zh-hans: update the screenshots.
[enc.git] / esd-temp.pot
CommitLineData
db1d71be
TG
1# SOME DESCRIPTIVE TITLE
2# Copyright (C) YEAR Free Software Foundation, Inc.
3# This file is distributed under the same license as the PACKAGE package.
eabe8a9a
TS
4# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
5#
6#, fuzzy
7msgid ""
8msgstr ""
db1d71be 9"Project-Id-Version: PACKAGE VERSION\n"
eceb2f13 10"POT-Creation-Date: 2022-04-16 18:29+0200\n"
eabe8a9a
TS
11"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
12"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
13"Language-Team: LANGUAGE <LL@li.org>\n"
14"Language: \n"
15"MIME-Version: 1.0\n"
16"Content-Type: text/plain; charset=UTF-8\n"
17"Content-Transfer-Encoding: 8bit\n"
18
71b90906
TG
19#. type: Attribute 'lang' of: <html>
20msgid "en"
21msgstr ""
22
a8687551
TS
23#. type: Attribute 'content' of: <html><head><meta>
24msgid "text/html; charset=utf-8"
25msgstr ""
26
eabe8a9a 27#. type: Content of: <html><head><title>
eabe8a9a
TS
28msgid "Email Self-Defense - a guide to fighting surveillance with GnuPG encryption"
29msgstr ""
30
a8687551 31#. type: Attribute 'content' of: <html><head><meta>
8cd4252b
TG
32msgid ""
33"GnuPG, GPG, openpgp, surveillance, privacy, email, security, GnuPG2, "
34"encryption"
a8687551
TS
35msgstr ""
36
37#. type: Attribute 'content' of: <html><head><meta>
38msgid ""
39"Email surveillance violates our fundamental rights and makes free speech "
40"risky. This guide will teach you email self-defense in 40 minutes with "
41"GnuPG."
42msgstr ""
43
44#. type: Attribute 'content' of: <html><head><meta>
45msgid "width=device-width, initial-scale=1"
46msgstr ""
47
eabe8a9a 48#. type: Content of: <html><body><header><div><p>
eabe8a9a
TS
49msgid ""
50"<strong>Please check your email for a confirmation link now. Thanks for "
51"joining our list!</strong>"
52msgstr ""
53
54#. type: Content of: <html><body><header><div><p>
eabe8a9a
TS
55msgid ""
56"If you don't receive the confirmation link, send us an email at info@fsf.org "
57"to be added manually."
58msgstr ""
59
e7253b03 60#. type: Attribute 'alt' of: <html><body><header><div><p><img>
eabe8a9a
TS
61msgid "Try it out."
62msgstr ""
63
64#. type: Content of: <html><body><header><div><p>
eabe8a9a
TS
65msgid "Join us on microblogging services for day-to-day updates:"
66msgstr ""
67
68#. type: Content of: <html><body><section><div><div><div><p><a>
eabe8a9a
TS
69msgid "<a href=\"https://status.fsf.org/fsf\">"
70msgstr ""
71
72#. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
eabe8a9a
TS
73msgid "[GNU Social]"
74msgstr ""
75
76#. type: Content of: <html><body><section><div><div><div><p><a>
60715780 77msgid "&nbsp;GNU Social</a>&nbsp; |&nbsp; <a href=\"https://hostux.social/@fsf\">"
eabe8a9a
TS
78msgstr ""
79
80#. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
60715780 81msgid "[Mastodon]"
eabe8a9a
TS
82msgstr ""
83
84#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 85msgid ""
60715780 86"&nbsp;Mastodon</a>&nbsp; |&nbsp; <a "
eabe8a9a
TS
87"href=\"https://www.twitter.com/fsf\">Twitter</a>"
88msgstr ""
89
90#. type: Content of: <html><body><header><div><p>
eabe8a9a
TS
91msgid ""
92"<small><a href=\"https://www.fsf.org/twitter\">Read why GNU Social and "
60715780 93"Mastodon are better than Twitter.</a></small>"
eabe8a9a
TS
94msgstr ""
95
96#. type: Content of: <html><body><header><div><p>
eabe8a9a
TS
97msgid "&larr; Return to <a href=\"index.html\">Email Self-Defense</a>"
98msgstr ""
99
100#. type: Content of: <html><body><footer><div><div><h4><a>
eabe8a9a
TS
101msgid "<a href=\"https://u.fsf.org/ys\">"
102msgstr ""
103
104#. type: Attribute 'alt' of: <html><body><footer><div><div><h4><a><img>
eabe8a9a
TS
105msgid "Free Software Foundation"
106msgstr ""
107
108#. type: Content of: <html><body><footer><div><p>
eabe8a9a
TS
109msgid "</a>"
110msgstr ""
111
112#. type: Content of: <html><body><footer><div><div><p>
eabe8a9a 113msgid ""
e7253b03 114"Copyright &copy; 2014-2021 <a href=\"https://u.fsf.org/ys\">Free Software "
eabe8a9a
TS
115"Foundation</a>, Inc. <a "
116"href=\"https://my.fsf.org/donate/privacypolicy.html\">Privacy "
117"Policy</a>. Please support our work by <a "
118"href=\"https://u.fsf.org/yr\">joining us as an associate member.</a>"
119msgstr ""
120
121#. type: Content of: <html><body><footer><div><div><p>
eabe8a9a
TS
122msgid ""
123"The images on this page are under a <a "
124"href=\"https://creativecommons.org/licenses/by/4.0/\">Creative Commons "
125"Attribution 4.0 license (or later version)</a>, and the rest of it is under "
126"a <a href=\"https://creativecommons.org/licenses/by-sa/4.0\">Creative "
127"Commons Attribution-ShareAlike 4.0 license (or later version)</a>. Download "
128"the <a "
e7253b03 129"href=\"https://agpl.fsf.org/emailselfdefense.fsf.org/edward/CURRENT/edward.tar.gz\"> "
4aec1215 130"source code of Edward reply bot</a> by Andrew Engelbrecht "
8c6a812e 131"&lt;andrew@engelbrecht.io&gt; and Josh Drake &lt;zamnedix@gnu.org&gt;, "
eabe8a9a 132"available under the GNU Affero General Public License. <a "
e7253b03 133"href=\"https://www.gnu.org/licenses/license-list.html#OtherLicenses\">Why "
eabe8a9a
TS
134"these licenses?</a>"
135msgstr ""
136
137#. type: Content of: <html><body><footer><div><div><p>
eabe8a9a
TS
138msgid ""
139"Fonts used in the guide &amp; infographic: <a "
140"href=\"https://www.google.com/fonts/specimen/Dosis\">Dosis</a> by Pablo "
141"Impallari, <a "
e7253b03 142"href=\"https://www.google.com/fonts/specimen/Signika\">Signika</a> by Anna "
eabe8a9a 143"Giedry&#347;, <a "
e7253b03 144"href=\"https://www.google.com/fonts/specimen/Archivo+Narrow\">Archivo "
eabe8a9a
TS
145"Narrow</a> by Omnibus-Type, <a "
146"href=\"https://libreplanet.org/wiki/GPG_guide/Graphics_Howto#Pitfalls\">PXL-2000</a> "
147"by Florian Cramer."
148msgstr ""
149
150#. type: Content of: <html><body><footer><div><div><p>
eabe8a9a
TS
151msgid ""
152"Download the <a href=\"emailselfdefense_source.zip\">source package</a> for "
153"this guide, including fonts, image source files and the text of Edward's "
154"messages."
155msgstr ""
156
157#. type: Content of: <html><body><footer><div><div><p>
eabe8a9a
TS
158msgid ""
159"This site uses the Weblabels standard for labeling <a "
160"href=\"https://www.fsf.org/campaigns/freejs\">free JavaScript</a>. View the "
e7253b03 161"JavaScript <a href=\"https://weblabels.fsf.org/emailselfdefense.fsf.org/\" "
eabe8a9a
TS
162"rel=\"jslicense\">source code and license information</a>."
163msgstr ""
164
165#. type: Content of: <html><body><footer><div><p><a>
eabe8a9a
TS
166msgid ""
167"Infographic and guide design by <a rel=\"external\" "
e7253b03 168"href=\"https://jplusplus.org\"><strong>Journalism++</strong>"
eabe8a9a
TS
169msgstr ""
170
171#. type: Attribute 'alt' of: <html><body><footer><div><p><a><img>
eabe8a9a
TS
172msgid "Journalism++"
173msgstr ""
174
e7253b03
TG
175#. type: Content of: <html><body><header><div><h1>
176msgid "Email Self-Defense"
71b90906
TG
177msgstr ""
178
eabe8a9a 179#. type: Content of: <html><body><header><div><ul><li>
eabe8a9a 180msgid ""
8cd4252b
TG
181"<strong><a "
182"href=\"https://libreplanet.org/wiki/GPG_guide/Translation_Guide\"> "
183"Translate!</a></strong>"
eabe8a9a
TS
184msgstr ""
185
186#. type: Content of: <html><body><header><div><ul><li>
e7253b03 187msgid "<a href=\"index.html\" class=\"current\">Set up guide</a>"
eabe8a9a
TS
188msgstr ""
189
190#. type: Content of: <html><body><header><div><ul><li>
eabe8a9a
TS
191msgid "<a href=\"workshops.html\">Teach your friends</a>"
192msgstr ""
193
194#. type: Content of: <html><body><header><div><ul><li><a>
eabe8a9a 195msgid ""
e7253b03
TG
196"<a "
197"href=\"https://fsf.org/share?u=https://u.fsf.org/zb&amp;t=Email%20encryption%20for%20everyone%20via%20%40fsf\"> "
198"Share&nbsp;"
eabe8a9a
TS
199msgstr ""
200
201#. type: Content of: <html><body><header><div><ul><li><a>
eabe8a9a
TS
202msgid "&nbsp;"
203msgstr ""
204
205#. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
eabe8a9a
TS
206msgid "[Reddit]"
207msgstr ""
208
209#. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
eabe8a9a
TS
210msgid "[Hacker News]"
211msgstr ""
212
eabe8a9a 213#. type: Content of: <html><body><header><div><div><div><p>
eabe8a9a
TS
214msgid ""
215"We fight for computer users' rights, and promote the development of free (as "
216"in freedom) software. Resisting bulk surveillance is very important to us."
