{"id":6167,"date":"2017-10-31T12:35:30","date_gmt":"2017-10-31T19:35:30","guid":{"rendered":"https:\/\/cldc.org\/?post_type=organizing_resources&#038;p=6167"},"modified":"2022-10-27T13:51:56","modified_gmt":"2022-10-27T20:51:56","slug":"advanced-gpg","status":"publish","type":"post","link":"https:\/\/cldc.org\/ar\/advanced-gpg\/","title":{"rendered":"\u0627\u0644\u062a\u0634\u0641\u064a\u0631 \u0627\u0644\u0645\u062a\u0642\u062f\u0645 \u0644\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 GPG: \u062f\u0644\u064a\u0644 \u0627\u0644\u062f\u0631\u0627\u0633\u0629 \u0627\u0644\u0630\u0627\u062a\u064a\u0629"},"content":{"rendered":"<p>So, you&#8217;re set up to use GPG email encryption using Thunderbird+Enigmail in one of our trainings or using our <a href=\"https:\/\/cldc.org\/gpg\/\">online guide<\/a>.\u00a0 The following exercises will help reinforce key concepts and teach you some advanced tricks.<\/p>\n<h4>Importing (and fingerprinting) public keys<\/h4>\n<p>Now that you are using GPG email encryption, you will need to receive public keys from your correspondents.\u00a0 To use keys, you first need to import them.\u00a0 In our introductory guide, we show you how to do this when the key is sent to you as an attachment to an email.\u00a0 As a refresher:<\/p>\n<p>[toggle title_open=&#8221;How to import a key from an attachment&#8221; title_closed=&#8221;How to import a key from an attachment&#8221; hide=&#8221;yes&#8221; border=&#8221;yes&#8221; style=&#8221;default&#8221; excerpt_length=&#8221;0&#8243; read_more_text=&#8221;Read More&#8221; read_less_text=&#8221;Read Less&#8221; include_excerpt_html=&#8221;no&#8221;]The public key will be in an attachment called something like <code>0x12345678.asc<\/code>.<\/p>\n<ol>\n<li>Right click the attached file.<\/li>\n<li>Select &#8220;Import OpenPGP Key&#8221;.<\/li>\n<\/ol>\n<p>[\/toggle]<\/p>\n<p>After importing a key, we encourage you to verify the <a href=\"https:\/\/cldc.org\/authenticity\/\">authenticity<\/a> of that key by checking the fingerprint:<\/p>\n<p>[toggle title_open=&#8221;How to verify the authenticity of a key: fingerprinting&#8221; title_closed=&#8221;How to verify the authenticity of a key: fingerprinting&#8221; hide=&#8221;yes&#8221; border=&#8221;yes&#8221; style=&#8221;default&#8221; excerpt_length=&#8221;0&#8243; read_more_text=&#8221;Read More&#8221; read_less_text=&#8221;Read Less&#8221; include_excerpt_html=&#8221;no&#8221;]<\/p>\n<ol>\n<li data-canvas-width=\"210.42999999999998\">You and your friend should both:\n<ul>\n<li data-canvas-width=\"210.42999999999998\">go to the menu: Enigmail -&gt; Key Management.<\/li>\n<li data-canvas-width=\"210.42999999999998\">Right click your friend&#8217;s key.<\/li>\n<li data-canvas-width=\"210.42999999999998\">Select &#8220;Key Properties&#8221;.<\/li>\n<li data-canvas-width=\"210.42999999999998\">Compare the fingerprint that appears.<\/li>\n<\/ul>\n<\/li>\n<li data-canvas-width=\"210.42999999999998\">To keep track that you have done this, you should, from the &#8220;Select action &#8230;&#8221; or &#8220;Certify&#8221; drop-down menu, choose &#8220;Sign Key&#8221; and &#8220;I have done very careful checking&#8221;.<\/li>\n<\/ol>\n<p>[\/toggle]<\/p>\n<p>However, depending on how your correspondent is using PGP, you might receive an email that includes a rather overwhelming-looking thing, looking something like<\/p>\n<blockquote>\n<pre>-----BEGIN PGP PUBLIC KEY BLOCK-----\r\nVersion: SKS 1.1.6\r\nComment: Hostname: pgp.mit.edu\r\n\r\nmQINBFY2f7IBEADy4LCnoY9q948eMQlJhak\/\/HP2kiQhED0MJ3DuMn15gcxhzNZCHuMBNlnV\r\nEBQa5S7rZSJq2T3cwE51NBJLyq1qXBFhwnT+mGzdLzcFwe5iB+X3dCKvlOgLUb8SHK0GlY55\r\nRmt3vY\/1dLo31BoPlYMA4Rh\/a3iVPfgPxJQondXbIYviGhsEQLgV4QWNdC9hMFfmTyOEHRLa\r\n...