commit
[enc.git] / en / index.html
CommitLineData
bdf319c4
AIC
1<!DOCTYPE html>
2<html>
3 <head>
668de811 4 <meta http-equiv="content-type" content="text/html; charset=utf-8" />
0a225228 5
614e3bf4 6 <title>Email Self-Defense - a guide to fighting surveillance with GnuPG encryption</title>
e4a684cf 7 <meta name="keywords" content="GnuPG, GPG, openpgp, surveillance, privacy, email, Enigmail" />
c1ea5176 8 <meta name="description" content="Email surveillance violates our fundamental rights and makes free speech risky. This guide will teach you email self-defense in 30 minutes with GnuPG." />
2cb815ae 9
c1ea5176
TG
10 <meta name="viewport" content="width=device-width, initial-scale=1" />
11 <link rel="stylesheet" href="//static.fsf.org/nosvn/enc-dev0/css/main.css" />
f65fbc20 12 <link rel="shortcut icon" href="//static.fsf.org/nosvn/enc-dev0/img/favicon.ico" />
05bfcb9e 13
bdf319c4
AIC
14 </head>
15 <body>
6c495e2d 16
2cb815ae 17<!-- ~~~~~~~~~ GnuPG Header and introduction text ~~~~~~~~~ -->
9176cae7 18
b9b57d1a 19 <header class="row" id="header">
bdf319c4 20 <div>
b3ec2c8d 21 <h1>Email Self-Defense</h1>
5a426655 22
b3ec2c8d
DT
23 <!-- Language list for browsers that do not have JS enabled -->
24 <ul id="languages" class="os">
25 <li><a class="current" href="/en">english</a></li>
c5d213fc 26 <li><a href="/es">español</a></li>
b3ec2c8d
DT
27 <li><a href="/fr">français</a></li>
28 <li><a href="/de">deutsch</a></li>
c5d213fc 29 <li><a href="/it">italiano</a></li>
b3ec2c8d
DT
30 <li><a href="/pt-br">português do Brasil</a></li>
31 <li><a href="/tr">türkçe</a></li>
c5d213fc 32 <li><a href="/ro">română</a></li>
b3ec2c8d 33 <li><a href="/ru">русский</a></li>
8fd4a69a 34 <!--<li><a href="/ml">മലയാളം</a></li>-->
d27e43aa 35 <!--<li><a href="/ko">한국어</a></li>-->
b3ec2c8d 36 <li><a href="/ja">日本語</a></li>
c5d213fc 37 <li><a href="/el">ελληνικά</a></li>
8f538927 38 <!--<li><a href="/ar">العربية</a></li>-->
b3ec2c8d 39 </ul>
5a426655 40
b3ec2c8d
DT
41 <ul id="menu" class="os">
42 <li class="spacer">
43 <a href="index.html" class="current">GNU/Linux</a>
44 </li>
45 <li>
46 <a href="mac.html">Mac OS</a>
47 </li>
48 <li>
49 <a href="windows.html">Windows</a>
50 </li>
80ef766e 51
b3ec2c8d 52 <li class="spacer">
f367a743
TG
53 <a href="https://fsf.org/share?u=https://u.fsf.org/zb&amp;t=Email encryption for everyone via %40fsf">
54 Share&nbsp;
db57ca22 55 <img src="//static.fsf.org/nosvn/enc-dev0/img/gnu-social.png"
44a50574 56 class="share-logo" alt="[GNU Social]">&nbsp;
3e6a8fb6 57 <img src="//static.fsf.org/nosvn/enc-dev0/img/pump.io.png"
44a50574 58 class="share-logo" alt="[Pump.io]">&nbsp;
3e6a8fb6 59 <img src="//static.fsf.org/nosvn/enc-dev0/img/reddit-alien.png"
44a50574 60 class="share-logo" alt="[Reddit]">&nbsp;
3e6a8fb6 61 <img src="//static.fsf.org/nosvn/enc-dev0/img/hacker-news.png"
44a50574
DT
62 class="share-logo" alt="[Hacker News]">
63 </a>
ae5aaaee 64 </li>
b592e92f 65 <li class="spacer">V4.0</li>
b3ec2c8d 66 </ul>
6b62e8bb 67
2378bdbf 68 <!-- ~~~~~~~~~ FSF Introduction ~~~~~~~~~ -->
c919b2d2 69 <div id="fsf-intro">
06d022ce
DT
70 <h3>
71 <a href="http://u.fsf.org/ys">
72 <img alt="Free Software Foundation"
c1ea5176 73 src="//static.fsf.org/nosvn/enc-dev0/img/fsf-logo.png" />
06d022ce
DT
74 </a>
75 </h3>
76 <div class="fsf-emphasis">
77 <p>
b3d5c595 78 We fight for computer users' rights, and promote the development of free (as in freedom) software. Resisting bulk surveillance is very important to us.
06d022ce
DT
79 </p>
80 <p>
81 <strong>
d8ced2c3 82 We want to translate this guide into more languages, and make a version for encryption on mobile devices. Please donate, and help people around the world take the first step towards protecting their privacy with free software.
