1 # SOME DESCRIPTIVE TITLE
2 # Copyright (C) YEAR Free Software Foundation, Inc.
3 # This file is distributed under the same license as the emailselfdefense package.
4 # FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
8 "Project-Id-Version: emailselfdefense ersion\n"
9 "POT-Creation-Date: 2018-06-23 10:15+0200\n"
10 "PO-Revision-Date: 2017-09-01 21:32+0800\n"
15 "Content-Type: text/plain; charset=UTF-8\n"
16 "Content-Transfer-Encoding: 8bit\n"
17 "X-Generator: Poedit 2.0\n"
19 #. type: Attribute 'lang' of: <html>
23 #. type: Attribute 'content' of: <html><head><meta>
24 msgid "text/html; charset=utf-8"
25 msgstr "text/html; charset=utf-8"
27 #. type: Content of: <html><head><title>
29 "Email Self-Defense - a guide to fighting surveillance with GnuPG encryption"
32 #. type: Attribute 'content' of: <html><head><meta>
33 msgid "GnuPG, GPG, privacy, email, Enigmail"
34 msgstr "GnuPG, GPG, 隐私, 电子邮件, Enigmail"
36 #. type: Attribute 'content' of: <html><head><meta>
38 "Email surveillance violates our fundamental rights and makes free speech "
39 "risky. This guide will teach you email self-defense in 40 minutes with GnuPG."
41 "电子邮件监控侵犯了我们的基本权利并给言论自由带来风险。本指南将在 40 分钟里教"
42 "会你通过 GnuPG 进行电子邮件加密。"
44 #. type: Attribute 'content' of: <html><head><meta>
45 msgid "width=device-width, initial-scale=1"
46 msgstr "width=device-width, initial-scale=1"
48 #. type: Content of: <html><body><header><div><p>
50 "<strong>Please check your email for a confirmation link now. Thanks for "
51 "joining our list!</strong>"
52 msgstr "<strong>请检查带确认链接的邮件。感谢你加入我们的邮件列表。</strong>"
54 #. type: Content of: <html><body><header><div><p>
56 "If you don't receive the confirmation link, send us an email at info@fsf.org "
57 "to be added manually."
58 msgstr "如果你没有收到确认邮件,请给我们发邮件 info@fsf.org,我们将手动添加。"
60 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
64 #. type: Content of: <html><body><header><div><p>
65 msgid "Join us on microblogging services for day-to-day updates:"
66 msgstr "关注我们每日更新的微博客服务。"
68 #. type: Content of: <html><body><section><div><div><div><p><a>
69 msgid "<a href=\"https://status.fsf.org/fsf\">"
70 msgstr "<a href=\"https://status.fsf.org/fsf\">"
72 #. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
76 #. type: Content of: <html><body><section><div><div><div><p><a>
77 msgid " GNU Social</a> | <a href=\"http://microca.st/fsf\">"
80 #. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
84 #. type: Content of: <html><body><section><div><div><div><p>
86 " Pump.io</a> | <a href=\"https://www.twitter.com/fsf"
90 #. type: Content of: <html><body><header><div><p>
92 "<small><a href=\"https://www.fsf.org/twitter\">Read why GNU Social and Pump."
93 "io are better than Twitter.</a></small>"
95 "<small><a href=\"https://www.fsf.org/twitter\">阅读为什么 GNU Social 和 Pump."
96 "io 要比 Twitter 好。</a></small>"
98 #. type: Content of: <html><body><header><div><p>
99 msgid "← Return to <a href=\"index.html\">Email Self-Defense</a>"
102 #. type: Content of: <html><body><footer><div><div><h4><a>
103 msgid "<a href=\"https://u.fsf.org/ys\">"
104 msgstr "<a href=\"https://u.fsf.org/ys\">"
106 #. type: Attribute 'alt' of: <html><body><footer><div><div><h4><a><img>
107 msgid "Free Software Foundation"
110 #. type: Content of: <html><body><footer><div><p>
114 #. type: Content of: <html><body><footer><div><div><p>
117 "Copyright © 2014-2016 <a href=\"https://u.fsf.org/ys\">Free Software "
118 "Foundation</a>, Inc. <a href=\"https://my.fsf.org/donate/privacypolicy.html"
119 "\">Privacy Policy</a>. Please support our work by <a href=\"https://u.fsf."