\r\n...\r\n...\r\nlaZT7bZLPhuwdBMvTa\/Yurg0mcJcYRcuYMlfqjMR\/BZfi48p99SA8lNMdp20VoJWgh8nh4UL\r\nlxWzC8U1yMHHaANDrfsKbfsssEs+GGtLKabQJwCFWLrS3qvNvJbhvPYFrVgWsgfJb2hcc99+\r\n24HxjcAOzh4ossSScM4=\r\n=3BqU\r\n-----END PGP PUBLIC KEY BLOCK-----\r\n<\/pre>\n<\/blockquote>\n<p>This a PGP public key.<\/p>\n<p>[toggle title_open=&#8221;How to import a key from text&#8221; title_closed=&#8221;How to import a key from text&#8221; hide=&#8221;yes&#8221; border=&#8221;yes&#8221; style=&#8221;default&#8221; excerpt_length=&#8221;0&#8243; read_more_text=&#8221;Read More&#8221; read_less_text=&#8221;Read Less&#8221; include_excerpt_html=&#8221;no&#8221;]<\/p>\n<ol>\n<li>Highlight the entire key including the lines <code>-----BEGIN PGP PUBLIC KEY BLOCK-----<\/code> and <code>-----END PGP PUBLIC KEY BLOCK-----<\/code><\/li>\n<li>Copy the text.<\/li>\n<li>Go to the menu: Enigmail -&gt; Key Management -&gt; Edit -&gt; Import Keys from Clipboard.<\/li>\n<\/ol>\n<p>[\/toggle]<\/p>\n<h4>Key servers: Online Directories of Public Keys<\/h4>\n<p>Many people publish their public keys to a key server, which is an online directory of public keys.\u00a0 There are many such directories, but (for the most part), they synchronize their entries with each other, so it (usually) doesn&#8217;t matter which one you use.\u00a0 It is a great idea to publish your key to a key server if you want strangers to be able to reach you via encrypted email (for example, if you are a journalist or lawyer or other public figure).\u00a0 You may also want to publish your key to a key server so that people you know can get your key if they lose your key.\u00a0 In these exercises, we show two ways to get a key from a key server and two ways to publish your key to a key server.<\/p>\n<p>[toggle title_open=&#8221;How to get a key from a key-server using Enigmail&#8221; title_closed=&#8221;How to get a key from a key-server using Enigmail&#8221; hide=&#8221;yes&#8221; border=&#8221;yes&#8221; style=&#8221;default&#8221; excerpt_length=&#8221;0&#8243; read_more_text=&#8221;Read More&#8221; read_less_text=&#8221;Read Less&#8221; include_excerpt_html=&#8221;no&#8221;]<\/p>\n<ol>\n<li>Go to the menu: Enigmail -&gt; Key Management -&gt;Keyserver-&gt;Search for Keys.<\/li>\n<li>Type in an email address or partial email address.\u00a0 For example, searching for &#8220;cldc&#8221; will return all the keys from people in the CLDC office.<\/li>\n<li>Select all the keys that you are wanting to import and hit OK.[\/toggle]<\/li>\n<\/ol>\n<p>[toggle title_open=&#8221;How to get a key from a key-server using a browser&#8221; title_closed=&#8221;How to get a key from a key-server using a browser&#8221; hide=&#8221;yes&#8221; border=&#8221;yes&#8221; style=&#8221;default&#8221; excerpt_length=&#8221;0&#8243; read_more_text=&#8221;Read More&#8221; read_less_text=&#8221;Read Less&#8221; include_excerpt_html=&#8221;no&#8221;]<\/p>\n<ol>\n<li>Go to a key server, such as MayFirst&#8217;s or <a href=\"http:\/\/pgp.mit.edu\/\">MIT&#8217;s<\/a>.<\/li>\n<li>In the search bar, type an email address or partial email address. As an example, searching for &#8220;cldc&#8221; will return all the keys from people in the CLDC office.