06d022ce
DT
83 </strong>
84 </p>
85 </div>
36e7b21f 86
45cff628 87 <p><a href="https://crm.fsf.org/civicrm/contribute/transact?reset=1&amp;id=14&amp;pk_campaign=email_self_defense&amp;pk_kwd=guide_donate"><img alt="Donate" src="//static.fsf.org/nosvn/enc-dev0/img/en/donate.png" /></a> </p>
06d022ce 88
2378bdbf
AIC
89 </div><!-- End #fsf-intro -->
90
399c9783
AIC
91 <!-- ~~~~~~~~~ Guide Introduction ~~~~~~~~~ -->
92 <div class="intro">
bf4eb540 93 <p>
de0ab142 94 <a id="infographic" href="infographic.html"><img src="//static.fsf.org/nosvn/enc-dev0/img/en/infographic-button.png" alt="View &amp; share our infographic &rarr;" /></a>
7fe1d11a 95 Bulk surveillance violates our fundamental rights and makes free speech risky. This guide will teach you a basic surveillance self-defense skill: email encryption. Once you've finished, you'll be able to send and receive emails that are scrambed to make sure a surveillance agent or thief intercepting your email can't read it. All you need is a computer with an Internet connection, an email account, and about half an hour.</p>
0fe6e02e
ZR
96
97<p>Even if you have nothing to hide, using encryption helps protect the privacy of people you communicate with, and makes life difficult for bulk surveillance systems. If you do have something important to hide, you're in good company; these are the same tools that Edward Snowden used to share his famous secrets about the NSA.</p>
98
7fe1d11a 99<p>In addition to using encryption, standing up to surveillance requires fighting politically for a <a href="http://gnu.org/philosophy/surveillance-vs-democracy.html">reduction in the amount of data collected on us</a>, but the essential first step is to protect yourself and make surveillance of your communication as difficult as possible. This guide helps you do that. If you're just starting out, don't worry about reading the "advanced" tips; they're completely non-essential to getting you up and running. Let's get started!</p>
f56da436 100
946f0ee1 101 </div><!-- End .intro -->
0a225228 102
bdf319c4 103 </div>
6c495e2d
AIC
104 </header><!-- End #header -->
105
2cb815ae 106<!-- ~~~~~~~~~ Section 1: Get the pieces ~~~~~~~~~ -->
6c495e2d 107 <section class="row" id="section1">
bdf319c4 108 <div>
5c207a4d 109 <!-- ~~~~~~~~~ section introduction: interspersed text ~~~~~~~~~ -->
2378bdbf 110 <div class="section-intro">
2378bdbf 111 <h2><em>#1</em> Get the pieces</h2>
1b319a0f 112<p class="notes">This guide relies on software which is freely licensed; it's completely transparent and anyone can copy it or make their own version. This makes it safer from surveillance than proprietary software (like Windows). Learn more about free software at <a href="https://u.fsf.org/ys">fsf.org</a>.</p>
8015decf 113
57f57e85 114<p>Most GNU/Linux operating systems come with GnuPG installed on them, so you don't have to download it. Before configuring GnuPG though, you'll need the IceDove desktop email program installed on your computer. Most GNU/Linux distributions have IceDove installed already, though it may be under the alternate name "Thunderbird." Email programs are another way to access the same email accounts you can access in a browser (like Gmail), but provide extra features.</p>
e7485dc5 115 <p>If you already have an email program, you can skip to <a href="#step-1b">Step 1.b</a>.</p>
2378bdbf 116 </div><!-- End .section-intro -->
dbd3bf12 117
2cb815ae 118 <!-- ~~~~~~~~~ a div for each step ~~~~~~~~~ -->
2378bdbf 119 <div id="step-1a" class="step">
2cb815ae 120 <div class="sidebar">
de0ab142 121 <p><img src="//static.fsf.org/nosvn/enc-dev0/img/en/screenshots/step1a-install-wizard.png" alt="Step 1.A: Install Wizard" /></p>
2cb815ae 122 </div><!-- /.sidebar -->
2378bdbf 123 <div class="main">
e7485dc5 124 <h3><em>Step 1.a</em> Setup your email program with your email account</h3>
7fe1d11a 125 <p>Open your email program and follow the wizard (step-by-step walkthrough) that sets it up with your email account. Look for the letters SSL, TLS, or STARTTLS to the right of the servers when you're setting up your account. If you don't see them, you will still be able to use encryption, but this means that the people running your email system are running behind the industry standard in protecting your security and privacy. We recommend that you send them a friendly email asking them to enable SSL, TLS, or STARTTLS for your email server.</p>
0a225228 126
2cb815ae
AIC
127 <!-- ~~~~~~~~~ Troubleshooting ~~~~~~~~~ -->
128 <div class="troubleshooting">
129 <h4>Troubleshooting</h4>
130 <dl>
c8a248b8
ZR
131 <dt>The wizard doesn't launch</dt>
132 <dd>You can launch the wizard yourself, but the menu option for doing so is named differently in each email programs. The button to launch it will be in the program's main menu, under "New" or something similar, titled something like "Add account" or "New/Existing email account."</dd>
133 <dt>The wizard can't find my account or isn't downloading my mail</dt>
a60a6e36 134 <dd>Before searching the Web, we recommend you start by asking other people who use your email system, to figure out the correct settings.</dd>
ba2db35a
AIC
135 <dt class="feedback">Don't see a solution to your problem?</dt>
136 <dd class="feedback">Please let us know on the <a href="https://libreplanet.org/wiki/GPG_guide/Public_Review">feedback page</a>.</dd>
2cb815ae
AIC
137 </dl>
138 </div><!-- /.troubleshooting -->
139
2378bdbf
AIC
140 </div><!-- End .main -->
141 </div><!-- End #step1-a .step -->
6c495e2d 142
2378bdbf 143 <!-- ~~~~~~~~~ a div for each step ~~~~~~~~~ -->
f44dd62f 144 <div id="step-1b" class="step">
b7e5df33 145 <div class="sidebar">
f44dd62f 146 <ul class="images">
de0ab142
DT
147 <li><img src="//static.fsf.org/nosvn/enc-dev0/img/en/screenshots/step1b-01-tools-addons.png" alt="Step 1.B: Tools -> Add-ons" /></li>
148 <li><img src="//static.fsf.org/nosvn/enc-dev0/img/en/screenshots/step1b-02-search.png" alt="Step 1.B: Search Add-ons" /></li>
149 <li><img src="//static.fsf.org/nosvn/enc-dev0/img/en/screenshots/step1b-03-install.png" alt="Step 1.B: Install Add-ons" /></li>
f44dd62f 150 </ul>
f584fc69
AIC
151 </div><!-- /.sidebar -->
152 <div class="main">
153 <h3><em>Step 1.b</em> Install the Enigmail plugin for your email program</h3>
e7485dc5 154 <p>In your email program's menu, select Add-ons (it may be in the Tools section). Make sure Extensions is selected on the left. Do you see Enigmail? If so, skip this step.</p>
2378bdbf
AIC
155 <p>If not, search "Enigmail" with the search bar in the upper right. You can take it from here. Restart your email program when you're done.</p>
156 <!-- ~~~~~~~~~ Troubleshooting ~~~~~~~~~ -->
157 <div class="troubleshooting">
158 <h4>Troubleshooting</h4>
159 <dl>
1e72473c