217msgstr ""
218
219#. type: Content of: <html><body><header><div><div><div><p>
eabe8a9a 220msgid ""
71b90906 221"<strong>Please donate to support Email Self-Defense. We need to keep "
be1ae08b 222"improving it, and making more materials, for the benefit of people around "
71b90906 223"the world taking the first step towards protecting their privacy.</strong>"
eabe8a9a
TS
224msgstr ""
225
e7253b03 226#. type: Content of: <html><body><section><div><div><div><p><a>
eabe8a9a
TS
227msgid ""
228"<a "
e7253b03 229"href=\"https://crm.fsf.org/civicrm/contribute/transact?reset=1&amp;id=14&amp;mtm_campaign=email_self_defense&amp;mtm_kwd=guide_donate\">"
eabe8a9a
TS
230msgstr ""
231
232#. type: Attribute 'alt' of: <html><body><header><div><div><p><a><img>
eabe8a9a
TS
233msgid "Donate"
234msgstr ""
235
7f65cb9f
TG
236#. type: Content of: <html><body><header><div><div><div><h5>
237msgid "Sign up"
238msgstr ""
239
240#. type: Content of: <html><body><header><div><div><div><form><p>
241msgid "Enter your email address to receive our monthly newsletter, the"
242msgstr ""
243
eceb2f13 244#. type: Content of: <html><body><header><div><div><div><form><p>
7f65cb9f
TG
245msgid ""
246"<a href=\"https://www.fsf.org/free-software-supporter/\">Free Software "
247"Supporter</a>"
248msgstr ""
249
250#. type: Content of: <html><body><header><div><div><div><form><p>
251msgid ""
252"<input id=\"frmEmail\" type=\"text\" name=\"email-Primary\" size=\"18\" "
253"maxlength=\"80\" />"
254msgstr ""
255
256#. type: Content of: <html><body><header><div><div><div><form><p>
257msgid "<input type=\"submit\" name=\"_qf_Edit_next\" value=\"Subscribe me\" />"
258msgstr ""
259
260#. type: Content of: <html><body><header><div><div><div><form><div>
261msgid ""
262"<input name=\"postURL\" type=\"hidden\" value=\"\" /> <input type=\"hidden\" "
263"name=\"group[25]\" value=\"1\" /> <input name=\"cancelURL\" type=\"hidden\" "
eceb2f13 264"value=\"https://my.fsf.org/civicrm/profile?reset=1&amp;gid=31\" /> <input "
7f65cb9f
TG
265"name=\"_qf_default\" type=\"hidden\" value=\"Edit:cancel\" />"
266msgstr ""
267
974f8f55 268#. type: Content of: <html><body><header><div><div><p><a>
eabe8a9a
TS
269msgid "<a id=\"infographic\" href=\"infographic.html\">"
270msgstr ""
271
e7253b03 272#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><a><img>
eabe8a9a
TS
273msgid "View &amp; share our infographic &rarr;"
274msgstr ""
275
276#. type: Content of: <html><body><header><div><div><p>
eabe8a9a 277msgid ""
71b90906 278"</a> Bulk surveillance violates our fundamental rights and makes free speech "
eabe8a9a
TS
279"risky. This guide will teach you a basic surveillance self-defense skill: "
280"email encryption. Once you've finished, you'll be able to send and receive "
d3d12736
TG
281"emails that are scrambled to make sure a surveillance agent or thief "
282"intercepting your email can't read them. All you need is a computer with an "
283"Internet connection, an email account, and about forty minutes."
eabe8a9a
TS
284msgstr ""
285
286#. type: Content of: <html><body><header><div><div><p>
eabe8a9a
TS
287msgid ""
288"Even if you have nothing to hide, using encryption helps protect the privacy "
289"of people you communicate with, and makes life difficult for bulk "
290"surveillance systems. If you do have something important to hide, you're in "
291"good company; these are the same tools that whistleblowers use to protect "
e7253b03 292"their identities while shining light on human rights abuses, corruption, and "
eabe8a9a
TS
293"other crimes."
294msgstr ""
295
296#. type: Content of: <html><body><header><div><div><p>
eabe8a9a
TS
297msgid ""
298"In addition to using encryption, standing up to surveillance requires "
299"fighting politically for a <a "
e7253b03 300"href=\"https://gnu.org/philosophy/surveillance-vs-democracy.html\">reduction "
eabe8a9a
TS
301"in the amount of data collected on us</a>, but the essential first step is "
302"to protect yourself and make surveillance of your communication as difficult "
303"as possible. This guide helps you do that. It is designed for beginners, but "
304"if you already know the basics of GnuPG or are an experienced free software "
305"user, you'll enjoy the advanced tips and the <a "
306"href=\"workshops.html\">guide to teaching your friends</a>."
307msgstr ""
308
309#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
310msgid "<em>#1</em> Get the pieces"
311msgstr ""
312
313#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
314msgid ""
315"This guide relies on software which is <a "
316"href=\"https://www.gnu.org/philosophy/free-sw.html\">freely licensed</a>; "
317"it's completely transparent and anyone can copy it or make their own "
318"version. This makes it safer from surveillance than proprietary software "
e7253b03 319"(like Windows or macOS). Learn more about free software at <a "
eabe8a9a
TS
320"href=\"https://u.fsf.org/ys\">fsf.org</a>."
321msgstr ""
322
323#. type: Content of: <html><body><section><div><div><p>
eabe8a9a 324msgid ""
e7253b03
TG
325"Most GNU/Linux operating systems come with GnuPG installed on them, so if "
326"you're running one of these systems, you don't have to download it. If "
db1d71be 327"you're running macOS or Windows, steps to download GnuPG are below. Before "
e7253b03
TG
328"configuring your encryption setup with this guide, though, you'll need a "
329"desktop email program installed on your computer. Many GNU/Linux "
330"distributions have one installed already, such as Icedove, which may be "
331"under the alternate name \"Thunderbird.\" Programs like these are another "
332"way to access the same email accounts you can access in a browser (like "
333"Gmail), but provide extra features."
eabe8a9a
TS
334msgstr ""
335
eabe8a9a 336#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
eabe8a9a
TS
337msgid "Step 1.A: Install Wizard"
338msgstr ""
339
340#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
341msgid "<em>Step 1.a</em> Set up your email program with your email account"
342msgstr ""
343
344#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 345msgid ""
71b90906 346"Open your email program and follow the wizard (step-by-step walkthrough) "
e7253b03
TG
347"that sets it up with your email account. This usually starts from \"Account "
348"Settings\" &rarr; \"Add Mail Account\". You should get the email server "
349"settings from your systems administrator or the help section of your email "
350"account."
eabe8a9a
TS
351msgstr ""
352
353#. type: Content of: <html><body><section><div><div><div><div><h4>
eabe8a9a
TS
354msgid "Troubleshooting"
355msgstr ""
356
357#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
358msgid "The wizard doesn't launch"
359msgstr ""
360
361#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
362msgid ""
363"You can launch the wizard yourself, but the menu option for doing so is "
364"named differently in each email program. The button to launch it will be in "
365"the program's main menu, under \"New\" or something similar, titled "
366"something like \"Add account\" or \"New/Existing email account.\""
367msgstr ""
368
369#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
370msgid "The wizard can't find my account or isn't downloading my mail"
371msgstr ""
372
373#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
374msgid ""
375"Before searching the Web, we recommend you start by asking other people who "
376"use your email system, to figure out the correct settings."
377msgstr ""
378
e7253b03
TG
379#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
380msgid "I can't find the menu"
381msgstr ""
382
383#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
384msgid ""
385"In many new email programs, the main menu is represented by an image of "
386"three stacked horizontal bars."
387msgstr ""
388
eabe8a9a 389#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
390msgid "Don't see a solution to your problem?"
391msgstr ""
392
393#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
394msgid ""
395"Please let us know on the <a "
396"href=\"https://libreplanet.org/wiki/GPG_guide/Public_Review\">feedback "
397"page</a>."
398msgstr ""
399
e7253b03 400#. type: Content of: <html><body><section><div><div><div><h3>
b2c34a2a 401msgid "<em>Step 1.b</em> Install GnuPG"
eabe8a9a
TS
402msgstr ""
403
e7253b03
TG
404#. type: Content of: <html><body><section><div><div><div><p>
405msgid ""
406"If you are using a GNU/Linux machine, you should already have GnuPG "
b2c34a2a 407"installed, and you can skip to <a href=\"#section2\">Section 2</a>."
eabe8a9a
TS
408msgstr ""
409
e7253b03
TG
410#. type: Content of: <html><body><section><div><div><div><p>
411msgid ""
412"If you are using a macOS or Windows machine, however, you need to first "
413"install the GnuPG program. Select your operating system below and follow the "
b2c34a2a
TG
414"instructions. For the rest of this guide, the steps are the same for all "
415"operating systems."
eabe8a9a
TS
416msgstr ""
417
e7253b03 418#. type: Content of: <html><body><section><div><div><div><div><h4>
8cd4252b 419msgid "macOS"
eabe8a9a
TS
420msgstr ""
421
e7253b03
TG
422#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
423msgid "Use a third-party package manager to install GnuPG"
eabe8a9a
TS
424msgstr ""
425
b2c34a2a 426#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
eabe8a9a 427msgid ""
b2c34a2a
TG
428"The default macOS package manager makes it difficult to install GnuPG and "
429"other pieces of free software (like Emacs, GIMP, or Inkscape). To make "
430"things easier, we recommend setting up the third-party package manager "
431"\"Homebrew\" to install GnuPG. For this, we will use a program called "
674646df 432"\"Terminal,\" which is pre-installed on macOS."
eabe8a9a
TS
433msgstr ""
434
b2c34a2a 435#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8c163d47 436msgid ""
b2c34a2a
TG
437"# Copy the first command on the home page of <a "
438"href=\"https://brew.sh/\">Homebrew</a> by clicking on the clipboard icon, "
439"and paste it in Terminal. Click \"Enter\" and wait for the installation to "
440"finalize."
2fd4a6dc
TG
441msgstr ""
442
b2c34a2a
TG
443#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
444msgid "# Then install GnuPG by entering the following code in Terminal:"
eabe8a9a
TS
445msgstr ""
446
b2c34a2a
TG
447#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
448msgid "<code>brew install gnupg gnupg2</code>"
e7253b03
TG
449msgstr ""
450
451#. type: Content of: <html><body><section><div><div><div><div><h4>
452msgid "Windows"
eabe8a9a
TS
453msgstr ""
454
455#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 456msgid "Get GnuPG by downloading GPG4Win"
eabe8a9a
TS
457msgstr ""
458
2094a53c 459#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
eabe8a9a 460msgid ""
2094a53c 461"<a href=\"https://www.gpg4win.org/\">GPG4Win</a> is an email and file "
e7253b03
TG
462"encryption software package that includes GnuPG. Download and install the "
463"latest version, choosing default options whenever asked. After it's "
464"installed, you can close any windows that it creates."
465msgstr ""
466
e7253b03
TG
467#. type: Content of: <html><body><section><div><div><div><h3>
468msgid "GnuPG, OpenPGP, what?"
469msgstr ""
470
471#. type: Content of: <html><body><section><div><div><div><p>
472msgid ""
473"In general, the terms GnuPG, GPG, GNU Privacy Guard, OpenPGP and PGP are "
474"used interchangeably. Technically, OpenPGP (Pretty Good Privacy) is the "
475"encryption standard, and GNU Privacy Guard (often shortened to GPG or GnuPG) "
476"is the program that implements the standard. Most email programs provide an "
477"interface for GnuPG. There is also a newer version of GnuPG, called GnuPG2."
eabe8a9a
TS
478msgstr ""
479
480#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
481msgid "<em>#2</em> Make your keys"
482msgstr ""
483
e7253b03
TG
484#. type: Attribute 'alt' of: <html><body><section><div><div><p><img>
485msgid "A robot with a head shaped like a key holding a private and a public key"
486msgstr ""
487
eabe8a9a 488#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
489msgid ""
490"To use the GnuPG system, you'll need a public key and a private key (known "
491"together as a keypair). Each is a long string of randomly generated numbers "
492"and letters that are unique to you. Your public and private keys are linked "
493"together by a special mathematical function."