120 "org/yr\">joining us as an associate member.</a>"
122 "Copyright © 2014-2016 <a href=\"https://u.fsf.org/ys\">Free Software "
123 "Foundation</a>, Inc. <a href=\"https://my.fsf.org/donate/privacypolicy.html"
124 "\">隐私政策</a>. Please support our work by <a href=\"https://u.fsf.org/yr"
125 "\">joining us as an associate member.</a>"
127 #. type: Content of: <html><body><footer><div><div><p>
129 "The images on this page are under a <a href=\"https://creativecommons.org/"
130 "licenses/by/4.0/\">Creative Commons Attribution 4.0 license (or later "
131 "version)</a>, and the rest of it is under a <a href=\"https://"
132 "creativecommons.org/licenses/by-sa/4.0\">Creative Commons Attribution-"
133 "ShareAlike 4.0 license (or later version)</a>. Download the <a href=\"http://"
134 "agpl.fsf.org/emailselfdefense.fsf.org/edward/CURRENT/edward.tar.gz\">source "
135 "code of Edward reply bot</a> by Andrew Engelbrecht <sudoman@ninthfloor."
136 "org> and Josh Drake <zamnedix@gnu.org>, available under the GNU "
137 "Affero General Public License. <a href=\"http://www.gnu.org/licenses/license-"
138 "list.html#OtherLicenses\">Why these licenses?</a>"
140 "此页面上的图片采用 <a href=\"https://creativecommons.org/licenses/by/4.0/\">"
141 "知识共享 署名 4.0 许可协议 (或较新版本)</a>进行许可,其余部分以<a href="
142 "\"https://creativecommons.org/licenses/by-sa/4.0\">知识共享 署名-相同方式 "
143 "4.0 许可协议 (或较新版本)</a>进行许可。 下载<a href=\"http://agpl.fsf.org/"
144 "emailselfdefense.fsf.org/edward/CURRENT/edward.tar.gz\">爱德华自动回复机器人"
145 "的源代码</a> 由 Andrew Engelbrecht <sudoman@ninthfloor.org> 和 Josh "
146 "Drake <zamnedix@gnu.org>编写,采用 GNU Affero General Public License 许"
147 "可证进行许可。<a href=\"http://www.gnu.org/licenses/license-list."
148 "html#OtherLicenses\">为什么要这些许可协议?</a>"
150 #. type: Content of: <html><body><footer><div><div><p>
152 "Fonts used in the guide & infographic: <a href=\"https://www.google.com/"
153 "fonts/specimen/Dosis\">Dosis</a> by Pablo Impallari, <a href=\"http://www."
154 "google.com/fonts/specimen/Signika\">Signika</a> by Anna Giedryś, <a "
155 "href=\"http://www.google.com/fonts/specimen/Archivo+Narrow\">Archivo Narrow</"
156 "a> by Omnibus-Type, <a href=\"https://libreplanet.org/wiki/GPG_guide/"
157 "Graphics_Howto#Pitfalls\">PXL-2000</a> by Florian Cramer."
160 #. type: Content of: <html><body><footer><div><div><p>
162 "Download the <a href=\"emailselfdefense_source.zip\">source package</a> for "
163 "this guide, including fonts, image source files and the text of Edward's "
166 "下载本指南(包含字体,图片文件和爱德华邮件的文本)的<a href="
167 "\"emailselfdefense_source.zip\">源码包</a>。"
169 #. type: Content of: <html><body><footer><div><div><p>
171 "This site uses the Weblabels standard for labeling <a href=\"https://www.fsf."
172 "org/campaigns/freejs\">free JavaScript</a>. View the JavaScript <a href=\"//"
173 "weblabels.fsf.org/emailselfdefense.fsf.org/\" rel=\"jslicense\">source code "
174 "and license information</a>."
177 #. type: Content of: <html><body><footer><div><p><a>
179 "Infographic and guide design by <a rel=\"external\" href=\"http://jplusplus."