ZR
160 <dt>I can't find the menu.</dt>
161 <dd>In many new email programs, the main menu is represented by an image of three stacked horizontal bars.</dd>
61bbfa91 162
ba2db35a
AIC
163 <dt class="feedback">Don't see a solution to your problem?</dt>
164 <dd class="feedback">Please let us know on the <a href="https://libreplanet.org/wiki/GPG_guide/Public_Review">feedback page</a>.</dd>
2378bdbf
AIC
165 </dl>
166 </div><!-- /.troubleshooting -->
167 </div><!-- End .main -->
f44dd62f 168 </div><!-- End #step-1b .step -->
07cc2403
AL
169
170 <div id="step-1c" class="step">
171 <div class="main">
172 <h3><em>Step 1.c</em> Gather dice</h3>
173 <p>In the next step, you will need to come up with a secure password. To do that, we recommend that you use dice. The process will be easier for you if you have five dice, but one die will also work.</p>
174 </div><!-- End .main -->
175 </div><!-- End #step-1c .step -->
176
177
bdf319c4 178 </div>
6c495e2d 179 </section><!-- End #section1 -->
bdf319c4 180
2cb815ae 181<!-- ~~~~~~~~~ Section 2: Make your keys ~~~~~~~~~ -->
6c495e2d 182 <section class="row" id="section2">
bdf319c4 183 <div>
5c207a4d 184 <!-- ~~~~~~~~~ section introduction: interspersed text ~~~~~~~~~ -->
2378bdbf 185 <div class="section-intro">
bdf319c4 186 <h2><em>#2</em> Make your keys</h2>
bbfaa44d 187 <p>To use the GnuPG system, you'll need a public key and a private key (known together as a keypair). Each is a long string of randomly generated numbers and letters that are unique to you. Your public and private keys are linked together by a special mathematical function.</p>
f56da436
ZR
188
189<p>Your public key isn't like a physical key, because it's stored in the open in an online directory called a keyserver. People download it and use it, along with GnuPG, to encrypt emails they send to you. You can think of the keyserver as phonebook, where people who want to send you an encrypted email look up your public key.</p>
190
79bc3425 191<p>Your private key is more like a physical key, because you keep it to yourself (on your computer). You use GnuPG and your private key to descramble encrypted emails other people send to you. In addition to encryption and decryption, you can also use these keys to sign messages and check the authenticity of other people's signatures. This process helps stop impersonators. We'll discuss this more on the next section.</p>
2378bdbf 192 </div><!-- End .section-intro -->
6c495e2d 193
2cb815ae 194 <!-- ~~~~~~~~~ a div for each step ~~~~~~~~~ -->
2378bdbf
AIC
195 <div id="step-2a" class="step">
196 <div class="sidebar">
de0ab142 197 <p><img src="//static.fsf.org/nosvn/enc-dev0/img/en/screenshots/step2a-01-make-keypair.png" alt="Step 2.A: Make a Keypair" /></p>
2378bdbf
AIC
198 </div><!-- /.sidebar -->
199 <div class="main">
200 <h3><em>Step 2.a</em> Make a keypair</h3>
e7485dc5 201 <p>The Enigmail Setup wizard may start automatically. If it doesn't, select Enigmail &rarr; Setup Wizard from your email program's menu. You don't need to read the text in the window that pops up unless you'd like to, but it's good to read the text on the later screens of the wizard. Click Next with the default options selected, except in these instances:</p>
a632ae17 202<ul>
06f59232
ZR
203 <li>On the screen titled "Encryption," select "Encrypt all of my messages by default, because privacy is critical to me."</li>
204 <li>On the screen titled "Signing," select "Don't sign my messages by default."</li>
a9b758ff 205 <li>On the screen titled "Key Selection," select "I want to create a new key pair for signing and encrypting my email."</li>
e5409034 206 <li>On the screen titled "Create Key," pick a strong password! We recommend the Diceware method, which creates passwords which are both strong and memorable. To use the Diceware method, you will need the dice and <a href="http://world.std.com/~reinhold/diceware.wordlist.asc">this</a> list of words. Do not substitute computer dice for physical dice. Notice that each word on the word list corresponds to a unique five-digit number. Role one dice five times, or five dice once to select the first word. Don't rearrange or discard words, because doing so makes the process much less secure. Repeat this process until you have at least six words, and there's your password! Diceware passwords are hard to remember until you've typed it in a handful of times. Write down down your password and keep it with you at all times until you've got it memorized. Then, destroy the piece of paper. If you lose the piece of paper, you will still be able to revoke your key with your revocation certificate (which we'll talk about in just a minute).</li>
915b8aa0 207 <li>If you don't have dice, pick a password which is at least 12 characters long, and includes at least one lower case and upper case letter and at least one number or punctuation symbol. Don't forget your password, or all of this work will be wasted!
a632ae17 208</ul>
034f3546 209 <p class="notes">The program will take a little while to finish the next step, the "Key Creation" screen. While you wait, do something else with your computer, like watching a movie or browsing the Web. The more you use the computer at this point, the faster the key creation will go.</p>
688dc100 210 <p><span style="font-weight: bold;">When the "Key Generation Completed" screen pops up, select Generate Certificate and choose to save it in a safe place on your computer (we recommend making a folder called "Revocation Certificate" in your home folder and keeping it there). This step is essential for your email self-defense, as you'll learn more about in <a href="#section5">Section 5</a>.</span></p>
6c495e2d 211
50aa6a31 212
2378bdbf
AIC
213 <!-- ~~~~~~~~~ Troubleshooting ~~~~~~~~~ -->
214 <div class="troubleshooting">
215 <h4>Troubleshooting</h4>
216 <dl>
2ba31b7b
ZR
217 <dt>I can't find the Enigmail menu.</dt>
218 <dd>In many new email programs, the main menu is represented by an image of three stacked horizontal bars. Enigmail may be inside a section called Tools.</dd>
61bbfa91
ZR
219 <dt>The wizard says that it cannot find GnuPG.</dt>
220
2ba31b7b 221 <dd>Open whatever program you usually use for installing software, and search for GnuPG, then install it. Then restart the Enigmail setup wizard by going to Enigmail &rarr; Setup Wizard.</dd>
3233362f 222 <dt>More resources</dt>
0949b4e8
AL
223 <dd>If you're having trouble with our instructions or just want to learn more, check out <a href="https://enigmail.wiki/Key_Management#Generating_your_own_key_pair">Enigmail's wiki instructions for key generation</a>.</dd>
224
225
0a225228 226
ba2db35a
AIC
227 <dt class="feedback">Don't see a solution to your problem?</dt>