494msgstr ""
495
496#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
497msgid ""
498"Your public key isn't like a physical key, because it's stored in the open "
499"in an online directory called a keyserver. People download it and use it, "
500"along with GnuPG, to encrypt emails they send to you. You can think of the "
501"keyserver as a phonebook; people who want to send you encrypted email can "
502"look up your public key."
503msgstr ""
504
505#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
506msgid ""
507"Your private key is more like a physical key, because you keep it to "
508"yourself (on your computer). You use GnuPG and your private key together to "
8cd4252b
TG
509"descramble encrypted emails other people send to you. <strong>You should "
510"never share your private key with anyone, under any circumstances.</strong>"
eabe8a9a
TS
511msgstr ""
512
513#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
514msgid ""
515"In addition to encryption and decryption, you can also use these keys to "
516"sign messages and check the authenticity of other people's signatures. We'll "
517"discuss this more in the next section."
518msgstr ""
519
520#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
e7253b03
TG
521msgid "Step 2.A: Make your Keypair"
522msgstr ""
523
524#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
525msgid "Step 2.A: Set your passphrase"
eabe8a9a
TS
526msgstr ""
527
528#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
529msgid "<em>Step 2.a</em> Make a keypair"
530msgstr ""
531
8cd4252b 532#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03
TG
533msgid "Make your keypair"
534msgstr ""
535
eabe8a9a 536#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 537msgid ""
b2c34a2a
TG
538"We will use the command line in a terminal to create a keypair using the "
539"GnuPG program."
eabe8a9a
TS
540msgstr ""
541
e7253b03 542#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 543msgid ""
b2c34a2a
TG
544"Whether on GNU/Linux, macOS or Windows, you can launch your terminal "
545"(\"Terminal\" in macOS, \"PowerShell\" in Windows) from the Applications "
546"menu (some GNU/Linux systems respond to the <kbd>Ctrl + Alt + T</kbd> "
547"shortcut)."
eabe8a9a
TS
548msgstr ""
549
e7253b03 550#. type: Content of: <html><body><section><div><div><div><p>
b2c34a2a 551msgid "# Enter <code>gpg --full-generate-key</code> to start the process."
eabe8a9a
TS
552msgstr ""
553
e7253b03 554#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 555msgid ""
e7253b03 556"# To answer what kind of key you would like to create, select the default "
8cd4252b 557"option: <samp>1&nbsp;RSA&nbsp;and&nbsp;RSA</samp>."
eabe8a9a
TS
558msgstr ""
559
e7253b03 560#. type: Content of: <html><body><section><div><div><div><p>
8cd4252b 561msgid "# Enter the following keysize: <code>4096</code> for a strong key."
e7253b03
TG
562msgstr ""
563
564#. type: Content of: <html><body><section><div><div><div><p>
b2c34a2a 565msgid "# Choose the expiration date; we suggest <code>2y</code> (2 years)."
e7253b03
TG
566msgstr ""
567
568#. type: Content of: <html><body><section><div><div><div><p>
569msgid "Follow the prompts to continue setting up with your personal details."
570msgstr ""
571
39ad5485
TG
572#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
573msgid ""
574"Depending on your version of GPG, you may need to use <code>--gen-key</code> "
1c3b81e7 575"instead of <code>--full-generate-key</code>&#65279;."
39ad5485
TG
576msgstr ""
577
8cd4252b 578#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03
TG
579msgid "Set your passphrase"
580msgstr ""
581
582#. type: Content of: <html><body><section><div><div><div><p>
583msgid ""
584"On the screen titled \"Passphrase,\" pick a strong password! You can do it "
eabe8a9a
TS
585"manually, or you can use the Diceware method. Doing it manually is faster "
586"but not as secure. Using Diceware takes longer and requires dice, but "
4aec1215
TG
587"creates a password that is much harder for attackers to figure out. To use "
588"it, read the section \"Make a secure passphrase with Diceware\" in <a "
589"href=\"https://theintercept.com/2015/03/26/passphrases-can-memorize-attackers-cant-guess/\"> "
590"this article</a> by Micah Lee."
eabe8a9a
TS
591msgstr ""
592
593#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 594msgid ""
e7253b03 595"If you'd like to pick a passphrase manually, come up with something you can "
eabe8a9a
TS
596"remember which is at least twelve characters long, and includes at least one "
597"lower case and upper case letter and at least one number or punctuation "
598"symbol. Never pick a password you've used elsewhere. Don't use any "
599"recognizable patterns, such as birthdays, telephone numbers, pets' names, "
600"song lyrics, quotes from books, and so on."
601msgstr ""
602
eabe8a9a 603#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 604msgid "GnuPG is not installed"
eabe8a9a
TS
605msgstr ""
606
607#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a 608msgid ""
b2c34a2a
TG
609"You can check if this is the case with the command <code>gpg "
610"--version</code>&#65279;. If GnuPG is not installed, it will bring up the "
611"following result on most GNU/Linux operating systems, or something like it: "
612"<samp>Command 'gpg' not found, but can be installed with: sudo apt install "
613"gnupg</samp>. Follow that command and install the program."
eabe8a9a
TS
614msgstr ""
615
f950b092
TG
616#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
617msgid "<i>gpg --full-generate-key</i> command not working"
618msgstr ""
619
620#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
621msgid ""
622"Some distributions use a different version of GPG. When you receive an error "
623"code that is something along the lines of: <samp>gpg: Invalid option "
624"\"--full-generate-key\"</samp>, you can try the following commands:"
625msgstr ""
626
627#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
628msgid "<code>sudo apt update</code>"
629msgstr ""
630
631#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
632msgid "<code>sudo apt install gnupg2</code>"
633msgstr ""
634
635#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
636msgid "<code>gpg2 --full-generate-key</code>"
637msgstr ""
638
639#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
640msgid ""
641"If this resolved the issue, you need to continue to use the gpg2 identifier "
642"instead of gpg throughout the following steps of the guide."
643msgstr ""
644
eabe8a9a 645#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 646msgid "I took too long to create my passphrase"
eabe8a9a
TS
647msgstr ""
648
649#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a 650msgid ""
e7253b03
TG
651"That's okay. It's important to think about your passphrase. When you're "
652"ready, just follow the steps from the beginning again to create your key."
eabe8a9a
TS
653msgstr ""
654
655#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 656msgid "How can I see my key?"
eabe8a9a
TS
657msgstr ""
658
659#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a 660msgid ""
b2c34a2a
TG
661"Use the following command to see all keys: <code>gpg "
662"--list-keys</code>&#65279;. Yours should be listed in there, and later, so "
663"will Edward's (<a href=\"#section3\">Section 3</a>)."
664msgstr ""
665
666#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
667msgid ""
668"If you want to see only your key, you can use <code>gpg --list-key "
669"[your@email]</code>&#65279;."
670msgstr ""
671
672#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
673msgid ""
674"You can also use <code>gpg --list-secret-key</code> to see your own private "
675"key."
eabe8a9a
TS
676msgstr ""
677
678#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 679msgid "More resources"
eabe8a9a
TS
680msgstr ""
681
682#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a 683msgid ""
e7253b03 684"For more information about this process, you can also refer to <a "
eabe8a9a
TS
685"href=\"https://www.gnupg.org/gph/en/manual/c14.html#AEN25\">The GNU Privacy "
686"Handbook</a>. Make sure you stick with \"RSA and RSA\" (the default), "
687"because it's newer and more secure than the algorithms the documentation "
b2c34a2a
TG
688"recommends. Also make sure your key is at least 4096&nbsp;bits if you want "
689"to be secure."
e7253b03
TG
690msgstr ""
691
692#. type: Content of: <html><body><section><div><div><div><div><h4>
693msgid "Advanced"
eabe8a9a
TS
694msgstr ""
695
696#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
697msgid "Advanced key pairs"
698msgstr ""
699
700#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
701msgid ""
702"When GnuPG creates a new keypair, it compartmentalizes the encryption "
703"function from the signing function through <a "
704"href=\"https://wiki.debian.org/Subkeys\">subkeys</a>. If you use subkeys "
e7253b03
TG
705"carefully, you can keep your GnuPG identity more secure and recover from a "
706"compromised key much more quickly. <a "
eabe8a9a 707"href=\"https://alexcabal.com/creating-the-perfect-gpg-keypair/\">Alex "
e7253b03 708"Cabal</a> and <a href=\"https://keyring.debian.org/creating-key.html\">the "
eabe8a9a
TS
709"Debian wiki</a> provide good guides for setting up a secure subkey "
710"configuration."
711msgstr ""
712
e7253b03
TG
713#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
714msgid "Step 2.B: Send to server and generate a certificate"
715msgstr ""
716
eabe8a9a 717#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03
TG
718msgid "<em>Step 2.b</em> Some important steps following creation"
719msgstr ""
720
8cd4252b 721#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03 722msgid "Upload your key to a keyserver"
eabe8a9a
TS
723msgstr ""
724
725#. type: Content of: <html><body><section><div><div><div><p>
e7253b03
TG
726msgid ""
727"We will upload your key to a keyserver, so if someone wants to send you an "
728"encrypted message, they can download your public key from the "
729"Internet. There are multiple keyservers that you can select from the menu "
39ad5485
TG
730"when you upload, but they are mostly all copies of each other. Any server "
731"will work, but it's good to remember which one you uploaded your key to "
732"originally. Also keep in mind, sometimes takes a few hours for them to match "
e7253b03 733"each other when a new key is uploaded."
eabe8a9a
TS
734msgstr ""
735
736#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 737msgid ""
8cd4252b
TG
738"# Copy your keyID: <code>gpg --list-key [your@email]</code> will list your "
739"public (\"pub\") key information, including your keyID, which is a unique "
740"list of numbers and letters. Copy this keyID, so you can use it in the "
741"following command."
eabe8a9a
TS
742msgstr ""
743
744#. type: Content of: <html><body><section><div><div><div><p>
8cd4252b 745msgid "# Upload your key to a server: <code>gpg --send-key [keyID]</code>"
eabe8a9a
TS
746msgstr ""
747
8cd4252b 748#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03
TG
749msgid "Export your key to a file"
750msgstr ""
751
752#. type: Content of: <html><body><section><div><div><div><p>
753msgid ""
754"Use the following command to export your secret key so you can import it "
755"into your email client at the next <a href=\"#section3\">step</a>. To avoid "
756"getting your key compromised, store this in a safe place, and make sure that "
757"if it is transferred, it is done so in a trusted way. Exporting your keys "
758"can be done with the following commands:"
759msgstr ""
760
8cd4252b
TG
761#. type: Content of: <html><body><section><div><div><div><p><code>
762msgid "<code> $ gpg --export-secret-keys -a [keyID] > my_secret_key.asc"
e7253b03
TG
763msgstr ""
764
2094a53c 765#. type: Content of: <html><body><section><div><div><div><p>
8cd4252b 766msgid "$ gpg --export -a [keyID] > my_public_key.asc </code>"
e7253b03
TG
767msgstr ""
768
8cd4252b 769#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03
TG
770msgid "Generate a revocation certificate"
771msgstr ""
772
773#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 774msgid ""
e7253b03
TG
775"Just in case you lose your key, or it gets compromised, you want to generate "
776"a certificate and choose to save it in a safe place on your computer for now "
b2c34a2a 777"(please refer to <a href=\"#step-6c\">Step 6.C</a> for how to best store "
e7253b03
TG
778"your revocation cerficate safely). This step is essential for your email "
779"self-defense, as you'll learn more about in <a href=\"#section5\">Section "
780"5</a>."