180 "org\"><strong>Journalism++</strong>"
183 #. type: Attribute 'alt' of: <html><body><footer><div><p><a><img>
185 msgstr "Journalism++"
187 #. type: Attribute 'content' of: <html><head><meta>
188 msgid "GnuPG, GPG, openpgp, surveillance, privacy, email, Enigmail"
189 msgstr "GnuPG, GPG, openpgp, 监控, 隐私, 电子邮件, Enigmail"
191 #. type: Content of: <html><body><header><div><h1>
192 msgid "Email Self-Defense"
195 #. type: Content of: <html><body><header><div><ul><li>
196 msgid "<a class=\"current\" href=\"/en\">English - v4.0</a>"
197 msgstr "<a href=\"/en\">English - v4.0</a>"
199 #. type: Content of: <html><body><header><div><ul><li>
200 msgid "<a href=\"/ar\">العربية <span class=\"tip\">tip</span></a>"
203 #. type: Content of: <html><body><header><div><ul><li>
204 msgid "<a href=\"/cs\">Čeština - v4.0</a>"
205 msgstr "<a href=\"/cs\">Čeština - v4.0</a>"
207 #. type: Content of: <html><body><header><div><ul><li>
208 msgid "<a href=\"/de\">Deutsch - v3.0</a>"
209 msgstr "<a href=\"/de\">Deutsch - v3.0</a>"
211 #. type: Content of: <html><body><header><div><ul><li>
212 msgid "<a href=\"/el\">ελληνικά - v3.0</a>"
213 msgstr "<a href=\"/el\">ελληνικά - v3.0</a>"
215 #. type: Content of: <html><body><header><div><ul><li>
216 msgid "<a href=\"/es\">español - v4.0</a>"
217 msgstr "<a href=\"/es\">español - v4.0</a>"
219 #. type: Content of: <html><body><header><div><ul><li>
220 msgid "<a href=\"/fa\">فارسی - v4.0</a>"
221 msgstr "<a href=\"/fa\">فارسی - v4.0</a>"
223 #. type: Content of: <html><body><header><div><ul><li>
224 msgid "<a href=\"/fr\">français - v4.0</a>"
225 msgstr "<a href=\"/fr\">français - v4.0</a>"
227 #. type: Content of: <html><body><header><div><ul><li>
228 msgid "<a href=\"/it\">italiano - v3.0</a>"
229 msgstr "<a href=\"/it\">italiano - v3.0</a>"
231 #. type: Content of: <html><body><header><div><ul><li>
232 msgid "<a href=\"/ja\">日本語 - v4.0</a>"
233 msgstr "<a href=\"/ja\">日本語 - v4.0</a>"
235 #. type: Content of: <html><body><header><div><ul><li>
236 msgid "<a href=\"/ko\">한국어 <span class=\"tip\">tip</span></a>"
239 #. type: Content of: <html><body><header><div><ul><li>
240 msgid "<a href=\"/ml\">മലയാളം <span class=\"tip\">tip</span></a>"
243 #. type: Content of: <html><body><header><div><ul><li>
244 msgid "<a href=\"/pt-br\">português do Brasil - v3.0</a>"
245 msgstr "<a href=\"/pt-br\">português do Brasil - v3.0</a>"
247 #. type: Content of: <html><body><header><div><ul><li>
248 msgid "<a href=\"/ro\">română - v3.0</a>"
249 msgstr "<a href=\"/ro\">română - v3.0</a>"
251 #. type: Content of: <html><body><header><div><ul><li>
252 msgid "<a href=\"/ru\">русский - v4.0</a>"
253 msgstr "<a href=\"/ru\">русский - v4.0</a>"
255 #. type: Content of: <html><body><header><div><ul><li>
256 msgid "<a href=\"/sq\">Shqip - v4.0</a>"
257 msgstr "<a href=\"/sq\">Shqip - v4.0</a>"
259 #. type: Content of: <html><body><header><div><ul><li>
260 msgid "<a href=\"/sv\">svenska - v4.0</a>"
261 msgstr "<a href=\"/sv\">svenska - v4.0</a>"
263 #. type: Content of: <html><body><header><div><ul><li>
264 msgid "<a href=\"/tr\">Türkçe - v4.0</a>"
265 msgstr "<a href=\"/tr\">Türkçe - v4.0</a>"
267 #. type: Content of: <html><body><header><div><ul><li>
268 msgid "<a href=\"/zh-hans\">简体中文 <span class=\"tip\">tip</span></a>"
270 "<a class=\"current\" href=\"/zh-hans\">简体中文 <span class=\"tip\">tip</"
273 #. type: Content of: <html><body><header><div><ul><li>
275 "<a href=\"https://libreplanet.org/wiki/GPG_guide/Translation_Guide"
276 "\"><strong><span style=\"color: #2F5FAA;\">Translate!</span></strong></a>"