228 <dd class="feedback">Please let us know on the <a href="https://libreplanet.org/wiki/GPG_guide/Public_Review">feedback page</a>.</dd>
2378bdbf
AIC
229 </dl>
230 </div><!-- /.troubleshooting -->
7fe1d11a 231 <!-- ~~~~~~~~~ Troubleshooting ~~~~~~~~~ -->
18d05e65 232
7fe1d11a
AL
233 <div class="troubleshooting">
234 <h4>Advanced</h4>
235 <dl>
b592e92f 236
ce7ffcf0 237
e9c69538 238 <dt>Command line key generation</dt>
3aecec3f 239 <dd>If you prefer using the command line for a higher degree of control, you can follow the documentation from <a href="https://www.gnupg.org/gph/en/manual/c14.html#AEN25">The GNU Privacy Handbook</a>. Make sure you stick with "RSA and RSA" (the default), because it's newer and more secure than the algorithms recommended in the old previously mentioned documentation.</dd>
18d05e65 240
e5774e67 241 <dt>Advanced key pairs</dt>
2bbef580 242 <dd>When GnuPG creates a new keypair, it compartmentalizes the encryption function from the signing function through <a href="https://wiki.debian.org/Subkeys">subkeys</a>. If you use subkeys carefully, you can keep your GnuPG identity much more secure and recover from a compromised key much more quickly. <a href="https://alexcabal.com/creating-the-perfect-gpg-keypair/">Alex Cabal</a> and <a href="http://keyring.debian.org/creating-key.html">the Debian wiki</a> provide good guides for setting up a secure subkey configuration.</dd>
29db7a83 243 </dl>
7fe1d11a 244 </div><!-- /.troubleshooting -->
18d05e65
AL
245 </div><!-- End .main -->
246 </div><!-- End #step-2a .step -->
7fe1d11a
AL
247
248
249
548ae59b 250 <!-- ~~~~~~~~~ a div for each step ~~~~~~~~~ -->
8bd50444
ZR
251 <div id="step-2b" class="step">
252 <div class="main">
253 <h3><em>Step 2.b</em> Upload your public key to a keyserver</h3>
2ba31b7b 254 <p>In your email program's menu, select Enigmail &rarr; Key Management.</p>
8bd50444 255<p>Right click on your key and select Upload Public Keys to Keyserver. Use the default keyserver in the popup.</p>
7a3d8912 256<p class="notes">Now someone who wants to send you an encrypted message can download your public key from the Internet. There are multiple keyservers that you can select from the menu when you upload, but they are all copies of each other, so it doesn't matter which one you use. However, it sometimes takes a few hours for them to match each other when a new key is uploaded.</p>
8bd50444
ZR
257 <!-- ~~~~~~~~~ Troubleshooting ~~~~~~~~~ -->
258 <div class="troubleshooting">
259 <h4>Troubleshooting</h4>
260 <dl>
1536eb6d 261 <dt>The progress bar never finishes.</dt>
66a99343 262 <dd>Close the upload popup, make sure you are connected to the Internet, and try again. If that doesn't work, try again, selecting a different keyserver.</dd>
f0264d3e 263<dt>My key doesnt appear in the list</dt>
b40f9711 264 <dd>Try checking "Display All Keys by Default."</dd>
aa30907c
AL
265 <dt>More documentation</dt>
266 <dd>If you're having trouble with our instructions or just want to learn more, check out <a href="https://www.enigmail.net/documentation/quickstart-ch2.php#id2533620">Enigmail's documentation</a>.</dd>
a60a6e36 267
8bd50444
ZR
268 <dt class="feedback">Don't see a solution to your problem?</dt>
269 <dd class="feedback">Please let us know on the <a href="https://libreplanet.org/wiki/GPG_guide/Public_Review">feedback page</a>.</dd>
601e0398 270
8bd50444
ZR
271 </dl>
272 </div><!-- /.troubleshooting -->
a89b83c2
AL
273
274 <!-- ~~~~~~~~~ Troubleshooting ~~~~~~~~~ -->
275 <div class="troubleshooting">
276 <h4>Advanced</h4>
277 <dl>
20358d5b 278 <dt>Uploading a key from the command line</dt>
06fc6c49 279 <dd>You can also upload your keys to a keyserver through the <a href="https://help.ubuntu.com/community/GnuPrivacyGuardHowto#Uploading_the_key_to_Ubuntu_keyserver">command line</a>. <a href="https://sks-keyservers.net/overview-of-pools.php">This webpage</a> maintains a list highly interconnected keyservers. You can also <a href="https://www.gnupg.org/gph/en/manual/x56.html#AEN64">directly export your key</a> as a file on your computer.</dd>
a89b83c2
AL
280
281 </dl>
282 </div><!-- /.troubleshooting -->
8bd50444 283 </div><!-- End .main -->
d8b88fc2 284 </div><!-- End #step-2b .step -->
e155c686 285
548ae59b
ZR
286 <!-- ~~~~~~~~~ a div for each step ~~~~~~~~~ -->
287 <div id="terminology" class="step">
288 <div class="main">
289 <h3>GnuPG, OpenPGP, what?</h3>
2ba31b7b 290 <p>In general, the terms GnuPG, GPG, GNU Privacy Guard, OpenPGP and PGP are used interchangeably. Technically, OpenPGP (Pretty Good Privacy) is the encryption standard, and GNU Privacy Guard (often shortened to GPG or GnuPG) is the program that implements the standard. Enigmail is a plug-in program for your email program that provides an interface for GnuPG.</p>
548ae59b
ZR
291 </div><!-- End .main -->
292 </div><!-- End #terminology.step-->
293
8bd50444 294
bdf319c4 295 </div>
6c495e2d 296 </section><!-- End #section2 -->
bdf319c4 297
2cb815ae 298<!-- ~~~~~~~~~ Section 3: Try it out ~~~~~~~~~ -->
6c495e2d 299 <section class="row" id="section3">
bdf319c4 300 <div>
5c207a4d 301 <!-- ~~~~~~~~~ section introduction: interspersed text ~~~~~~~~~ -->
2378bdbf 302 <div class="section-intro">
2378bdbf 303 <h2><em>#3</em> Try it out!</h2>
6fdf67de
ZR
304 <p>Now you'll try a test correspondence with a computer program named Edward, which knows how to use encryption. Except where noted, these are the same steps you'd follow when corresponding with a real, live person.</p>
305
04b5d6d7 306 <!-- <p>NOTE: Edward is currently having some technical difficulties, so he may take a long time to respond, or not respond at all. We're sorry about this and we're working hard to fix it. Your key will still work even without testing with Edward.</p> -->
3568a584 307 </div><!-- End .section-intro -->
5c207a4d 308
2cb815ae 309 <!-- ~~~~~~~~~ a div for each step ~~~~~~~~~ -->
2378bdbf
AIC
310 <div id="step-3a" class="step">
311 <div class="sidebar">
de0ab142 312 <p><img src="//static.fsf.org/nosvn/enc-dev0/img/en/screenshots/section3-try-it-out.png" alt="Try it out." /></p>
2378bdbf
AIC
313 </div><!-- /.sidebar -->
314 <div class="main">
b3d5c595 315 <h3><em>Step 3.a</em> Send Edward your public key</h3>
2ba31b7b 316 <p>This is a special step that you won't have to do when corresponding with real people. In your email program's menu, go to Enigmail &rarr; Key Management. You should see your key in the list that pops up. Right click on your key and select Send Public Keys by Email. This will create a new draft message, as if you had just hit the Write button.</p>
43bd32d7 317
1dd15497 318<p>Address the message to edward-en@fsf.org. Put at least one word (whatever you want) in the subject and body of the email. Don't send yet.</p>
c8a248b8
ZR
319