\u00a0 Each entry will start with something that looks like <code><strong>pub<\/strong> 4096R\/<a href=\"http:\/\/zimmerman.mayfirst.org\/pks\/lookup?op=get&amp;search=0x08A8D132F066011C\">F066011C<\/a><\/code><\/li>\n<li>Clicking on the link from the second number will bring you to a page containing the text of the corresponding public key.<\/li>\n<li>Import this into Enigmail using the same method as in the previous exercise.[\/toggle]<\/li>\n<\/ol>\n<p>[toggle title_open=&#8221;How to publish your key to a key-server using Enigmail&#8221; title_closed=&#8221;How to publish your key to a key-server using Enigmail&#8221; hide=&#8221;yes&#8221; border=&#8221;yes&#8221; style=&#8221;default&#8221; excerpt_length=&#8221;0&#8243; read_more_text=&#8221;Read More&#8221; read_less_text=&#8221;Read Less&#8221; include_excerpt_html=&#8221;no&#8221;]<\/p>\n<ol>\n<li>Go to the menu: Enigmail -&gt; Key Management.<\/li>\n<li>Highlight your key.<\/li>\n<li>In the menu, Keyserver -&gt; Upload Public Keys.<\/li>\n<\/ol>\n<p>Note that you can upload other people&#8217;s keys too.\u00a0 Please behave responsibly and courteously.\u00a0 Note also that it might take some time for your key to appear on all the synchronized key servers.[\/toggle]<\/p>\n<p>[toggle title_open=&#8221;How to publish your key to a key-server using a browser&#8221; title_closed=&#8221;How to publish your key to a key-server using a browser&#8221; hide=&#8221;yes&#8221; border=&#8221;yes&#8221; style=&#8221;default&#8221; excerpt_length=&#8221;0&#8243; read_more_text=&#8221;Read More&#8221; read_less_text=&#8221;Read Less&#8221; include_excerpt_html=&#8221;no&#8221;]First get the text of your public key from Enigmail:<\/p>\n<ol>\n<li>Go to the menu: Enigmail -&gt; Key Management.<\/li>\n<li>Right click on your key.<\/li>\n<li>Select &#8220;Copy Public Keys to Clipboard&#8221;.<\/li>\n<\/ol>\n<p>Then upload the key to a key server:<\/p>\n<ol>\n<li>Go to a key server, such as MayFirst&#8217;s or <a href=\"http:\/\/pgp.mit.edu\/\">MIT&#8217;s<\/a>.<\/li>\n<li>In the &#8220;submit a key&#8221; field, paste the text of your public key.<\/li>\n<\/ol>\n<p>Note that you can upload other people&#8217;s keys too. Please behave responsibly and courteously. Note also that it might take some time for your key to appear on all the synchronized key servers.[\/toggle]<\/p>\n<h4>Maintaining your own public key\/private key pair<\/h4>\n<p>To maintain security, it is important to maintain your own public key\/private key pair.\u00a0 Keys are (usually) set to expire, so that you don&#8217;t get a message encrypted to a public key of yours that you have long lost.\u00a0 You should keep a backup of your private key in case something happens to your computer.\u00a0 If you get a new email address, you can use the same key and just add an email address to it.\u00a0 We go over this and more in the following exercises.<\/p>\n<p>[toggle title_open=&#8221;How to add an email address to your key&#8221; title_closed=&#8221;How to add an email address to your key&#8221; hide=&#8221;yes&#8221; border=&#8221;yes&#8221; style=&#8221;default&#8221; excerpt_length=&#8221;0&#8243; read_more_text=&#8221;Read More&#8221; read_less_text=&#8221;Read Less&#8221; include_excerpt_html=&#8221;no&#8221;]<\/p>\n<ol>\n<li>Go to the menu: Enigmail -&gt; Key Management.<\/li>\n<li>Double-click on your key.<\/li>\n<li>Select action -&gt; Manage User IDs -&gt; Add.