781msgstr ""
782
783#. type: Content of: <html><body><section><div><div><div><p>
784msgid ""
8cd4252b
TG
785"# Generate a revocation certificate: <code>gpg --gen-revoke --output "
786"revoke.asc [keyID]</code>"
e7253b03
TG
787msgstr ""
788
789#. type: Content of: <html><body><section><div><div><div><p>
790msgid ""
791"# It will prompt you to give a reason for revocation, we recommend to use "
8cd4252b 792"<samp>1&nbsp;=&nbsp;key has been compromised</samp>."
e7253b03
TG
793msgstr ""
794
795#. type: Content of: <html><body><section><div><div><div><p>
796msgid ""
b2c34a2a
TG
797"# You don't have to fill in a reason, but you can; then press \"Enter\" for "
798"an empty line, and confirm your selection."
eabe8a9a
TS
799msgstr ""
800
f950b092
TG
801#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
802msgid "Sending my key to the keyserver is not working"
803msgstr ""
804
805#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
806msgid ""
807"Instead of using the general command to upload your key to the keyserver, "
808"you can use a more specific command and add the keyserver to your command "
f68b2d75 809"<code>gpg --keyserver keys.openpgp.org --send-key [keyID]</code>&#65279;."
f950b092
TG
810msgstr ""
811
eabe8a9a 812#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 813msgid "My key doesn't seem to be working or I get a \"permission denied.\""
eabe8a9a
TS
814msgstr ""
815
2094a53c 816#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
e7253b03
TG
817msgid ""
818"Like every other file or folder, gpg keys are subject to permissions. If "
819"these are not set correctly, your system may not be accepting your keys. You "
820"can follow the next steps to check, and update to the right permissions."
821msgstr ""
822
2094a53c 823#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8cd4252b 824msgid "# Check your permissions: <code>ls -l ~/.gnupg/*</code>"
e7253b03
TG
825msgstr ""
826
2094a53c 827#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
e7253b03 828msgid ""
db1d71be
TG
829"# Set permissions to read, write, execute for only yourself, no "
830"others. These are the recommended permissions for your folder."
e7253b03
TG
831msgstr ""
832
2094a53c 833#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8cd4252b 834msgid "You can use the code: <code>chmod 700 ~/.gnupg</code>"
e7253b03
TG
835msgstr ""
836
2094a53c 837#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
e7253b03 838msgid ""
db1d71be
TG
839"# Set permissions to read and write for yourself only, no others. These are "
840"the recommended permissions for the keys inside your folder."
e7253b03
TG
841msgstr ""
842
2094a53c 843#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8cd4252b 844msgid "You can use the code: <code>chmod 600 ~/.gnupg/*</code>"
e7253b03
TG
845msgstr ""
846
847#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
848msgid ""
849"If you have (for any reason) created your own folders inside ~/.gnupg, you "
850"must also additionally apply execute permissions to that folder. Folders "
851"require execution privileges to be opened. For more information on "
852"permissions, you can check out <a "
853"href=\"https://helpdeskgeek.com/linux-tips/understanding-linux-permissions-chmod-usage/\">this "
854"detailed information guide</a>."
eabe8a9a
TS
855msgstr ""
856
857#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 858msgid "More about keyservers"
eabe8a9a
TS
859msgstr ""
860
861#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a 862msgid ""
e7253b03
TG
863"You can find some more keyserver information<a "
864"href=\"https://www.gnupg.org/gph/en/manual/x457.html\"> in this "
865"manual</a>. <a href=\"https://sks-keyservers.net/overview-of-pools.php\">The "
866"sks Web site</a> maintains a list of highly interconnected keyservers. You "
867"can also <a "
868"href=\"https://www.gnupg.org/gph/en/manual/x56.html#AEN64\">directly export "
869"your key</a> as a file on your computer."
eabe8a9a
TS
870msgstr ""
871
872#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 873msgid "Transferring your keys"
eabe8a9a
TS
874msgstr ""
875
2094a53c 876#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
eabe8a9a 877msgid ""
e7253b03
TG
878"Use the following commands to transfer your keys. To avoid getting your key "
879"compromised, store it in a safe place, and make sure that if it is "
880"transferred, it is done so in a trusted way. Importing and exporting a key "
881"can be done with the following commands:"
882msgstr ""
883
8cd4252b
TG
884#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p><code>
885msgid "<code> $ gpg --export-secret-keys -a [keyID] > my_private_key.asc"
e7253b03
TG
886msgstr ""
887
8cd4252b 888#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p><code>
2094a53c 889msgid "$ gpg --export -a [keyID] > my_public_key.asc"
e7253b03
TG
890msgstr ""
891
8cd4252b 892#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p><code>
e7253b03
TG
893msgid "$ gpg --import my_private_key.asc"
894msgstr ""
895
2094a53c 896#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8cd4252b 897msgid "$ gpg --import my_public_key.asc </code>"
e7253b03
TG
898msgstr ""
899
900#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
901msgid ""
902"Ensure that the keyID printed is the correct one, and if so, then go ahead "
903"and add ultimate trust for it:"
904msgstr ""
905
2094a53c 906#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8cd4252b 907msgid "<code> $ gpg --edit-key [your@email] </code>"
e7253b03
TG
908msgstr ""
909
2094a53c 910#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
e7253b03 911msgid ""
b2c34a2a
TG
912"Because this is your key, you should choose "
913"<code>ultimate</code>&#65279;. You shouldn't trust anyone else's key "
914"ultimately."
e7253b03
TG
915msgstr ""
916
917#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
918msgid ""
b2c34a2a 919"Refer to <a href=\"#step-2b\">Troubleshooting in Step 2.B</a> for more "
e7253b03
TG
920"information on permissions. When transferring keys, your permissions may get "
921"mixed, and errors may be prompted. These are easily avoided when your "
922"folders and files have the right permissions"
923msgstr ""
924
925#. type: Content of: <html><body><section><div><div><h2>
926msgid "<em>#3</em> Set up email encryption"
927msgstr ""
928
929#. type: Content of: <html><body><section><div><div><p>
930msgid ""
931"The Icedove (or Thunderbird) email program has PGP functionality integrated, "
932"which makes it pretty easy to work with. We'll take you through the steps of "
933"integrating and using your key in these email clients."
934msgstr ""
935
936#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
937msgid "Step 3.A: Email Menu"
938msgstr ""
939
940#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
941msgid "Step 3.A: Import From File"
942msgstr ""
943
944#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
945msgid "Step 3.A: Success"
946msgstr ""
947
948#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
949msgid "Step 3.A: Troubleshoot"
eabe8a9a
TS
950msgstr ""
951
952#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03
TG
953msgid "<em>Step 3.a</em> Set up your email with encryption"
954msgstr ""
955
2094a53c 956#. type: Content of: <html><body><section><div><div><div><p>
e7253b03
TG
957msgid ""
958"Once you have set up your email with encryption, you can start contributing "
959"to encrypted traffic on the Internet. First we'll get your email client to "
960"import your secret key, and we will also learn how to get other people's "
961"public keys from servers so you can send and receive encrypted email."
eabe8a9a
TS
962msgstr ""
963
964#. type: Content of: <html><body><section><div><div><div><p>
252b506d 965msgid "# Open your email client and use \"Tools\" &rarr; <i>OpenPGP Key Manager</i>"
e7253b03
TG
966msgstr ""
967
968#. type: Content of: <html><body><section><div><div><div><p>
8cd4252b 969msgid "# Under \"File\" &rarr; <i>Import Secret Key(s) From File</i>"
e7253b03
TG
970msgstr ""
971
972#. type: Content of: <html><body><section><div><div><div><p>
973msgid ""
252b506d 974"# Select the file you saved under the name [my_secret_key.asc] in <a "
b2c34a2a 975"href=\"#step-2b\">Step 2.B</a> when you exported your key"
e7253b03
TG
976msgstr ""
977
978#. type: Content of: <html><body><section><div><div><div><p>
979msgid "# Unlock with your passphrase"
980msgstr ""
981
982#. type: Content of: <html><body><section><div><div><div><p>
983msgid ""
984"# You will receive a \"OpenPGP keys successfully imported\" window to "
985"confirm success"
986msgstr ""
987
988#. type: Content of: <html><body><section><div><div><div><p>
989msgid ""
252b506d
TG
990"# Go to \"Account settings\" &rarr; \"End-To-End Encryption,\" and make sure "
991"your key is imported and select <i>Treat this key as a Personal Key</i>."
e7253b03
TG
992msgstr ""
993
994#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
995msgid "I'm not sure the import worked correctly"
996msgstr ""
997
998#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
999msgid ""
8cd4252b
TG
1000"Look for \"Account settings\" &rarr; \"End-To-End Encryption.\" Here you can "
1001"see if your personal key associated with this email is found. If it is not, "
252b506d
TG
1002"you can try again via the <i>Add key</i> option. Make sure you have the "
1003"correct, active, secret key file."
eabe8a9a
TS
1004msgstr ""
1005
1006#. type: Content of: <html><body><section><div><div><h2>
e7253b03
TG
1007msgid "<em>#4</em> Try it out!"
1008msgstr ""
1009
1010#. type: Attribute 'alt' of: <html><body><section><div><div><p><img>
1011msgid "Illustration of a person in a house with a cat connected to a server"
eabe8a9a
TS
1012msgstr ""
1013
1014#. type: Content of: <html><body><section><div><div><p>
eabe8a9a 1015msgid ""
e7253b03
TG
1016"Now you'll try a test correspondence with an FSF computer program named "
1017"Edward, who knows how to use encryption. Except where noted, these are the "
1018"same steps you'd follow when corresponding with a real, live person."
1019msgstr ""
1020
1021#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1022msgid "Step 4.A Send key to Edward."
eabe8a9a
TS
1023msgstr ""
1024
1025#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1026msgid "<em>Step 4.a</em> Send Edward your public key"
eabe8a9a
TS
1027msgstr ""
1028
1029#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1030msgid ""
1031"This is a special step that you won't have to do when corresponding with "
e7253b03
TG
1032"real people. In your email program's menu, go to \"Tools\" &rarr; \"OpenPGP "
1033"Key Manager.\" You should see your key in the list that pops up. Right click "
8cd4252b
TG
1034"on your key and select <i>Send Public Keys by Email</i>. This will create a "
1035"new draft message, as if you had just hit the \"Write\" button, but in the "
1036"attachment you will find your public keyfile."
eabe8a9a
TS
1037msgstr ""
1038
1039#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1040msgid ""
1041"Address the message to <a "
1042"href=\"mailto:edward-en@fsf.org\">edward-en@fsf.org</a>. Put at least one "
1043"word (whatever you want) in the subject and body of the email. Don't send "
1044"yet."