320<p>There should be an icon of a yellow key in the bottom right of the composition window. This means that encryption is on, however, we want this first special message to Edward to be unencrypted. Click the key icon once to turn encryption off. The key should become grey, with a blue dot on it (to alert you that the setting has been changed from the default). Once encryption is off, hit Send.</p>
43bd32d7 321
b3d5c595 322<p class="notes">It may take two or three minutes for Edward to respond. In the meantime, you might want to skip ahead and check out the <a href="#section5">Use it Well</a> section of this guide. Once he's responded, head to the next step. From here on, you'll be doing just the same thing as when corresponding with a real person.</p>
c8a248b8
ZR
323
324<p>When you open Edward's reply, Enigmail may prompt you for your password before using your private key to decrypt it.</p>
2378bdbf 325 </div><!-- End .main -->
d8b88fc2 326 </div><!-- End #step-3a .step -->
6c495e2d 327
2cb815ae 328 <!-- ~~~~~~~~~ a div for each step ~~~~~~~~~ -->
5c207a4d
AIC
329 <div id="step-3b" class="step">
330 <div class="main">
331 <h3><em>Step 3.b</em> Send a test encrypted email</h3>
c8a248b8 332 <p>Write a new email in your email program, addressed to edward-en@fsf.org. Make the subject "Encryption test" or something similar and write something in the body.</p>
d77ed4f0 333 <p>The key in the bottom right of the window should be yellow, meaning encryption is on. This will be your default from now on.</p>
d325c924 334 <p class="notes">Next to the key, you'll notice an icon of a pencil. Clicking this tells Enigmail to add a special, unique signature to your message, generated using your private key. This is a separate feature from encryption, and you don't have to use it for this guide.</p>
5c207a4d
AIC
335 <p>Click Send. Enigmail will pop up a window that says "Recipients not valid, not trusted or not found."</p>
336
357dc69d 337 <p>To encrypt an email to Edward, you need his public key, so now you'll have Enigmail download it from a keyserver. Click Download Missing Keys and use the default in the pop-up that asks you to choose a keyserver. Once it finds keys, check the first one (Key ID starting with C), then select ok. Select ok in the next pop-up.</p>
5c207a4d 338
c8a248b8 339 <p>Now you are back at the "Recipients not valid, not trusted or not found" screen. Check the box in front of Edward's key and click Send.</p>
97925583
ZR
340
341<p class="notes">Since you encrypted this email with Edward's public key, Edward's private key is required to decrypt it. Edward is the only one with his private key, so no one except him &mdash; not even you &mdash; can decrypt it.</p>
5c207a4d
AIC
342 <!-- ~~~~~~~~~ Troubleshooting ~~~~~~~~~ -->
343 <div class="troubleshooting">
344 <h4>Troubleshooting</h4>
345 <dl>
b3d5c595 346 <dt>Enigmail can't find Edward's key</dt>
7a944c0b 347 <dd>Close the pop-ups that have appeared since you clicked Send. Make sure you are connected to the Internet and try again. If that doesn't work, repeat the process, choosing a different keyserver when it asks you to pick one.</dd>
47a7a924
AL
348 <dt>More resources</dt>
349 <dd>If you're still having trouble with our instructions or just want to learn more, check out <a href="https://enigmail.wiki/Signature_and_Encryption#Encrypting_a_message">Enigmail's wiki</a>.</dd>
ba2db35a
AIC
350 <dt class="feedback">Don't see a solution to your problem?</dt>
351 <dd class="feedback">Please let us know on the <a href="https://libreplanet.org/wiki/GPG_guide/Public_Review">feedback page</a>.</dd>
5c207a4d
AIC
352 </dl>
353 </div><!-- /.troubleshooting -->
c2e62b61 354
fbe7d6de 355
0b3124d7
AL
356 <!-- ~~~~~~~~~ Troubleshooting ~~~~~~~~~ -->
357 <div class="troubleshooting">
045aa237 358 <h4>Advanced</h4>
0b3124d7 359 <dl>
e9c69538 360 <dt>Encrypt messages from the command line</dt>
90960c08 361 <dd>You can also encrypt and decrypt messages and files form the <a href="https://www.gnupg.org/gph/en/manual/x110.html">command line</a>, if that's your preference. The option --armor makes the encrypted output appear in the regular character set.</dd>
0b3124d7
AL
362 </dl>
363 </div><!-- /.troubleshooting -->
c2e62b61 364
1ed61be5 365
5c207a4d
AIC
366 </div><!-- End .main -->
367 </div><!-- End #step-3b .step -->
43bd32d7 368
8bd50444
ZR
369 <!-- ~~~~~~~~~ a div for each step ~~~~~~~~~ -->
370 <div id="step-headers_unencrypted" class="step">
371 <div class="main">
6e1b0fa2 372 <h3><em>Important:</em> Security tips</h3>
452ac60c 373 <p>Even if you encrypt your email, the subject line is not encrypted, so don't put private information there. The sending and receiving addresses aren't encrypted either, so a surveillance system can still figure out who you're communicating with. Also, surveillance agents will know that you're using GnuPG, even if they can't figure out what you're saying. When you send attachments, Enigmail will give you an option of whether you want to encrypt them.</p>
85e7a168 374 <p>Encryption only works when you use it, so it's a good habit to double-check that email encryption is turned on before you hit send.</p>
7a944c0b 375
8bd50444
ZR
376 </div><!-- End .main -->
377 </div><!-- End #step-headers_unencrypted .step-->
378
379
43bd32d7
ZR
380 <!-- ~~~~~~~~~ a div for each step ~~~~~~~~~ -->
381 <div id="step-3c" class="step">
382 <div class="main">
383 <h3><em>Step 3.c</em> Receive a response</h3>
97925583 384 <p>When Edward receives your email, he will use his private key to decrypt it, then use your public key (which you sent him in <a href="#step-3a">Step 3.A</a>) to encrypt his reply to you.</p>
668de811 385
b3d5c595
ZR
386 <p class="notes">It may take two or three minutes for Edward to respond. In the meantime, you might want to skip ahead and check out the <a href="#section5">Use it Well</a> section of this guide.</p>
387 <p>When you receive Edward's email and open it, Enigmail will automatically detect that it is encrypted with your public key, and then it will use your private key to decrypt it.</p>
388 <p>Notice the bar that Enigmail shows you above the message, with information about the status of Edward's key.</p>
2378bdbf 389 </div><!-- End .main -->
43bd32d7 390 </div><!-- End #step-3c .step -->
6c495e2d 391
b089aab1 392
43bd32d7 393 <div id="step-3d" class="step">
2378bdbf 394 <div class="main">
43bd32d7 395 <h3><em>Step 3.d</em> Send a test signed email to a friend</h3>
20358d5b 396 <p>GnuPG includes a way for you to sign messages and files, verifying that they came from you and that they weren't tampered with along the way. These signatures are stronger than their pen-and-paper cousins -- they're impossible to forge, because they're impossible to create without your private key (another reason to keep your private key safe).</p>