<\/li>\n<\/ol>\n<p>[\/toggle]<\/p>\n<p>[toggle title_open=&#8221;How to change the expiration date on your public key&#8221; title_closed=&#8221;How to change the expiration date on your public key&#8221; hide=&#8221;yes&#8221; border=&#8221;yes&#8221; style=&#8221;default&#8221; excerpt_length=&#8221;0&#8243; read_more_text=&#8221;Read More&#8221; read_less_text=&#8221;Read Less&#8221; include_excerpt_html=&#8221;no&#8221;]<\/p>\n<ol>\n<li>Go to the menu: Enigmail -&gt; Key Management.<\/li>\n<li>Double-click on your key.<\/li>\n<li>To the right of expiry, click Change.<\/li>\n<\/ol>\n<p>[\/toggle]<\/p>\n<p>[toggle title_open=&#8221;How to back up your public key\/private key pair&#8221; title_closed=&#8221;How to back up your public key\/private key pair&#8221; hide=&#8221;yes&#8221; border=&#8221;yes&#8221; style=&#8221;default&#8221; excerpt_length=&#8221;0&#8243; read_more_text=&#8221;Read More&#8221; read_less_text=&#8221;Read Less&#8221; include_excerpt_html=&#8221;no&#8221;]<\/p>\n<ol>\n<li>Go to the menu: Enigmail -&gt; Key Management.<\/li>\n<li>Right-click on your key.<\/li>\n<li>Select &#8220;Export Keys to File&#8221;.<\/li>\n<li>Select &#8220;Export Secret Keys&#8221; and save it somewhere that you can keep safe (such as an encrypted thumb drive\/USB stick).<\/li>\n<\/ol>\n<p>Note: while your key is still protected by your (strong!, right?) passphrase, we recommend encrypting the thumbdrive\/USB stick that you keep it on.<\/p>\n<p>[\/toggle]<\/p>\n<p>[toggle title_open=&#8221;How to change the passphrase protecting your private key&#8221; title_closed=&#8221;How to change the passphrase protecting your private key&#8221; hide=&#8221;yes&#8221; border=&#8221;yes&#8221; style=&#8221;default&#8221; excerpt_length=&#8221;0&#8243; read_more_text=&#8221;Read More&#8221; read_less_text=&#8221;Read Less&#8221; include_excerpt_html=&#8221;no&#8221;]<\/p>\n<ol>\n<li>Go to the menu: Enigmail -&gt; Key Management.<\/li>\n<li>Double-click on your key.<\/li>\n<li>Select action -&gt; Change Passphrase.<\/li>\n<\/ol>\n<p>[\/toggle]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>So, you&#8217;re set up to use GPG email encryption using Thunderbird+Enigmail in one of our trainings or using our online guide.\u00a0 The following exercises will help reinforce key concepts and teach you some advanced tricks. Importing (and fingerprinting) public keys Now that you are using GPG email encryption, you will need to receive public keys [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[12],"tags":[211,246,245,247],"class_list":["post-6167","post","type-post","status-publish","format-standard","hentry","category-blog","tag-email","tag-enigmail","tag-pgp","tag-thunderbird"],"acf":[],"_links":{"self":[{"href":"https:\/\/cldc.org\/ar\/wp-json\/wp\/v2\/posts\/6167","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cldc.org\/ar\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cldc.org\/ar\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cldc.org\/ar\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cldc.org\/ar\/wp-json\/wp\/v2\/comments?post=6167"}],"version-history":[{"count":0,"href":"https:\/\/cldc.org\/ar\/wp-json\/wp\/v2\/posts\/6167\/revisions"}],"wp:attachment":[{"href":"https:\/\/cldc.org\/ar\/wp-json\/wp\/v2\/media?parent=6167"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cldc.org\/ar\/wp-json\/wp\/v2\/categories?post=6167"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cldc.org\/ar\/wp-json\/wp\/v2\/tags?post=6167"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}