1045msgstr ""
1046
1047#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1048msgid ""
e7253b03
TG
1049"We want Edward to be able to open the email with your keyfile, so we want "
1050"this first special message to be unencrypted. Make sure encryption is turned "
8cd4252b
TG
1051"off by using the dropdown menu \"Security\" and select <i>Do Not "
1052"Encrypt</i>. Once encryption is off, hit Send."
eabe8a9a
TS
1053msgstr ""
1054
1055#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1056msgid ""
1057"It may take two or three minutes for Edward to respond. In the meantime, you "
e7253b03
TG
1058"might want to skip ahead and check out the <a href=\"#section6\">Use it "
1059"Well</a> section of this guide. Once you have received a response, head to "
1060"the next step. From here on, you'll be doing just the same thing as when "
eabe8a9a
TS
1061"corresponding with a real person."
1062msgstr ""
1063
1064#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1065msgid ""
e7253b03
TG
1066"When you open Edward's reply, GnuPG may prompt you for your passphrase "
1067"before using your private key to decrypt it."
1068msgstr ""
1069
1070#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1071msgid "Step 4.B Option 1. Verify key"
1072msgstr ""
1073
1074#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1075msgid "Step 4.B Option 2. Import key"
eabe8a9a
TS
1076msgstr ""
1077
1078#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03
TG
1079msgid "<em>Step 4.b</em> Send a test encrypted email"
1080msgstr ""
1081
8cd4252b 1082#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03 1083msgid "Get Edward's key"
eabe8a9a
TS
1084msgstr ""
1085
1086#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1087msgid ""
e7253b03
TG
1088"To encrypt an email to Edward, you need its public key, so now you'll have "
1089"to download it from a keyserver. You can do this in two different ways:"
eabe8a9a
TS
1090msgstr ""
1091
1092#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1093msgid ""
e7253b03
TG
1094"<strong>Option 1.</strong> In the email answer you received from Edward as a "
1095"response to your first email, Edward's public key was included. On the right "
1096"of the email, just above the writing area, you will find an \"OpenPGP\" "
1097"button that has a lock and a little wheel next to it. Click that, and select "
252b506d
TG
1098"<i>Discover</i> next to the text: \"This message was signed with a key that "
1099"you don't yet have.\" A popup with Edward's key details will follow."
eabe8a9a
TS
1100msgstr ""
1101
1102#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1103msgid ""
252b506d
TG
1104"<strong>Option 2.</strong> Open your OpenPGP Key manager, and under "
1105"\"Keyserver\" choose <i>Discover Keys Online</i>. Here, fill in Edward's "
1106"email address, and import Edward's key."
eabe8a9a
TS
1107msgstr ""
1108
1109#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1110msgid ""
8cd4252b
TG
1111"The option <i>Accepted (unverified)</i> will add this key to your key "
1112"manager, and now it can be used to send encrypted emails and to verify "
1113"digital signatures from Edward."
eabe8a9a
TS
1114msgstr ""
1115
1116#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1117msgid ""
e7253b03
TG
1118"In the popup window confirming if you want to import Edward's key, you'll "
1119"see many different emails that are all associated with its key. This is "
1120"correct; you can safely import the key."
eabe8a9a
TS
1121msgstr ""
1122
1123#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1124msgid ""
e7253b03
TG
1125"Since you encrypted this email with Edward's public key, Edward's private "
1126"key is required to decrypt it. Edward is the only one with its private key, "
1127"so no one except Edward can decrypt it."
1128msgstr ""
1129
8cd4252b 1130#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03 1131msgid "Send Edward an encrypted email"
eabe8a9a
TS
1132msgstr ""
1133
1134#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1135msgid ""
e7253b03
TG
1136"Write a new email in your email program, addressed to <a "
1137"href=\"mailto:edward-en@fsf.org\">edward-en@fsf.org</a>. Make the subject "
1138"\"Encryption test\" or something similar and write something in the body."
1139msgstr ""
1140
1141#. type: Content of: <html><body><section><div><div><div><p>
1142msgid ""
1143"This time, make sure encryption is turned on by using the dropdown menu "
8cd4252b
TG
1144"\"Security\" and select <i>Require Encryption</i>. Once encryption is on, "
1145"hit Send."
eabe8a9a
TS
1146msgstr ""
1147
1148#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03
TG
1149msgid "\"Recipients not valid, not trusted or not found\""
1150msgstr ""
1151
1152#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1153msgid ""
8cd4252b
TG
1154"You could get the above error message, or something along these lines: "
1155"\"Unable to send this message with end-to-end encryption, because there are "
1156"problems with the keys of the following recipients: ...\" In these cases, "
1157"you may be trying to send an encrypted email to someone when you do not have "
e7253b03 1158"their public key yet. Make sure you follow the steps above to import the key "
f950b092
TG
1159"to your key manager. Open the OpenPGP Key Manager to make sure the recipient "
1160"is listed there."
e7253b03
TG
1161msgstr ""
1162
1163#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
1164msgid "Unable to send message"
1165msgstr ""
1166
1167#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1168msgid ""
1169"You could get the following message when trying to send your encrypted "
1170"email: \"Unable to send this message with end-to-end encryption, because "
1171"there are problems with the keys of the following recipients: "
1172"edward-en@fsf.org.\" This usually means you imported the key with the "
1173"\"unaccepted (unverified) option.\" Go to the \"key properties\" of this key "
1174"by right clicking on the key in the OpenPGP Key Manager, and select the "
8cd4252b
TG
1175"option <i>Yes, but I have not verified that this is the correct key</i> in "
1176"the \"Acceptance\" option at the bottom of this window. Resend the email."
e7253b03
TG
1177msgstr ""
1178
1179#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
1180msgid "I can't find Edward's key"
eabe8a9a
TS
1181msgstr ""
1182
1183#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
1184msgid ""
1185"Close the pop-ups that have appeared since you clicked Send. Make sure you "
f950b092
TG
1186"are connected to the Internet and try again. If that doesn't work, you can "
1187"download the key manually from <a "
1188"href=\"https://keys.openpgp.org/search?q=edward-en%40fsf.org\">the "
1189"keyserver</a>, and import it by using the <i>Import Public Key(s) from "
1190"File</i> option in the OpenPGP Key Manager."
eabe8a9a
TS
1191msgstr ""
1192
1193#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
1194msgid "Unscrambled messages in the Sent folder"
1195msgstr ""
1196
1197#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
1198msgid ""
1199"Even though you can't decrypt messages encrypted to someone else's key, your "
1200"email program will automatically save a copy encrypted to your public key, "
1201"which you'll be able to view from the Sent folder like a normal email. This "
1202"is normal, and it doesn't mean that your email was not sent encrypted."
1203msgstr ""
1204
eabe8a9a 1205#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
1206msgid "Encrypt messages from the command line"
1207msgstr ""
1208
1209#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
1210msgid ""
1211"You can also encrypt and decrypt messages and files from the <a "
1212"href=\"https://www.gnupg.org/gph/en/manual/x110.html\">command line</a>, if "
1213"that's your preference. The option --armor makes the encrypted output appear "
1214"in the regular character set."
1215msgstr ""
1216
1217#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1218msgid "<em>Important:</em> Security tips"
1219msgstr ""
1220
1221#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1222msgid ""
1223"Even if you encrypt your email, the subject line is not encrypted, so don't "
1224"put private information there. The sending and receiving addresses aren't "
1225"encrypted either, so a surveillance system can still figure out who you're "
1226"communicating with. Also, surveillance agents will know that you're using "
1227"GnuPG, even if they can't figure out what you're saying. When you send "
e7253b03
TG
1228"attachments, you can choose to encrypt them or not, independent of the "
1229"actual email."
eabe8a9a
TS
1230msgstr ""
1231
8c163d47
TG
1232#. type: Content of: <html><body><section><div><div><div><p>
1233msgid ""
1234"For greater security against potential attacks, you can turn off "
1235"HTML. Instead, you can render the message body as plain text. In order to do "
8cd4252b
TG
1236"this in Icedove or Thunderbird, go to \"View\" &rarr; \"Message Body As\" "
1237"&rarr; <i>Plain Text</i>."
e7253b03
TG
1238msgstr ""
1239
1240#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1241msgid "Step 4.C Edward's response"
8c163d47
TG
1242msgstr ""
1243
eabe8a9a 1244#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1245msgid "<em>Step 4.c</em> Receive a response"
eabe8a9a
TS
1246msgstr ""
1247
1248#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1249msgid ""
e7253b03 1250"When Edward receives your email, it will use its private key to decrypt it, "
9ecb61bd 1251"then reply to you."
eabe8a9a
TS
1252msgstr ""
1253
1254#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1255msgid ""
1256"It may take two or three minutes for Edward to respond. In the meantime, you "
e7253b03 1257"might want to skip ahead and check out the <a href=\"#section6\">Use it "
eabe8a9a
TS
1258"Well</a> section of this guide."
1259msgstr ""
1260
e7253b03
TG
1261#. type: Content of: <html><body><section><div><div><div><p>
1262msgid ""
1263"Edward will send you an encrypted email back saying your email was received "
eb9903b9
TG
1264"and decrypted. Your email client will automatically decrypt Edward's "
1265"message."
e7253b03
TG
1266msgstr ""
1267
1268#. type: Content of: <html><body><section><div><div><div><p>
1269msgid ""
1270"The OpenPGP button in the email will show a little green checkmark over the "
098ebaeb 1271"lock symbol to show the message is encrypted, and a little orange warning "
e7253b03
TG
1272"sign which means that you have accepted the key, but not verified it. When "
1273"you have not yet accepted the key, you will see a little question mark "
1274"there. Clicking the prompts in this button will lead you to key properties "
1275"as well."
1276msgstr ""
1277
eabe8a9a 1278#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1279msgid "<em>Step 4.d</em> Send a signed test email"
eabe8a9a
TS
1280msgstr ""
1281
1282#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1283msgid ""
1284"GnuPG includes a way for you to sign messages and files, verifying that they "
1285"came from you and that they weren't tampered with along the way. These "
1286"signatures are stronger than their pen-and-paper cousins -- they're "
1287"impossible to forge, because they're impossible to create without your "
1288"private key (another reason to keep your private key safe)."
1289msgstr ""
1290
1291#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1292msgid ""
1293"You can sign messages to anyone, so it's a great way to make people aware "
1294"that you use GnuPG and that they can communicate with you securely. If they "
1295"don't have GnuPG, they will be able to read your message and see your "
1296"signature. If they do have GnuPG, they'll also be able to verify that your "
1297"signature is authentic."