b089aab1
AL
397
398 <p>You can sign messages to anyone (including people who haven't created their own keypair!) so it's a great way to promote GnuPG. To sign an email to a friend, click the pencil icon next to the lock icon so that it turns gold.If you sign a message, Enigmail will ask you for your password before it sends the message off. I will do this every time it needs to use your private key.</p>
399
400 <p>When the pencil is gold but the lock is grey, the email will be signed but not encrypted. When the pencil is grey and the lock is gold, the email will be encrypted but not signed. When they're both gold, the email will be signed and encrypted.</p>
d351e1bf 401 </div>
b089aab1 402 </div>
bdf319c4 403 </div>
b089aab1 404 </section>
61bbfa91 405
bdf319c4 406
2cb815ae 407<!-- ~~~~~~~~~ Section 4: Learn the Web of Trust ~~~~~~~~~ -->
6c495e2d 408 <section class="row" id="section4">
bdf319c4 409 <div>
5c207a4d 410 <!-- ~~~~~~~~~ section introduction: interspersed text ~~~~~~~~~ -->
2378bdbf 411 <div class="section-intro">
2378bdbf 412 <h2><em>#4</em> Learn the Web of Trust</h2>
b0ce405b 413 <p>Email encryption is a powerful technology, but it has a weakness; it requires a way to verify that a person's public key is actually theirs. Otherwise, there would be no way to stop an attacker from making an email address with your friend's name, creating keys to go with it and impersonating your friend. That's why the free software programmers that developed email encryption created keysigning and the Web of Trust.</p>
eacb2880 414
f62c428c
AL
415<p>When you sign someone's key, you are publicly saying that you've verified that it belongs to them and not an impostor. Signing keys and messages is the same type mathematical operation, but they carry very different implications. It's a good practice to generally sign your email, but if you casually sign people's keys, you may accidently end up vouching for the identity of an imposter!</p>
416
417<p>People who use your public key can see who has signed it. Once you've used GnuPG for a long time, you may have hundreds of signatures. The Web of Trust is a constellation of GnuPG users, connected to each other by chains of trust expressed through signatures. The more signatures of people you trust a key has, the more trustworthy that key is.</p>
eacb2880 418
6ce3ff70 419
eacb2880 420
2378bdbf 421 </div><!-- End .section-intro -->
6c495e2d 422
2cb815ae 423 <!-- ~~~~~~~~~ a div for each step ~~~~~~~~~ -->
2378bdbf
AIC
424 <div id="step-4a" class="step">
425 <div class="sidebar">
de0ab142 426 <p><img src="//static.fsf.org/nosvn/enc-dev0/img/en/screenshots/section4-web-of-trust.png" alt="Section 4: Web of Trust" /></p>
2378bdbf
AIC
427 </div><!-- /.sidebar -->
428 <div class="main">
429 <h3><em>Step 4.a</em> Sign a key</h3>
2ba31b7b 430 <p>In your email program's menu, go to Enigmail &rarr; Key Management.</p>
b3d5c595 431 <p>Right click on Edward's public key and select Sign Key from the context menu.</p>
66a99343 432 <p>In the window that pops up, select "I will not answer" and click ok.</p>
c8a248b8 433 <p>Now you should be back at the Key Management menu. Select Keyserver &rarr; Upload Public Keys and hit ok.</p>
b3d5c595 434 <p class="notes">You've just effectively said "I trust that Edward's public key actually belongs to Edward." This doesn't mean much because Edward isn't a real person, but it's good practice.</p>
eacb2880 435
399c9783 436
0fe6e02e 437 <!--<div id="pgp-pathfinder">
399c9783 438 <form enctype="application/x-www-form-urlencoded" action="/mk_path.cgi" method="get">
20304456
AIC
439 <p><strong>From:</strong> <input type="text" placeholder="xD41A008" name="FROM"></p>
440 <p><strong>To:</strong> <input type="text" placeholder="50BD01x4" name="TO"></p>
399c9783
AIC
441 <p class="buttons"><input type="submit" value="trust paths" name="PATHS"> <input type="reset" value="reset" name=".reset"></p>
442 </form>
eb0bb593 443 </div>End #pgp-pathfinder -->
399c9783 444
2378bdbf 445 </div><!-- End .main -->
b592e92f 446 </div><!-- End #step-4a .step -->
e155c686 447
a7991993
ZR
448 <!-- ~~~~~~~~~ a div for each step ~~~~~~~~~ -->
449 <div id="step-sign_real_keys" class="step">
450 <div class="main">
ef499e87 451 <h3>Identifying keys: Fingerprints and IDs</h3>
c5025a0e
AL
452 <p>People's public keys are usually identified by their key fingerprint, which is a string of digits like F357AA1A5B1FA42CFD9FE52A9FF2194CC09A61E8 (for Edward's key). You can see the fingerprint for your public key, and other public keys saved on your computer, by going to Enigmail &rarr; Key Management in your email program's menu, then right clicking on the key and choosing Key Properties. It's good practice to share your fingerprint wherever you share your email address, so that people can double-check that they have the correct public key when they download yours from a keyserver.</p>
453
866845c9 454<p class="notes">You may also see public keys referred to by their key ID, which is simply the last 8 digits of the fingerprint, like C09A61E8 for Edward. The key ID is visible directly from the Key Management window. This key ID is like a person's first name (it is a useful shorthand but may not be unique to a given key), whereas the fingerprint actually identifies the key uniquely without the possibility of confusion. If you only have the key ID, you can still look up the key (as well as its fingerprint), like you did in Step 3, but if multiple options appear, you'll need the fingerprint of the person to whom you are trying to communicate to verify which one to use.</p>
c5025a0e 455
a7991993
ZR
456 </div><!-- End .main -->
457 </div><!-- End #step-sign_real_keys .step-->
458
c5025a0e 459 <!-- ~~~~~~~~~ a div for each step ~~~~~~~~~ -->
65dfae22 460 <div id="check-ids-before-signing" class="step">
c5025a0e
AL
461 <div class="main">
462 <h3><em>Important:</em> check people's identification before signing their keys</h3>
463 <p>Before signing a real person's key, always make sure it actually belongs to them, and that they are who they say they are. Ask them to show you their ID (unless you trust them very highly) and their public key fingerprint -- not just the shorter public key ID, which could refer to another key as well. In Enigmail, answer honestly in the window that pops up and asks "How carefully have you verified that the key you are about to sign actually belongs to the person(s) named above?".</p>
cc670123 464
ef499e87
AL
465 <!-- ~~~~~~~~~ Troubleshooting ~~~~~~~~~ -->
466 <div class="troubleshooting">
467 <h4>Advanced</h4>
468 <dl>
108c68e9 469 <dt>Master the Web of Trust</dt>