278 "<a href=\"https://libreplanet.org/wiki/GPG_guide/Translation_Guide"
279 "\"><strong><span style=\"color: #2F5FAA;\">Translate!</span></strong></a>"
281 #. type: Content of: <html><body><header><div><ul><li>
282 msgid "<a href=\"index.html\" class=\"current\">GNU/Linux</a>"
283 msgstr "<a href=\"index.html\" class=\"current\">GNU/Linux</a>"
285 #. type: Content of: <html><body><header><div><ul><li>
286 msgid "<a href=\"mac.html\">Mac OS</a>"
287 msgstr "<a href=\"mac.html\">Mac OS</a>"
289 #. type: Content of: <html><body><header><div><ul><li>
290 msgid "<a href=\"windows.html\">Windows</a>"
291 msgstr "<a href=\"windows.html\">Windows</a>"
293 #. type: Content of: <html><body><header><div><ul><li>
294 msgid "<a href=\"workshops.html\">Teach your friends</a>"
295 msgstr "<a href=\"workshops.html\">教会你的朋友</a>"
297 #. type: Content of: <html><body><header><div><ul><li><a>
299 "<a href=\"https://fsf.org/share?u=https://u.fsf.org/zb&t=Email "
300 "encryption for everyone via %40fsf\">Share "
302 "<a href=\"https://fsf.org/share?u=https://u.fsf.org/zb&t=Email "
303 "encryption for everyone via %40fsf\">分享 "
305 #. type: Content of: <html><body><header><div><ul><li><a>
309 #. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
313 #. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
314 msgid "[Hacker News]"
315 msgstr "[Hacker News]"
317 #. type: Content of: <html><body><header><div><div><h3><a>
318 msgid "<a href=\"http://u.fsf.org/ys\">"
319 msgstr "<a href=\"http://u.fsf.org/ys\">"
321 #. type: Content of: <html><body><header><div><div><div><p>
323 "We fight for computer users' rights, and promote the development of free (as "
324 "in freedom) software. Resisting bulk surveillance is very important to us."
326 "我们为计算机用户的权利而战,并促进自由软件的发展,对抗大规模监控对我们至关重"
329 #. type: Content of: <html><body><header><div><div><div><p>
332 "<strong>Please donate to support Email Self-Defense. We need to keep "
333 "improving it, and making more materials, for the benefit of people around "
334 "the world taking the first step towards protecting their privacy.</strong>"
336 "<strong>请捐款以支持电子邮件加密指南。我们会一直改进它,使其充实,for the "
337 "benefit of people around the world taking the first step towards protecting "
338 "their privacy.</strong>"
340 #. type: Content of: <html><body><header><div><div><p><a>
342 "<a href=\"https://crm.fsf.org/civicrm/contribute/transact?reset=1&"
343 "id=14&pk_campaign=email_self_defense&pk_kwd=guide_donate\">"
345 "<a href=\"https://crm.fsf.org/civicrm/contribute/transact?reset=1&"
346 "id=14&pk_campaign=email_self_defense&pk_kwd=guide_donate\">"
348 #. type: Attribute 'alt' of: <html><body><header><div><div><p><a><img>
352 #. type: Content of: <html><body><header><div><div><p><a>
353 msgid "<a id=\"infographic\" href=\"infographic.html\">"
354 msgstr "<a id=\"infographic\" href=\"infographic.html\">"
356 #. type: Attribute 'alt' of: <html><body><header><div><div><p><a><img>
357 msgid "View & share our infographic →"
360 #. type: Content of: <html><body><header><div><div><p>
362 "</a> Bulk surveillance violates our fundamental rights and makes free speech "
363 "risky. This guide will teach you a basic surveillance self-defense skill: "
364 "email encryption. Once you've finished, you'll be able to send and receive "
365 "emails that are scrambled to make sure a surveillance agent or thief "
366 "intercepting your email can't read them. All you need is a computer with an "
367 "Internet connection, an email account, and about forty minutes."
