Conversation

Notices

1. Former Bob Jonkman -- Please use the new server at https://gs.jonkman.ca (bobjonkmanformer@sn.jonkman.ca)'s status on Saturday, 04-Apr-2015 19:21:18 UTC Former Bob Jonkman -- Please use the new server at https://gs.jonkman.ca

   • rien
   • Cryptography
   • GnuPG - GNU Privacy Guard
   For 3b) you're relying on the broken Certificate Authority system of PKI; you're "trusting" that your browser or OS is using only authentic certificates from Certificate Authorities that haven't abused the system to issue false certificates. Fortunately, once you've downloaded the !GnuPG key for Enigmail you can see whether it is trusted by following the Web of Trust. If you've signed (trusted) the key of someone who has signed (trusted) the Enigmail GnuPG key, then you can trust the Enigmail GnuPG key too. If there's no-one who's key you've signed directly, perhaps there's a chain of signatures through the Web of Trust that lead back to the Enigmail key. The more keys you verify, sign, and trust, the more effective this becomes. So, attend or hold a !Crypto party to expand the Web of Trust!
   • MMN-o ✅⃠ (mmn@social.umeahackerspace.se)'s status on Saturday, 04-Apr-2015 19:12:13 UTC MMN-o ✅⃠

     • rien
     @rien You could post the OpenPGP fingerprint of the key which should sign the packages here as a third party reference ;)
   • Former Bob Jonkman -- Please use the new server at https://gs.jonkman.ca (bobjonkmanformer@sn.jonkman.ca)'s status on Saturday, 04-Apr-2015 20:16:17 UTC Former Bob Jonkman -- Please use the new server at https://gs.jonkman.ca

     in reply to

     • ytpo
     Ack. s/who's/whose/ — I hate that particular #grammo (cf. !ytpo)