1298msgstr ""
1299
1300#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1301msgid ""
e7253b03
TG
1302"To sign an email to Edward, compose any message to the email address and "
1303"click the pencil icon next to the lock icon so that it turns gold. If you "
1304"sign a message, GnuPG may ask you for your password before it sends the "
1305"message, because it needs to unlock your private key for signing."
eabe8a9a
TS
1306msgstr ""
1307
1308#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1309msgid ""
e7253b03 1310"In \"Account Settings\" &rarr; \"End-To-End-Encryption\" you can opt to "
8cd4252b 1311"<i>add digital signature by default</i>."
eabe8a9a
TS
1312msgstr ""
1313
1314#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1315msgid "<em>Step 4.e</em> Receive a response"
eabe8a9a
TS
1316msgstr ""
1317
1318#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1319msgid ""
1320"When Edward receives your email, he will use your public key (which you sent "
9ecb61bd 1321"him in <a href=\"#step-3a\">Step 3.A</a>) to verify the message you sent has "
e7253b03 1322"not been tampered with and to encrypt a reply to you."
eabe8a9a
TS
1323msgstr ""
1324
1325#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1326msgid ""
1327"Edward's reply will arrive encrypted, because he prefers to use encryption "
1328"whenever possible. If everything goes according to plan, it should say "
1329"\"Your signature was verified.\" If your test signed email was also "
1330"encrypted, he will mention that first."
1331msgstr ""
1332
9ecb61bd
TG
1333#. type: Content of: <html><body><section><div><div><div><p>
1334msgid ""
e7253b03
TG
1335"When you receive Edward's email and open it, your email client will "
1336"automatically detect that it is encrypted with your public key, and then it "
1337"will use your private key to decrypt it."
9ecb61bd
TG
1338msgstr ""
1339
e7253b03
TG
1340#. type: Content of: <html><body><section><div><div><h2>
1341msgid "<em>#5</em> Learn about the Web of Trust"
9ecb61bd
TG
1342msgstr ""
1343
e7253b03
TG
1344#. type: Attribute 'alt' of: <html><body><section><div><div><p><img>
1345msgid "Illustration of keys all interconnected with a web of lines"
eabe8a9a
TS
1346msgstr ""
1347
1348#. type: Content of: <html><body><section><div><div><p>
eabe8a9a 1349msgid ""
e7253b03 1350"Email encryption is a powerful technology, but it has a weakness: it "
eabe8a9a
TS
1351"requires a way to verify that a person's public key is actually "
1352"theirs. Otherwise, there would be no way to stop an attacker from making an "
e7253b03 1353"email address with your friend's name, creating keys to go with it, and "
eabe8a9a
TS
1354"impersonating your friend. That's why the free software programmers that "
1355"developed email encryption created keysigning and the Web of Trust."
1356msgstr ""
1357
1358#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1359msgid ""
1360"When you sign someone's key, you are publicly saying that you've verified "
1361"that it belongs to them and not someone else."
1362msgstr ""
1363
1364#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1365msgid ""
1366"Signing keys and signing messages use the same type of mathematical "
1367"operation, but they carry very different implications. It's a good practice "
1368"to generally sign your email, but if you casually sign people's keys, you "
8cd4252b 1369"may accidentally end up vouching for the identity of an imposter."
eabe8a9a
TS
1370msgstr ""
1371
1372#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1373msgid ""
1374"People who use your public key can see who has signed it. Once you've used "
1375"GnuPG for a long time, your key may have hundreds of signatures. You can "
1376"consider a key to be more trustworthy if it has many signatures from people "
1377"that you trust. The Web of Trust is a constellation of GnuPG users, "
1378"connected to each other by chains of trust expressed through signatures."
1379msgstr ""
1380
1381#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
e7253b03 1382msgid "Section 5: trusting a key"
eabe8a9a
TS
1383msgstr ""
1384
1385#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1386msgid "<em>Step 5.a</em> Sign a key"
eabe8a9a
TS
1387msgstr ""
1388
1389#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1390msgid ""
8cd4252b
TG
1391"In your email program's menu, go to OpenPGP Key Manager and select <i>Key "
1392"properties</i> by right clicking on Edward's key."
eabe8a9a
TS
1393msgstr ""
1394
1395#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1396msgid ""
8cd4252b
TG
1397"Under \"Your Acceptance,\" you can select <i>Yes, I've verified in person "
1398"this key has the correct fingerprint\"</i>."
eabe8a9a
TS
1399msgstr ""
1400
1401#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1402msgid ""
1403"You've just effectively said \"I trust that Edward's public key actually "
1404"belongs to Edward.\" This doesn't mean much because Edward isn't a real "
e7253b03
TG
1405"person, but it's good practice, and for real people it is important. You can "
1406"read more about signing a person's key in the <a "
1407"href=\"#check-ids-before-signing\">check IDs before signing</a> section."
eabe8a9a
TS
1408msgstr ""
1409
1410#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1411msgid "Identifying keys: Fingerprints and IDs"
1412msgstr ""
1413
1414#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1415msgid ""
1416"People's public keys are usually identified by their key fingerprint, which "
1417"is a string of digits like F357AA1A5B1FA42CFD9FE52A9FF2194CC09A61E8 (for "
1418"Edward's key). You can see the fingerprint for your public key, and other "
e7253b03
TG
1419"public keys saved on your computer, by going to OpenPGP Key Management in "
1420"your email program's menu, then right clicking on the key and choosing Key "
1421"Properties. It's good practice to share your fingerprint wherever you share "
1422"your email address, so that people can double-check that they have the "
1423"correct public key when they download yours from a keyserver."
eabe8a9a
TS
1424msgstr ""
1425
1426#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1427msgid ""
e7253b03
TG
1428"You may also see public keys referred to by a shorter keyID. This keyID is "
1429"visible directly from the Key Management window. These eight character "
1430"keyIDs were previously used for identification, which used to be safe, but "
1431"is no longer reliable. You need to check the full fingerprint as part of "
2fd4a6dc
TG
1432"verifying you have the correct key for the person you are trying to "
1433"contact. Spoofing, in which someone intentionally generates a key with a "
1434"fingerprint whose final eight characters are the same as another, is "
1435"unfortunately common."
eabe8a9a
TS
1436msgstr ""
1437
1438#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1439msgid "<em>Important:</em> What to consider when signing keys"
1440msgstr ""
1441
1442#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1443msgid ""
1444"Before signing a person's key, you need to be confident that it actually "
1445"belongs to them, and that they are who they say they are. Ideally, this "
1446"confidence comes from having interactions and conversations with them over "
1447"time, and witnessing interactions between them and others. Whenever signing "
1448"a key, ask to see the full public key fingerprint, and not just the shorter "
e7253b03 1449"keyID. If you feel it's important to sign the key of someone you've just "
eabe8a9a 1450"met, also ask them to show you their government identification, and make "
e7253b03 1451"sure the name on the ID matches the name on the public key."
eabe8a9a
TS
1452msgstr ""
1453
1454#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
1455msgid "Master the Web of Trust"
1456msgstr ""
1457
1458#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
1459msgid ""
1460"Unfortunately, trust does not spread between users the way <a "
e7253b03
TG
1461"href=\"https://fennetic.net/irc/finney.org/~hal/web_of_trust.html\">many "
1462"people think</a>. One of the best ways to strengthen the GnuPG community is "
1463"to deeply <a "
eabe8a9a
TS
1464"href=\"https://www.gnupg.org/gph/en/manual/x334.html\">understand</a> the "
1465"Web of Trust and to carefully sign as many people's keys as circumstances "
1466"permit."
1467msgstr ""
1468
eabe8a9a 1469#. type: Content of: <html><body><section><div><div><h2>
e7253b03 1470msgid "<em>#6</em> Use it well"
eabe8a9a
TS
1471msgstr ""
1472
1473#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1474msgid ""
1475"Everyone uses GnuPG a little differently, but it's important to follow some "
1476"basic practices to keep your email secure. Not following them, you risk the "
1477"privacy of the people you communicate with, as well as your own, and damage "
1478"the Web of Trust."
1479msgstr ""
1480
1481#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
e7253b03 1482msgid "Section 6: Use it Well (1)"
eabe8a9a
TS
1483msgstr ""
1484
1485#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1486msgid "When should I encrypt? When should I sign?"
1487msgstr ""
1488
1489#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1490msgid ""
1491"The more you can encrypt your messages, the better. If you only encrypt "
1492"emails occasionally, each encrypted message could raise a red flag for "
1493"surveillance systems. If all or most of your email is encrypted, people "
1494"doing surveillance won't know where to start. That's not to say that only "
1495"encrypting some of your email isn't helpful -- it's a great start and it "
1496"makes bulk surveillance more difficult."
1497msgstr ""
1498
1499#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1500msgid ""
1501"Unless you don't want to reveal your own identity (which requires other "
1502"protective measures), there's no reason not to sign every message, whether "
1503"or not you are encrypting. In addition to allowing those with GnuPG to "
1504"verify that the message came from you, signing is a non-intrusive way to "
1505"remind everyone that you use GnuPG and show support for secure "
1506"communication. If you often send signed messages to people that aren't "
1507"familiar with GnuPG, it's nice to also include a link to this guide in your "
1508"standard email signature (the text kind, not the cryptographic kind)."
1509msgstr ""
1510
1511#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
e7253b03 1512msgid "Section 6: Use it Well (2)"
eabe8a9a
TS
1513msgstr ""
1514
1515#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1516msgid "Be wary of invalid keys"
1517msgstr ""
1518
1519#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1520msgid ""
1521"GnuPG makes email safer, but it's still important to watch out for invalid "
1522"keys, which might have fallen into the wrong hands. Email encrypted with "
1523"invalid keys might be readable by surveillance programs."
1524msgstr ""
1525
1526#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1527msgid ""
1528"In your email program, go back to the first encrypted email that Edward sent "
e7253b03
TG
1529"you. Because Edward encrypted it with your public key, it will have a green "
1530"checkmark a at the top \"OpenPGP\" button."
eabe8a9a
TS
1531msgstr ""
1532
1533#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1534msgid ""
8cd4252b
TG
1535"<strong>When using GnuPG, make a habit of glancing at that button. The "
1536"program will warn you there if you get an email signed with a key that can't "
1537"be trusted.</strong>"
eabe8a9a
TS
1538msgstr ""
1539
1540#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1541msgid "Copy your revocation certificate to somewhere safe"
1542msgstr ""
1543
1544#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1545msgid ""
1546"Remember when you created your keys and saved the revocation certificate "
e7253b03
TG
1547"that GnuPG made? It's time to copy that certificate onto the safest storage "
1548"that you have -- a flash drive, disk, or hard drive stored in a safe place "
1549"in your home could work, not on a device you carry with you regularly. The "
1550"safest way we know is actually to print the revocation certificate and store "
1551"it in a safe place."
eabe8a9a
TS
1552msgstr ""
1553
1554#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1555msgid ""
1556"If your private key ever gets lost or stolen, you'll need this certificate "
1557"file to let people know that you are no longer using that keypair."
