file"
|
|
||||||
>Signing a plaintext file</h3
|
|
||||||
><p
|
|
||||||
>Just run</p
|
|
||||||
><blockquote
|
|
||||||
><p
|
|
||||||
>gpg2 --clearsign file.txt</p
|
|
||||||
></blockquote
|
|
||||||
><p
|
|
||||||
>and the signed content will be found from file.txt.asc</p
|
|
||||||
><p
|
|
||||||
>NOTE: .asc is same as .txt and can be opened with normal text editor.</p
|
|
||||||
><h3 id="verifying-signature"
|
|
||||||
>Verifying signature</h3
|
|
||||||
><h4 id="clearsigned-messages"
|
|
||||||
>Clearsigned messages</h4
|
|
||||||
><p
|
|
||||||
>Just run</p
|
|
||||||
><blockquote
|
|
||||||
><p
|
|
||||||
>gpg2</p
|
|
||||||
></blockquote
|
|
||||||
><p
|
|
||||||
>and paste the signed content, add one empty line and press CTRL-D.</p
|
|
||||||
><h4 id="detached-signatures"
|
|
||||||
>Detached signatures</h4
|
|
||||||
><p
|
|
||||||
>Run</p
|
|
||||||
><blockquote
|
|
||||||
><p
|
|
||||||
>gpg2 --verify file.sig</p
|
|
||||||
></blockquote
|
|
||||||
><p
|
|
||||||
>and you are asked for signed file.</p
|
|
||||||
><h2 id="encrypting"
|
|
||||||
>Encrypting</h2
|
|
||||||
><p
|
|
||||||
>To encrypt a message, just run</p
|
|
||||||
><blockquote
|
|
||||||
><p
|
|
||||||
>gpg2 --encrypt -a -r receiver (-r receiver...)</p
|
|
||||||
></blockquote
|
|
||||||
><p
|
|
||||||
>If you followed my configuration instructions, you are automatically receiver. Replace "receiver" with KEYID. Write your message, add empty line and press CTRL-D and gpg outputs encrypted content.</p
|
|
||||||
><h3 id="decrypting"
|
|
||||||
>Decrypting</h3
|
|
||||||
><p
|
|
||||||
>Just run</p
|
|
||||||
><blockquote
|
|
||||||
><p
|
|
||||||
>gpg2 --decrypt</p
|
|
||||||
></blockquote
|
|
||||||
><p
|
|
||||||
>paste the encrypted content, add empty line and press CTRL-D and gpg outputs, the decrypted content.</p
|
|
||||||
><h2 id="read-also"
|
|
||||||
>Read also</h2
|
|
||||||
><p
|
|
||||||
>My <a href="../Thunderbird-Icedove.html"
|
|
||||||
>Icedove / Thunderbird guide</a
|
|
||||||
> and <a href="Enigmail.html"
|
|
||||||
>Enigmail guide</a
|
|
||||||
>.</p
|
|
||||||
><h2 id="license"
|
|
||||||
>License</h2
|
|
||||||
><p
|
|
||||||
><a rel="license" href="http://creativecommons.org/licenses/by-nc-sa/3.0/"><img alt="Creative Commons License" style="border-width:0" src="http://i.creativecommons.org/l/by-nc-sa/3.0/88x31.png" /></a><br /><span xmlns:dct="http://purl.org/dc/terms/" property="dct:title">GPG guide</span> by <a xmlns:cc="http://creativecommons.org/ns#" href="http://mkaysi.github.com/articles/guides/GPG/GPG.html" property="cc:attributionName" rel="cc:attributionURL">Mika Suomalainen</a> is licensed under a <a rel="license" href="http://creativecommons.org/licenses/by-nc-sa/3.0/">Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported License</a>.</p
|
|
||||||
><h2 id="questions-and-asnwers"
|
|
||||||
>Questions and asnwers</h2
|
|
||||||
><h3 id="how-do-i-ask-question"
|
|
||||||
>How do I ask question?</h3
|
|
||||||
><p
|
|
||||||
>Just email me, the addresses can be found from my GPG key, which has been mentioned on this page some times. Please cleasign your question, so I won't get power to fake it, and please don't use HTML.</p
|
|
||||||
>
|
|
||||||
|
|||||||
@ -5,6 +5,7 @@
|
|||||||
<title>
|
<title>
|
||||||
Moving from GNOME to MATE
|
Moving from GNOME to MATE
|
||||||
</title>
|
</title>
|
||||||
|
<link rel="stylesheet" type="text/css" href="../../tyyli.css" />
|
||||||
</head>
|
</head>
|
||||||
|
|
||||||
<h1 id="what-is-what-in-mate-and-gnome.">What is what in MATE and GNOME.</h1>
|
<h1 id="what-is-what-in-mate-and-gnome.">What is what in MATE and GNOME.</h1>
|
||||||
|
|||||||
@ -1,68 +1,46 @@
|
|||||||
<!DOCTYPE html><html>
|
<!DOCTYPE html>
|
||||||