fbd9feba 470 <dd>Unfortunately, trust does not spread between users the way <a href="http://fennetic.net/irc/finney.org/~hal/web_of_trust.html">many people think</a>. One of best ways to strengthen the GnuPG community is to properly <a href="https://www.gnupg.org/gph/en/manual/x334.html">understand</a> the web of trust and to carefully sign as many people's keys as <a href="http://www.cryptnet.net/fdp/crypto/keysigning_party/en/keysigning_party.html">circumstances</a> permit.</dd>
f37d7b34 471 </dl>
ef499e87 472 </div><!-- /.troubleshooting -->
cc670123 473 </div><!-- End .main -->
f37d7b34 474
ef499e87 475 </div><!-- End #step-sign_real_keys .step-->
4abf0859 476
4abf0859 477
bdf319c4 478 </div>
6c495e2d 479 </section><!-- End #section4 -->
bdf319c4 480
2cb815ae 481<!-- ~~~~~~~~~ Section 5: Use it well ~~~~~~~~~ -->
5c207a4d 482 <section id="section5" class="row">
bdf319c4 483 <div>
5c207a4d 484 <!-- ~~~~~~~~~ section introduction: interspersed text ~~~~~~~~~ -->
2378bdbf 485 <div class="section-intro">
2378bdbf 486 <h2><em>#5</em> Use it well</h2>
19e80165 487<p>Everyone uses GnuPG a little differently, but it's important to follow some basic practices to keep your email secure. Not following them, you risk the privacy of the people you communicate with, as well as your own, and damage the Web of Trust.</p>
2378bdbf 488 </div><!-- End .section-intro -->
6c495e2d 489
2cb815ae 490 <!-- ~~~~~~~~~ a div for each step ~~~~~~~~~ -->
2378bdbf 491 <div id="step-5a" class="step">
3fe46e6b 492 <div class="sidebar">
de0ab142 493 <p><img src="//static.fsf.org/nosvn/enc-dev0/img/en/screenshots/section5-01-use-it-well.png" alt="Section 5: Use it Well" /></p>
3fe46e6b 494 </div><!-- /.sidebar -->
2378bdbf 495 <div class="main">
19e80165
ZR
496 <h3>When should I encrypt?</h3>
497
66a99343 498 <p>The more you can encrypt your messages, the better. If you only encrypt emails occasionally, each encrypted message could raise a red flag for surveillance systems. If all or most of your email is encrypted, people doing surveillance won't know where to start.</p>
19e80165 499
acd2fb80 500<p>That's not to say that only encrypting some of your email isn't helpful -- it's a great start and it makes bulk surveillance more difficult.</p>
0a225228 501
2378bdbf
AIC
502 </div><!-- End .main -->
503 </div><!-- End #step-5a .step -->
504
7e60af07 505 <!-- ~~~~~~~~~ a div for each step ~~~~~~~~~ -->
2378bdbf 506 <div id="step-5b" class="step">
7e60af07 507 <div class="sidebar">
de0ab142 508 <p><img src="//static.fsf.org/nosvn/enc-dev0/img/en/screenshots/section5-02-use-it-well.png" alt="Section 5: Use it Well" /></p>
7e60af07 509 </div><!-- /.sidebar -->
2378bdbf 510 <div class="main">
b592e92f 511 <h3>Be wary of invalid keys</h3>
40e65992 512 <p>GnuPG makes email safer, but it's still important to watch out for invalid keys, which might have fallen into the wrong hands. Email encrypted with invalid keys might be readable by surveillance programs.</p>
2ba31b7b 513 <p>In your email program, go back to the second email that Edward sent you. Because Edward encrypted it with your public key, it will have a message from Enigmail at the top, which most likely says "Enigmail: Part of this message encrypted."</p>
023d4279 514<p><b>When using GnuPG, make a habit of glancing at that bar. The program will warn you there if you get an email encrypted with a key that can't be trusted.</b></p>
2378bdbf
AIC
515 </div><!-- End .main -->
516 </div><!-- End #step-5b .step -->
6c495e2d 517
7e60af07 518 <!-- ~~~~~~~~~ a div for each step ~~~~~~~~~ -->
2378bdbf
AIC
519 <div id="step-5c" class="step">
520 <div class="main">
19e80165 521 <h3>Copy your revocation certificate to somewhere safe</h3>
66a99343
ZR
522 <p>Remember when you created your keys and saved the revocation certificate that GnuPG made? It's time to copy that certificate onto the safest digital storage that you have -- the ideal thing is a flash drive, disk, or hard drive stored in a safe place in your home.</p>
523<p>If your private key ever gets lost or stolen, you'll need this certificate file to let people know that you are no longer using that keypair.</p>
2378bdbf 524 </div><!-- End .main -->
19e80165 525 </div><!-- End #step-5c .step -->
f44dd62f 526
072c976e
AL
527 <!-- ~~~~~~~~~ a div for each step ~~~~~~~~~ -->
528 <div id="step-lost_key" class="step">
529 <div class="main">
530 <h3><em>Important:</em> act swiftly if someone gets your private key</h3>
531 <p>If you lose your private key or someone else gets ahold of it (say, by stealing or cracking your computer), it's important to revoke it immediately before someone else uses it to read your encrypted email. This guide doesn't cover how to revoke a key, but you can follow the <a href="https://www.gnupg.org/gph/en/manual.html#AEN305">instructions on the GnuPG site</a>. After you're done revoking, send an email to everyone with whom you usually use your key to make sure they know.</p>
532 </div><!-- End .main -->
533 </div><!-- End #step-lost_key .step-->
125222a3
AL
534
535 <!-- ~~~~~~~~~ a div for each step ~~~~~~~~~ -->
65dfae22 536 <div id="webmail-and-GnuPG" class="step">
125222a3 537 <div class="main">
072c976e 538 <h3>Webmail and GnuPG</h3>
125222a3
AL
539 <p>When you use a web browser to access your email, you're using webmail, an email program stored on a distant website. Unlike webmail, your desktop email program runs on your own computer. Although webmail can't decrypt encrypted email, it will still display it in its encrypted form. If you primarily use webmail, you'll know to open your email client when you receive a scrambled email.</p>
540 </div><!-- End .main -->
541 </div><!-- End #step-lost_key .step-->
542
22bf5392 543 <!-- ~~~~~~~~~ a div for each step ~~~~~~~~~ -->
65dfae22 544 <div id="privacy-tor" class="step">
22bf5392
AL
545 <div class="main">
546 <h3>Optional: Protect Your Privacy with Tor</h3>
547 <p><a href=https://www.torproject.org/about/overview.html.en>The Onion Router (Tor) network</a> wraps Internet communication in multiple layers of encryption and bounces it around the world several times. When used properly, Tor confuses surveillance field agents and the global surveillance apparatus alike. To have your email program send and receive email over Tor, install the <a href="https://addons.mozilla.org/en-us/thunderbird/addon/torbirdy/">Torbirdy plugin</a> the same way you installed Enigmail, by searching for it through Add-ons.</p>
548
549 <p>Before beginning to check your email over Tor, make sure you understand <a href="https://www.torproject.org/docs/faq.html.en#WhatProtectionsDoesTorProvide">the security tradeoffs involved</a>. This <a href=https://www.eff.org/pages/tor-and-https">infographic</a> demonstrates how Tor keeps you secure.