1558msgstr ""
1559
1560#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1561msgid "<em>IMPORTANT:</em> ACT SWIFTLY if someone gets your private key"
eabe8a9a
TS
1562msgstr ""
1563
1564#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1565msgid ""
e7253b03 1566"If you lose your private key or someone else gets a hold of it (say, by "
eabe8a9a
TS
1567"stealing or cracking your computer), it's important to revoke it immediately "
1568"before someone else uses it to read your encrypted email or forge your "
1569"signature. This guide doesn't cover how to revoke a key, but you can follow "
1570"these <a "
71b90906 1571"href=\"https://www.hackdiary.com/2004/01/18/revoking-a-gpg-key/\">instructions</a>. "
eabe8a9a
TS
1572"After you're done revoking, make a new key and send an email to everyone "
1573"with whom you usually use your key to make sure they know, including a copy "
1574"of your new key."
1575msgstr ""
1576
71b90906 1577#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1578msgid "Webmail and GnuPG"
1579msgstr ""
1580
71b90906 1581#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1582msgid ""
1583"When you use a web browser to access your email, you're using webmail, an "
1584"email program stored on a distant website. Unlike webmail, your desktop "
1585"email program runs on your own computer. Although webmail can't decrypt "
1586"encrypted email, it will still display it in its encrypted form. If you "
1587"primarily use webmail, you'll know to open your email client when you "
1588"receive a scrambled email."
1589msgstr ""
1590
eabe8a9a 1591#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1592msgid "Make your public key part of your online identity"
eabe8a9a
TS
1593msgstr ""
1594
1595#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1596msgid ""
e7253b03
TG
1597"First add your public key fingerprint to your email signature, then compose "
1598"an email to at least five of your friends, telling them you just set up "
1599"GnuPG and mentioning your public key fingerprint. Link to this guide and ask "
1600"them to join you. Don't forget that there's also an awesome <a "
1601"href=\"infographic.html\">infographic to share.</a>"
eabe8a9a
TS
1602msgstr ""
1603
2fd4a6dc
TG
1604#. type: Content of: <html><body><section><div><div><div><p>
1605msgid ""
e7253b03
TG
1606"Start writing your public key fingerprint anywhere someone would see your "
1607"email address: your social media profiles, blog, Website, or business "
1608"card. (At the Free Software Foundation, we put ours on our <a "
1609"href=\"https://fsf.org/about/staff\">staff page</a>.) We need to get our "
1610"culture to the point that we feel like something is missing when we see an "
1611"email address without a public key fingerprint."
2fd4a6dc
TG
1612msgstr ""
1613
e7253b03
TG
1614#. type: Content of: <html><body><section><div><div><h2>
1615msgid "<a href=\"next_steps.html\">Great job! Check out the next steps.</a>"
eabe8a9a
TS
1616msgstr ""
1617
e7253b03
TG
1618#. type: Content of: <html><body><header><div><p>
1619msgid "&larr; Read the <a href=\"index.html\">full guide</a>"
eabe8a9a
TS
1620msgstr ""
1621
e7253b03
TG
1622#. type: Content of: <html><body><header><div><h3><a>
1623msgid ""
1624"<a "
1625"href=\"https://fsf.org/share?u=https://u.fsf.org/zc&amp;t=How%20public-key%20encryption%20works.%20Infographic%20via%20%40fsf\">"
eabe8a9a
TS
1626msgstr ""
1627
e7253b03
TG
1628#. type: Content of: <html><body><header><div><h3>
1629msgid "&nbsp; Share our infographic </a> with the hashtag #EmailSelfDefense"
2fd4a6dc
TG
1630msgstr ""
1631
e7253b03
TG
1632#. type: Attribute 'alt' of: <html><body><header><div><p><img>
1633msgid "View &amp; share our infographic"
1634msgstr ""
1635
eabe8a9a 1636#. type: Content of: <html><body><header><div><h1>
eabe8a9a
TS
1637msgid "Great job!"
1638msgstr ""
1639
1640#. type: Content of: <html><body><section><div><div><h2>
e7253b03 1641msgid "<em>#7</em> Next steps"
eabe8a9a
TS
1642msgstr ""
1643
1644#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1645msgid ""
1646"You've now completed the basics of email encryption with GnuPG, taking "
1647"action against bulk surveillance. These next steps will help make the most "
1648"of the work you've done."
1649msgstr ""
1650
e7253b03
TG
1651#. type: Content of: <html><body><section><div><div><div><p>
1652msgid "&larr; <a href=\"index.html\">Return to the guide</a>"
1653msgstr ""
1654
eabe8a9a 1655#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1656msgid "Join the movement"
1657msgstr ""
1658
1659#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1660msgid ""
1661"You've just taken a huge step towards protecting your privacy online. But "
1662"each of us acting alone isn't enough. To topple bulk surveillance, we need "
1663"to build a movement for the autonomy and freedom of all computer users. Join "
1664"the Free Software Foundation's community to meet like-minded people and work "
1665"together for change."
1666msgstr ""
1667
1668#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1669msgid ""
1670"<small>Read <a href=\"https://www.fsf.org/twitter\">why GNU Social and "
60715780 1671"Mastodon are better than Twitter</a>, and <a "
e7253b03 1672"href=\"https://www.fsf.org/facebook\">why we don't use Facebook</a>.</small>"
eabe8a9a
TS
1673msgstr ""
1674
1675#. type: Content of: <html><body><section><div><div><div><div><p>
eabe8a9a
TS
1676msgid "Low-volume mailing list"
1677msgstr ""
1678
1679#. type: Content of: <html><body><section><div><div><div><div><form>
eabe8a9a 1680msgid ""
4aec1215
TG
1681"<input type=\"text\" value=\"Type your email...\" name=\"email-Primary\" "
1682"id=\"frmEmail\" /> <input type=\"submit\" value=\"Add me\" "
1683"name=\"_qf_Edit_next\" /> <input type=\"hidden\" "
eabe8a9a
TS
1684"value=\"https://emailselfdefense.fsf.org/en/confirmation.html\" "
1685"name=\"postURL\" /> <input type=\"hidden\" value=\"1\" name=\"group[25]\" /> "
1686"<input type=\"hidden\" "
1687"value=\"https://my.fsf.org/civicrm/profile?reset=1&amp;gid=391\" "
1688"name=\"cancelURL\" /> <input type=\"hidden\" value=\"Edit:cancel\" "
1689"name=\"_qf_default\" />"
1690msgstr ""
1691
1692#. type: Content of: <html><body><section><div><div><div><div><p>
eabe8a9a
TS
1693msgid ""
1694"<small>Read our <a "
1695"href=\"https://my.fsf.org/donate/privacypolicy.html\">privacy "
1696"policy</a>.</small>"
1697msgstr ""
1698
1699#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1700msgid "Bring Email Self-Defense to new people"
1701msgstr ""
1702
1703#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1704msgid ""
1705"Understanding and setting up email encryption is a daunting task for "
1706"many. To welcome them, make it easy to find your public key and offer to "
1707"help with encryption. Here are some suggestions:"
1708msgstr ""
1709
1710#. type: Content of: <html><body><section><div><div><div><ul><li>
eabe8a9a 1711msgid ""
e7253b03 1712"# Lead an Email Self-Defense workshop for your friends and community, using "
eabe8a9a
TS
1713"our <a href=\"workshops.html\">teaching guide</a>."
1714msgstr ""
1715
1716#. type: Content of: <html><body><section><div><div><div><ul><li>
eabe8a9a 1717msgid ""
e7253b03
TG
1718"# Use <a "
1719"href=\"https://fsf.org/share?u=https://u.fsf.org/zb&amp;t=Encrypt%20with%20me%20using%20Email%20Self-Defense%20%40fsf\"> "
1720"our sharing page</a> to compose a message to a few friends and ask them to "
1721"join you in using encrypted email. Remember to include your GnuPG public key "
1722"fingerprint so they can easily download your key."
eabe8a9a
TS
1723msgstr ""
1724
1725#. type: Content of: <html><body><section><div><div><div><ul><li>
eabe8a9a 1726msgid ""
e7253b03 1727"# Add your public key fingerprint anywhere that you normally display your "
eabe8a9a 1728"email address. Some good places are: your email signature (the text kind, "
e7253b03 1729"not the cryptographic kind), social media profiles, blogs, Web sites, or "
eabe8a9a
TS
1730"business cards. At the Free Software Foundation, we put ours on our <a "
1731"href=\"https://fsf.org/about/staff\">staff page</a>."
1732msgstr ""
1733
1734#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1735msgid "Protect more of your digital life"
1736msgstr ""
1737
1738#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1739msgid ""
1740"Learn surveillance-resistant technologies for instant messages, hard drive "
1741"storage, online sharing, and more at <a "
1742"href=\"https://directory.fsf.org/wiki/Collection:Privacy_pack\"> the Free "
1743"Software Directory's Privacy Pack</a> and <a "
1744"href=\"https://prism-break.org\">prism-break.org</a>."
1745msgstr ""
1746
1747#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1748msgid ""
8cd4252b 1749"If you are using Windows, macOS or any other proprietary operating system, "
eabe8a9a
TS
1750"we recommend you switch to a free software operating system like "
1751"GNU/Linux. This will make it much harder for attackers to enter your "
1752"computer through hidden back doors. Check out the Free Software Foundation's "
e7253b03 1753"<a href=\"https://www.gnu.org/distros/free-distros.html\">endorsed versions "
eabe8a9a
TS
1754"of GNU/Linux.</a>"
1755msgstr ""
1756
1757#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1758msgid "Optional: Add more email protection with Tor"
1759msgstr ""
1760
1761#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1762msgid ""
1763"<a href=\"https://www.torproject.org/about/overview.html.en\">The Onion "
1764"Router (Tor) network</a> wraps Internet communication in multiple layers of "
1765"encryption and bounces it around the world several times. When used "
1766"properly, Tor confuses surveillance field agents and the global surveillance "
1767"apparatus alike. Using it simultaneously with GnuPG's encryption will give "
1768"you the best results."
1769msgstr ""
1770
1771#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1772msgid ""
1773"To have your email program send and receive email over Tor, install the <a "
1774"href=\"https://addons.mozilla.org/en-us/thunderbird/addon/torbirdy/\">Torbirdy "
e7253b03 1775"plugin</a> by searching for it through Add-ons."
eabe8a9a
TS
1776msgstr ""
1777
1778#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1779msgid ""
1780"Before beginning to check your email over Tor, make sure you understand <a "
4aec1215
TG
1781"href=\"https://www.torproject.org/docs/faq.html.en#WhatProtectionsDoesTorProvide\"> "
1782"the security tradeoffs involved</a>. This <a "
eabe8a9a
TS
1783"href=\"https://www.eff.org/pages/tor-and-https\">infographic</a> from our "
1784"friends at the Electronic Frontier Foundation demonstrates how Tor keeps you "
1785"secure."