<head><meta name="description" content="Thunderbird/Icedove guide" /> <meta name="keywords" content="Thunderbird,Icedove,Enigmail,gpg,gnupg" /> <meta name="author" content="Mika Suomalainen" /> <meta charset="UTF-8" /> <link rel="canonical" href="http://mkaysi.github.com/articles/guides/Thunderbird-Icedove.html"> <title>Thunderbird/Icedove guide</title> <link rel="stylesheet" type="text/css" href="../../tyyli.css" /></head>
|
<html>
|
||||||
<h1 id="thunderbird-icedove-guide"
|
<head>
|
||||||
>Thunderbird / Icedove guide</h1
|
<meta name="description" content="Thunderbird/Icedove guide" /> <meta name="keywords" content="Thunderbird,Icedove,Enigmail,gpg,gnupg" /> <meta name="author" content="Mika Suomalainen" /> <meta charset="UTF-8" /> <link rel="canonical" href="http://mkaysi.github.com/articles/guides/Thunderbird-Icedove.html">
|
||||||
><h2 id="what-do-you-need"
|
<title>
|
||||||
>What do you need?</h2
|
Thunderbird/Icedove guide
|
||||||
><h3 id="debian"
|
</title>
|
||||||
>Debian</h3
|
<link rel="stylesheet" type="text/css" href="../../tyyli.css" />
|
||||||
><p
|
</head>
|
||||||
>On Debian you need package Icedove, but you should also install Enigmail and GnuPG and GnuPG2</p
|
|
||||||
><blockquote
|
<h1 id="thunderbird-icedove-guide">Thunderbird / Icedove guide</h1>
|
||||||
><h1
|
<h2 id="what-do-you-need">What do you need?</h2>
|
||||||
>aptitude install icedove enigmail gnupg gnupg2</h1
|
<h3 id="debian">Debian</h3>
|
||||||
></blockquote
|
<p>On Debian you need package Icedove, but you should also install Enigmail and GnuPG and GnuPG2</p>
|
||||||
><h3 id="ubuntu"
|
<blockquote>
|
||||||
>Ubuntu</h3
|
<h1>aptitude install icedove enigmail gnupg gnupg2</h1>
|
||||||
><p
|
</blockquote>
|
||||||
>On Ubuntu you should install same packages as with Debian, but Icedove is called as Thunderbird.</p
|
<h3 id="ubuntu">Ubuntu</h3>
|
||||||
><blockquote
|
<p>On Ubuntu you should install same packages as with Debian, but Icedove is called as Thunderbird.</p>
|
||||||
><h1
|
<blockquote>
|
||||||
>aptitude install icedove enigmail gnupg gnupg2</h1
|
<h1>aptitude install icedove enigmail gnupg gnupg2</h1>
|
||||||
></blockquote
|
</blockquote>
|
||||||
><h3 id="mac-os-x"
|
<h3 id="mac-os-x">Mac OS X</h3>
|
||||||
>Mac OS X</h3
|
<p>You need Thunderbird, but you should also install GPG-Tools and Enigmail.</p>
|
||||||
><p
|
<h3 id="windows">Windows</h3>
|
||||||
>You need Thunderbird, but you should also install GPG-Tools and Enigmail.</p
|
<p>You need at Thunderbird, but you should also install GPG4Win and Enigmail.</p>
|
||||||
><h3 id="windows"
|
<h2 id="setting-up">Setting up</h2>
|
||||||
>Windows</h3
|
<p>When you open Thunderbird / Icedove for the first time, it will ask for email address and password. Give them and Thunderbird will attempt to find the details and after that it downloads emails from the server.</p>
|
||||||
><p
|
<h2 id="sending-plaintext.">Sending plaintext.</h2>
|
||||||
>You need at Thunderbird, but you should also install GPG4Win and Enigmail.</p
|
<p>To send emails in plaintext, open Edit --> Account settings --> Composition & Addressing and uncheck the box "Compose messages in HTML format.</p>
|
||||||
><h2 id="setting-up"
|
<h3 id="why-to-not-send-emails-in-html">Why to not send emails in HTML?</h3>
|
||||||
>Setting up</h2
|
<p>See my complaining about HTML usage <a href="../complaining/HTML.html">here</a>.</p>
|
||||||
><p
|
<h2 id="sending-utf-8.">Sending UTF-8.</h2>
|
||||||
>When you open Thunderbird / Icedove for the first time, it will ask for email address and password. Give them and Thunderbird will attempt to find the details and after that it downloads emails from the server.</p
|
<p>This doesn't affect emails with any visible way. It might just remove some charters in message source and it will allow you to send more charters than some latin1 charset. It might also remove charset line in PGP/INLINE signed emails.</p>
|
||||||
><h2 id="sending-plaintext."