550 </div><!-- End .main -->
551 </div><!-- End #step-lost_key .step-->
552
f44dd62f 553
0a225228 554 <!-- ~~~~~~~~~ a div for each step ~~~~~~~~~
19e80165
ZR
555 <div id="step-5d" class="step">
556 <div class="main">
b0ce405b 557 <h3>Make your public key part of your online identity</h3>
be23bf7b 558 <p> First add your public key fingerprint to your email signature, then compose an email to at least five of your friends, telling them you just set up GnuPG and mentioning your public key fingerprint. Link to this guide and ask them to join you. Don't forget that there's also an awesome <a href="infographic.html">infographic to share.</a></p>
b0ce405b 559
be23bf7b 560<p class="notes">Start writing your public key fingerprint anywhere someone would see your email address: your social media profiles, blog, Website, or business card. (At the Free Software Foundation, we put ours on our <a href="https://fsf.org/about/staff">staff page</a>.) We need to get our culture to the point that we feel like something is missing when we see an email address without a public key fingerprint.</p>
0a225228 561 </div><!-- End .main
bbfaa44d 562 </div> End #step-5d .step-->
19e80165
ZR
563
564
bdf319c4 565 </div>
6c495e2d 566 </section><!-- End #section5 -->
bdf319c4 567
d85363e7
ZR
568
569
2cb815ae 570<!-- ~~~~~~~~~ Section 6: Next steps ~~~~~~~~~ -->
6c495e2d 571 <section class="row" id="section6">
d85363e7
ZR
572 <div id="step-click_here" class="step">
573 <div class="main">
c6345aa7 574 <h2><a href="next_steps.html">Great job! Check out the next steps.</a></h2>
0a225228 575
d85363e7
ZR
576 </div><!-- End .main -->
577 </div><!-- End #step-click_here .step-->
bb28ee32 578
6c495e2d 579 </section><!-- End #section6 -->
bdf319c4 580
2cb815ae 581<!-- ~~~~~~~~~ FAQ ~~~~~~~~~ -->
f44dd62f
AIC
582<!-- When un-commenting this section go to main.css and search
583 for /* Guide Sections Background */ then add #faq to the desired color
0a225228 584
6c495e2d 585 <section class="row" id="faq">
bdf319c4
AIC
586 <div>
587 <div class="sidebar">
588 <h2>FAQ</h2>
f44dd62f 589 </div>
6c495e2d 590
bdf319c4 591 <div class="main">
6c495e2d
AIC
592 <dl>
593 <dt>My key expired</dt>
594 <dd>Answer coming soon.</dd>
595
596 <dt>Who can read encrypted messages? Who can read signed ones?</dt>
597 <dd>Answer coming soon.</dd>
598
599 <dt>My email program is opening at times I don't want it to open/is now my default program and I don't want it to be.</dt>
600 <dd>Answer coming soon.</dd>
601 </dl>
f44dd62f 602 </div>
bdf319c4 603 </div>
f44dd62f 604 </section> --><!-- End #faq -->
bdf319c4 605
2cb815ae 606<!-- ~~~~~~~~~ Footer ~~~~~~~~~ -->
6c495e2d 607 <footer class="row" id="footer">
bdf319c4 608 <div>
bdf319c4 609 <div id="copyright">
c1ea5176 610 <h4><a href="https://u.fsf.org/ys"><img alt="Free Software Foundation" src="//static.fsf.org/nosvn/enc-dev0/img/fsf-logo.png" /></a></h4>
866845c9 611 <p>Copyright &copy; 2014-2015 <a href="https://u.fsf.org/ys">Free Software Foundation</a>, Inc. <a href="https://my.fsf.org/donate/privacypolicy.html">Privacy Policy</a>. <a href="https://u.fsf.org/yr">Join.</a></p>
b592e92f 612 <p><em><a href="http://agpl.fsf.org/emailselfdefense.fsf.org/edward/CURRENT/edward.tar.gz">Source code of Edward reply bot by Josh Drake &lt;zamnedix@gnu.org&gt; available under the GNU General Public License.</a></em></p>
0db2fdd1 613<p>The images on this page are under a <a href="https://creativecommons.org/licenses/by/4.0/">Creative Commons Attribution 4.0 license (or later version)</a>, and the rest of it is under a <a href="https://creativecommons.org/licenses/by-sa/4.0">Creative Commons Attribution-ShareAlike 4.0 license (or later version)</a>. &mdash; <a href="http://www.gnu.org/licenses/license-list.html#OtherLicenses">Why these licenses?</a></p>
d325c924 614 <p>Download the source package for <a href="emailselfdefense_source.zip">this guide</a>. Fonts used in the guide &amp; infographic: <a href="https://www.google.com/fonts/specimen/Dosis">Dosis</a> by Pablo Impallari, <a href="http://www.google.com/fonts/specimen/Signika">Signika</a> by Anna Giedry&#347;, <a href="http://www.google.com/fonts/specimen/Archivo+Narrow">Archivo Narrow</a> by Omnibus-Type, <a href="http://www.thegopherarchive.com/gopher-files-hacks-pxl2000-119351.htm">PXL-2000</a> by Florian Cramer.</p>
ab272e66
DT
615 <p>
616 <a href="//weblabels.fsf.org/emailselfdefense.fsf.org/"
617 rel="jslicense">
618 JavaScript license information
619 </a>
620 </p>
6c495e2d 621 </div><!-- /#copyright -->
7e60af07 622 <p class="credits">
2013b270 623 Infographic and guide design by <a rel="external" href="http://jplusplus.org"><strong>Journalism++</strong> <img src="//static.fsf.org/nosvn/enc-dev0/img/jplusplus.png" alt="Journalism++" /></a>
7e60af07 624 </p><!-- /.credits -->
bdf319c4 625 </div>
6c495e2d
AIC
626 </footer><!-- End #footer -->
627
f65fbc20
LMM
628 <script src="//static.fsf.org/nosvn/enc-dev0/js/jquery-1.11.0.min.js"></script>
629 <script src="//static.fsf.org/nosvn/enc-dev0/js/scripts.js"></script>
ad76913c 630
7e3f9dfa
DT
631 <!-- Piwik -->
632 <script type="text/javascript">
633 /*
634 @licstart The following is the entire license notice for the
635 JavaScript code in this page.
636
637 Copyright 2014 Matthieu Aubry
638
639 This program is free software: you can redistribute it and/or modify
640 it under the terms of the GNU General Public License as published by
641 the Free Software Foundation, either version 3 of the License, or
642 (at your option) any later version.
643
644 This program is distributed in the hope that it will be useful,
645 but WITHOUT ANY WARRANTY; without even the implied warranty of
646 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
647 GNU General Public License for more details.
648
649 You should have received a copy of the GNU General Public License
650 along with this program. If not, see http://www.gnu.org/licenses/.
651
652 @licend The above is the entire license notice
653 for the JavaScript code in this page.
654 */
655 var _paq = _paq || [];
656 _paq.push(["setDocumentTitle", document.domain + "/" + document.title]);
657 _paq.push(["setCookieDomain", "*.www.fsf.org"]);
658 _paq.push(["setDomains", ["*.www.fsf.org","*.www.fsf.org"]]);
659 _paq.push(["trackPageView"]);
660 _paq.push(["enableLinkTracking"]);
661
662 (function() {
663 var u=(("https:" == document.location.protocol) ? "https" : "http") + "://piwik.fsf.org/";
664 _paq.push(["setTrackerUrl", u+"piwik.php"]);
665 _paq.push(["setSiteId", "5"]);
666 var d=document, g=d.createElement("script"), s=d.getElementsByTagName("script")[0]; g.type="text/javascript";
667 g.defer=true; g.async=true; g.src=u+"piwik.js"; s.parentNode.insertBefore(g,s);
668 })();
669 </script>
670 <!-- End Piwik Code -->
bdf319c4
AIC
671 </body>
672</html>