1786msgstr ""
1787
1788#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
e7253b03 1789msgid "Section 7: Next Steps"
eabe8a9a
TS
1790msgstr ""
1791
1792#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1793msgid "Make Email Self-Defense tools even better"
1794msgstr ""
1795
1796#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1797msgid ""
1798"<a href=\"https://libreplanet.org/wiki/GPG_guide/Public_Review\">Leave "
1799"feedback and suggest improvements to this guide</a>. We welcome "
1800"translations, but we ask that you contact us at <a "
1801"href=\"mailto:campaigns@fsf.org\">campaigns@fsf.org</a> before you start, so "
1802"that we can connect you with other translators working in your language."
1803msgstr ""
1804
1805#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1806msgid ""
1807"If you like programming, you can contribute code to <a "
e7253b03 1808"href=\"https://www.gnupg.org/\">GnuPG</a>."
eabe8a9a
TS
1809msgstr ""
1810
1811#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1812msgid ""
1813"To go the extra mile, support the Free Software Foundation so we can keep "
1814"improving Email Self-Defense, and make more tools like it."
1815msgstr ""
1816
1817#. type: Content of: <html><body><header><div><ul><li>
e7253b03 1818msgid "<a href=\"index.html\">Set up guide</a>"
2fd4a6dc
TG
1819msgstr ""
1820
eabe8a9a 1821#. type: Content of: <html><body><header><div><ul><li>
eabe8a9a
TS
1822msgid "<a href=\"workshops.html\" class=\"current\">Teach your friends</a>"
1823msgstr ""
1824
1825#. type: Content of: <html><body><header><div><div><div><p>
eabe8a9a
TS
1826msgid ""
1827"We want to translate this guide into more languages, and make a version for "
1828"encryption on mobile devices. Please donate, and help people around the "
1829"world take the first step towards protecting their privacy with free "
1830"software."
1831msgstr ""
1832
e7253b03
TG
1833#. type: Content of: <html><body><header><div><div><p><a>
1834msgid ""
1835"<a "
1836"href=\"https://crm.fsf.org/civicrm/contribute/transact?reset=1&amp;id=14&amp;pk_campaign=email_self_defense&amp;pk_kwd=guide_donate\">"
1837msgstr ""
1838
eabe8a9a 1839#. type: Attribute 'alt' of: <html><body><header><div><div><p><a><img>
eabe8a9a
TS
1840msgid "View &amp; share our infographic →"
1841msgstr ""
1842
1843#. type: Content of: <html><body><header><div><div><p>
eabe8a9a
TS
1844msgid ""
1845"</a> Understanding and setting up email encryption sounds like a daunting "
1846"task to many people. That's why helping your friends with GnuPG plays such "
1847"an important role in helping spread encryption. Even if only one person "
1848"shows up, that's still one more person using encryption who wasn't "
1849"before. You have the power to help your friends keep their digital love "
1850"letters private, and teach them about the importance of free software. If "
1851"you use GnuPG to send and receive encrypted email, you're a perfect "
1852"candidate for leading a workshop!"
1853msgstr ""
1854
1855#. type: Attribute 'alt' of: <html><body><section><div><div><p><img>
eabe8a9a
TS
1856msgid "A small workshop among friends"
1857msgstr ""
1858
1859#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
1860msgid "<em>#1</em> Get your friends or community interested"
1861msgstr ""
1862
1863#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1864msgid ""
1865"If you hear friends grumbling about their lack of privacy, ask them if "
1866"they're interested in attending a workshop on Email Self-Defense. If your "
1867"friends don't grumble about privacy, they may need some convincing. You "
1868"might even hear the classic \"if you've got nothing to hide, you've got "
1869"nothing to fear\" argument against using encryption."
1870msgstr ""
1871
1872#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1873msgid ""
1874"Here are some talking points you can use to help explain why it's worth it "
1875"to learn GnuPG. Mix and match whichever you think will make sense to your "
1876"community:"
1877msgstr ""
1878
1879#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1880msgid "Strength in numbers"
1881msgstr ""
1882
1883#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1884msgid ""
1885"Each person who chooses to resist mass surveillance with encryption makes it "
1886"easier for others to resist as well. People normalizing the use of strong "
1887"encryption has multiple powerful effects: it means those who need privacy "
1888"the most, like potential whistle-blowers and activists, are more likely to "
1889"learn about encryption. More people using encryption for more things also "
1890"makes it harder for surveillance systems to single out those that can't "
1891"afford to be found, and shows solidarity with those people."
1892msgstr ""
1893
1894#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1895msgid "People you respect may already be using encryption"
1896msgstr ""
1897
1898#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1899msgid ""
1900"Many journalists, whistleblowers, activists, and researchers use GnuPG, so "
1901"your friends might unknowingly have heard of a few people who use it "
1902"already. You can search for \"BEGIN PUBLIC KEY BLOCK\" + keyword to help "
1903"make a list of people and organizations who use GnuPG whom your community "
1904"will likely recognize."
1905msgstr ""
1906
1907#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1908msgid "Respect your friends' privacy"
1909msgstr ""
1910
1911#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1912msgid ""
1913"There's no objective way to judge what constitutes privacy-sensitive "
1914"correspondence. As such, it's better not to presume that just because you "
1915"find an email you sent to a friend innocuous, your friend (or a surveillance "
1916"agent, for that matter!) feels the same way. Show your friends respect by "
1917"encrypting your correspondence with them."
1918msgstr ""
1919
1920#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1921msgid "Privacy technology is normal in the physical world"
1922msgstr ""
1923
1924#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1925msgid ""
1926"In the physical realm, we take window blinds, envelopes, and closed doors "
1927"for granted as ways of protecting our privacy. Why should the digital realm "
1928"be any different?"
1929msgstr ""
1930
1931#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1932msgid "We shouldn't have to trust our email providers with our privacy"
1933msgstr ""
1934
1935#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1936msgid ""
1937"Some email providers are very trustworthy, but many have incentives not to "
1938"protect your privacy and security. To be empowered digital citizens, we need "
1939"to build our own security from the bottom up."
1940msgstr ""
1941
1942#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
1943msgid "<em>#2</em> Plan The Workshop"
1944msgstr ""
1945
1946#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1947msgid ""
1948"Once you've got at least one interested friend, pick a date and start "
1949"planning out the workshop. Tell participants to bring their computer and ID "
1950"(for signing each other's keys). If you'd like to make it easy for the "
e7253b03
TG
1951"participants to use <a "
1952"href=\"https://theintercept.com/2015/03/26/passphrases-can-memorize-attackers-cant-guess/\">Diceware</a> "
1953"for choosing passwords, get a pack of dice beforehand. Make sure the "
1954"location you select has an easily accessible Internet connection, and make "
1955"backup plans in case the connection stops working on the day of the "
1956"workshop. Libraries, coffee shops, and community centers make great "
1957"locations. Try to get all the participants to set up an email client based "
1958"on Thunderbird before the event. Direct them to their email provider's IT "
1959"department or help page if they run into errors."
eabe8a9a
TS
1960msgstr ""
1961
1962#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1963msgid ""
1964"Estimate that the workshop will take at least forty minutes plus ten minutes "
1965"for each participant. Plan extra time for questions and technical glitches."
1966msgstr ""
1967
1968#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1969msgid ""
1970"The success of the workshop requires understanding and catering to the "
1971"unique backgrounds and needs of each group of participants. Workshops should "
1972"stay small, so that each participant receives more individualized "
1973"instruction. If more than a handful of people want to participate, keep the "
1974"facilitator to participant ratio high by recruiting more facilitators, or by "
1975"facilitating multiple workshops. Small workshops among friends work great!"
1976msgstr ""
1977
1978#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
1979msgid "<em>#3</em> Follow the guide as a group"
1980msgstr ""
1981
1982#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1983msgid ""
1984"Work through the Email Self-Defense guide a step at a time as a group. Talk "
1985"about the steps in detail, but make sure not to overload the participants "
1986"with minutia. Pitch the bulk of your instructions to the least tech-savvy "
1987"participants. Make sure all the participants complete each step before the "
1988"group moves on to the next one. Consider facilitating secondary workshops "
1989"afterwards for people that had trouble grasping the concepts, or those that "
1990"grasped them quickly and want to learn more."
1991msgstr ""
1992
1993#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1994msgid ""
1995"In <a href=\"index.html#section2\">Section 2</a> of the guide, make sure the "
1996"participants upload their keys to the same keyserver so that they can "
1997"immediately download each other's keys later (sometimes there is a delay in "
1998"synchronization between keyservers). During <a "
1999"href=\"index.html#section3\">Section 3</a>, give the participants the option "
2000"to send test messages to each other instead of or as well as "
2001"Edward. Similarly, in <a href=\"index.html#section4\">Section 4</a>, "
2002"encourage the participants to sign each other's keys. At the end, make sure "
2003"to remind people to safely back up their revocation certificates."
2004msgstr ""
2005
2006#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
2007msgid "<em>#4</em> Explain the pitfalls"
2008msgstr ""
2009
2010#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2011msgid ""
2012"Remind participants that encryption works only when it's explicitly used; "
2013"they won't be able to send an encrypted email to someone who hasn't already "
2014"set up encryption. Also remind participants to double-check the encryption "
2015"icon before hitting send, and that subjects and timestamps are never "
2016"encrypted."
2017msgstr ""
2018
2019#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2020msgid ""
2021"Explain the <a "
2022"href=\"https://www.gnu.org/proprietary/proprietary.html\">dangers of running "
2023"a proprietary system</a> and advocate for free software, because without it, "
2024"we can't <a "
2025"href=\"https://www.fsf.org/bulletin/2013/fall/how-can-free-software-protect-us-from-surveillance\">meaningfully "
2026"resist invasions of our digital privacy and autonomy</a>."
2027msgstr ""
2028
2029#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
2030msgid "<em>#5</em> Share additional resources"
2031msgstr ""
2032
2033#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2034msgid ""
2035"GnuPG's advanced options are far too complex to teach in a single "
2036"workshop. If participants want to know more, point out the advanced "
2037"subsections in the guide and consider organizing another workshop. You can "
2038"also share <a "
e7253b03
TG
2039"href=\"https://www.gnupg.org/documentation/index.html\">GnuPG's</a> official "
2040"documentation and mailing lists, and the <a "
2041"href=\"https://libreplanet.org/wiki/GPG_guide/Public_Review\">Email "
2042"Self-Defense feedback</a> page. Many GNU/Linux distribution's Web sites also "
2043"contain a page explaining some of GnuPG's advanced features."
eabe8a9a
TS
2044msgstr ""
2045
2046#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
2047msgid "<em>#6</em> Follow up"
2048msgstr ""
2049
2050#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2051msgid ""
2052"Make sure everyone has shared email addresses and public key fingerprints "
2053"before they leave. Encourage the participants to continue to gain GnuPG "
2054"experience by emailing each other. Send them each an encrypted email one "
2055"week after the event, reminding them to try adding their public key ID to "
2056"places where they publicly list their email address."
2057msgstr ""
2058
2059#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2060msgid ""
2061"If you have any suggestions for improving this workshop guide, please let us "
2062"know at <a href=\"mailto:campaigns@fsf.org\">campaigns@fsf.org</a>."
2063msgstr ""