369 "</a> 大规模监控侵犯了我们的基本权利,并给言论自由带来风险。本指南将会教你一些"
370 "基本的监控防护技巧:电子邮件加密。一旦你学会了,你就可以收发无法被第三方阅读"
371 "的电子邮件。你所需要的是一台带网络连接的计算机,一个电子邮件账号以及大约 40 "
374 #. type: Content of: <html><body><header><div><div><p>
376 "Even if you have nothing to hide, using encryption helps protect the privacy "
377 "of people you communicate with, and makes life difficult for bulk "
378 "surveillance systems. If you do have something important to hide, you're in "
379 "good company; these are the same tools that whistleblowers use to protect "
380 "their identities while shining light on human rights abuses, corruption and "
383 "即使你没有什么见不得人的事情,使用加密能够保护和你通信的人的隐私,并使大规模"
384 "监控系统变得难以运作。如果你确实有重要的东西需要保护,它会是你的好帮手;告密"
385 "者在揭发人权侵犯,贪污腐败和犯罪行为时,也是用着同样的工具来保护他们自己的身"
388 #. type: Content of: <html><body><header><div><div><p>
390 "In addition to using encryption, standing up to surveillance requires "
391 "fighting politically for a <a href=\"http://gnu.org/philosophy/surveillance-"
392 "vs-democracy.html\">reduction in the amount of data collected on us</a>, but "
393 "the essential first step is to protect yourself and make surveillance of "
394 "your communication as difficult as possible. This guide helps you do that. "
395 "It is designed for beginners, but if you already know the basics of GnuPG or "
396 "are an experienced free software user, you'll enjoy the advanced tips and "
397 "the <a href=\"workshops.html\">guide to teaching your friends</a>."
399 "除了使用加密技术外,我们还需要我们监督政府,为<a href=\"http://gnu.org/"
400 "philosophy/surveillance-vs-democracy.html\">减少对我们的大量数据收集</a>而"
401 "战。但更为要紧的是保护好你自己,使监控你的通信变得尽可能的困难。本指南将帮你"
402 "做到。要是你已经掌握了 GnuPG 的基本知识,或者你是一位资深的自由软件用户,你可"
403 "能会喜欢进阶技巧和<a href=\"workshops.html\">教会你朋友的指南</a>。"
405 #. type: Content of: <html><body><section><div><div><h2>
406 msgid "<em>#1</em> Get the pieces"
409 #. type: Content of: <html><body><section><div><div><p>
411 "This guide relies on software which is <a href=\"https://www.gnu.org/"
412 "philosophy/free-sw.html\">freely licensed</a>; it's completely transparent "
413 "and anyone can copy it or make their own version. This makes it safer from "
414 "surveillance than proprietary software (like Windows). Learn more about free "
415 "software at <a href=\"https://u.fsf.org/ys\">fsf.org</a>."
417 "本指南依赖于<a href=\"https://www.gnu.org/philosophy/free-sw.html\">自由授权"
418 "</a>的软件;它是完全透明的,任何人都可以拷贝它,生成自己的版本。这使得它比专"
419 "有软件(比如 Windows)来的更安全。你可以在 <a href=\"https://u.fsf.org/ys"
420 "\">fsf.org</a> 上了解更多有关自由软件的信息。"
422 #. type: Content of: <html><body><section><div><div><p>
424 "Most GNU/Linux operating systems come with GnuPG installed on them, so you "
425 "don't have to download it. Before configuring GnuPG though, you'll need the "
426 "IceDove desktop email program installed on your computer. Most GNU/Linux "
427 "distributions have IceDove installed already, though it may be under the "
428 "alternate name \"Thunderbird.\" Email programs are another way to access the "
429 "same email accounts you can access in a browser (like Gmail), but provide "
432 "大多数 GNU/Linux 操作系统自带 GnuPG,所以你不必下载它。在配置 GnuPG 前,你需"
433 "要安装 IceDove 桌面电子邮件程序。大多数 GNU/Linux 发行版已经安装好 IceDove "
434 "了,它可能是以别名 Thunderbird 出现在你的计算机中。电子邮件程序是除通过浏览器"
435 "(比如 Gmail)外的另一种登录邮箱的方式,却提供了更多的功能。"
437 #. type: Content of: <html><body><section><div><div><p>
439 "If you already have an email program, you can skip to <a href=\"#step-1b"
442 "如果你已经有了电子邮件程序,你可以跳至 <a href=\"#step-1b\">Step 1.b</a>。"
444 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
445 msgid "Step 1.A: Install Wizard"
448 #. type: Content of: <html><body><section><div><div><div><h3>
449 msgid "<em>Step 1.a</em> Set up your email program with your email account"
450 msgstr "<em>Step 1.a</em> 配置电子邮件帐号"
452 #. type: Content of: <html><body><section><div><div><div><p>
454 "Open your email program and follow the wizard (step-by-step walkthrough) "
455 "that sets it up with your email account."