|
<p>Open Edit --> Preferences --> Display --> Formatting --> Advanced... --> Character Encodings and set both "Outgoing Mail" and "Incoming Mail" as "Unicode UTF-8" and check the checkbox "When possible, use the default character encoding in replies."</p>
|
||||||
>Sending plaintext.</h2
|
<h2 id="why-to-send-emails-in-utf-8">Why to send emails in UTF-8?</h2>
|
||||||
><p
|
<p>I am going to write explaining for this later.</p>
|
||||||
>To send emails in plaintext, open Edit --> Account settings --> Composition & Addressing and uncheck the box "Compose messages in HTML format.</p
|
<h2 id="read-also">Read also</h2>
|
||||||
><h3 id="why-to-not-send-emails-in-html"
|
<p>My <a href="GPG/GPG.html">GPG guide</a> and my <a href="GPG/Enigmail.html">Enigmail guide</a>.</p>
|
||||||
>Why to not send emails in HTML?</h3
|
<p><a rel="license" href="http://creativecommons.org/licenses/by-nc-sa/3.0/"><img alt="Creative Commons License" style="border-width:0" src="http://i.creativecommons.org/l/by-nc-sa/3.0/88x31.png" /></a><br /><span xmlns:dct="http://purl.org/dc/terms/" property="dct:title">Thunderbird / Icedove guide</span> is licensed under a <a rel="license" href="http://creativecommons.org/licenses/by-nc-sa/3.0/">Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported License</a>.<br />Based on a work at <a xmlns:dct="http://purl.org/dc/terms/" href="http://mkaysi.github.com/articles/guides/Thunderbird-Icedove.html" rel="dct:source">mkaysi.github.com</a>.</p>
|
||||||
><p
|
<div id="clustrmaps-widget"></div><script type="text/javascript">var _clustrmaps = {'url' : 'http://mkaysi.github.com/', 'user' : 1040881, 'server' : '4', 'id' : 'clustrmaps-widget', 'version' : 1, 'date' : '2012-09-02', 'lang' : 'en', 'corners' : 'square' };(function (){ var s = document.createElement('script'); s.type = 'text/javascript'; s.async = true; s.src = 'http://www4.clustrmaps.com/counter/map.js'; var x = document.getElementsByTagName('script')[0]; x.parentNode.insertBefore(s, x);})();</script><noscript>
|
||||||
>See my complaining about HTML usage <a href="../complaining/HTML.html"
|
<a href="http://www4.clustrmaps.com/user/bd3fe1f1"><img src="http://www4.clustrmaps.com/stats/maps-no_clusters/mkaysi.github.com--thumb.jpg" alt="Locations of visitors to this page" /></a>
|
||||||
>here</a
|
</noscript>
|
||||||
>.</p
|
|
||||||
><h2 id="sending-utf-8."
|
|
||||||
>Sending UTF-8.</h2
|
|
||||||
><p
|
|
||||||
>This doesn't affect emails with any visible way. It might just remove some charters in message source and it will allow you to send more charters than some latin1 charset. It might also remove charset line in PGP/INLINE signed emails.</p
|
|
||||||
><p
|
|
||||||
>Open Edit --> Preferences --> Display --> Formatting --> Advanced... --> Character Encodings and set both "Outgoing Mail" and "Incoming Mail" as "Unicode UTF-8" and check the checkbox "When possible, use the default character encoding in replies."</p
|
|
||||||
><h2 id="why-to-send-emails-in-utf-8"
|
|
||||||
>Why to send emails in UTF-8?</h2
|
|
||||||
><p
|
|
||||||
>I am going to write explaining for this later.</p
|
|
||||||
><h2 id="read-also"
|
|
||||||
>Read also</h2
|
|
||||||
><p
|
|
||||||
>My <a href="GPG/GPG.html"
|
|
||||||
>GPG guide</a
|
|
||||||
> and my <a href="GPG/Enigmail.html"
|
|
||||||
>Enigmail guide</a
|
|
||||||
>.</p
|
|
||||||
><p
|
|
||||||
><a rel="license" href="http://creativecommons.org/licenses/by-nc-sa/3.0/"><img alt="Creative Commons License" style="border-width:0" src="http://i.creativecommons.org/l/by-nc-sa/3.0/88x31.png" /></a><br /><span xmlns:dct="http://purl.org/dc/terms/" property="dct:title">Thunderbird / Icedove guide</span> is licensed under a <a rel="license" href="http://creativecommons.org/licenses/by-nc-sa/3.0/">Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported License</a>.<br />Based on a work at <a xmlns:dct="http://purl.org/dc/terms/" href="http://mkaysi.github.com/articles/guides/Thunderbird-Icedove.html" rel="dct:source">mkaysi.github.com</a>.</p
|
|
||||||
><div id="clustrmaps-widget"></div><script type="text/javascript">var _clustrmaps = {'url' : 'http://mkaysi.github.com/', 'user' : 1040881, 'server' : '4', 'id' : 'clustrmaps-widget', 'version' : 1, 'date' : '2012-09-02', 'lang' : 'en', 'corners' : 'square' };(function (){ var s = document.createElement('script'); s.type = 'text/javascript'; s.async = true; s.src = 'http://www4.clustrmaps.com/counter/map.js'; var x = document.getElementsByTagName('script')[0]; x.parentNode.insertBefore(s, x);})();</script><noscript><a href="http://www4.clustrmaps.com/user/bd3fe1f1"><img src="http://www4.clustrmaps.com/stats/maps-no_clusters/mkaysi.github.com--thumb.jpg" alt="Locations of visitors to this page" /></a></noscript>
|
|
||||||
</HTML>
|
</HTML>
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user