456 msgstr "打开你的邮件程序,按照向导程序的说明一步一步地设置好你的电子邮件账号。"
458 #. type: Content of: <html><body><section><div><div><div><p>
460 "Look for the letters SSL, TLS, or STARTTLS to the right of the servers when "
461 "you're setting up your account. If you don't see them, you will still be "
462 "able to use encryption, but this means that the people running your email "
463 "system are running behind the industry standard in protecting your security "
464 "and privacy. We recommend that you send them a friendly email asking them to "
465 "enable SSL, TLS, or STARTTLS for your email server. They will know what "
466 "you're talking about, so it's worth making the request even if you aren't an "
467 "expert on these security systems."
469 "在设置邮件账号时,找到服务器右边的 SSL,TLS 或者 STARTTLS 的单词。如果你没有"
470 "看到,你还是可以使用加密,但这意味着运行邮件服务器的人使用了低于行业标准的传"
471 "输方式来保护你的隐私。我们建议你向他们发送一封友好的邮件,要求他们为你的邮件"
472 "服务器启用 SSL,TLS 或者 STARTTLS。他们会知道你指的是什么,这是一个值得的要"
475 #. type: Content of: <html><body><section><div><div><div><div><h4>
476 msgid "Troubleshooting"
479 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
480 msgid "The wizard doesn't launch"
483 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
486 "You can launch the wizard yourself, but the menu option for doing so is "
487 "named differently in each email program. The button to launch it will be in "
488 "the program's main menu, under \"New\" or something similar, titled "
489 "something like \"Add account\" or \"New/Existing email account.\""
490 msgstr "你可以自行启动向导程序,"
492 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
493 msgid "The wizard can't find my account or isn't downloading my mail"
494 msgstr "向导程序没有找到我的账号或者不在下载我的邮件"
496 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
498 "Before searching the Web, we recommend you start by asking other people who "
499 "use your email system, to figure out the correct settings."
501 "在网上搜索解决方案之前,我们建议你问问你身边使用相同邮件系统的人,以检查设置"
504 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
505 msgid "Don't see a solution to your problem?"
508 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
510 "Please let us know on the <a href=\"https://libreplanet.org/wiki/GPG_guide/"
511 "Public_Review\">feedback page</a>."
513 "请在<a href=\"https://libreplanet.org/wiki/GPG_guide/Public_Review\">反馈页</"
516 #. type: Attribute 'alt' of: <html><body><section><div><div><div><ul><li><img>
518 msgid "Step 1.B: Tools -> Add-ons"
519 msgstr "Step 1.B: 工具 -> 附加组件"
521 #. type: Attribute 'alt' of: <html><body><section><div><div><div><ul><li><img>
523 msgid "Step 1.B: Search Add-ons"
524 msgstr "Step 1.B: 搜索附加组件"
526 #. type: Attribute 'alt' of: <html><body><section><div><div><div><ul><li><img>
528 msgid "Step 1.B: Install Add-ons"
529 msgstr "Step 1.B: 安装附加组件"
531 #. type: Content of: <html><body><section><div><div><div><h3>
532 msgid "<em>Step 1.b</em> Install the Enigmail plugin for your email program"
533 msgstr "<em>Step 1.b</em> 为电子邮件程序安装 Enigmail 插件"
535 #. type: Content of: <html><body><section><div><div><div><p>
536 # | In your email program's menu, select Add-ons (it may be in the Tools
537 # | section). Make sure Extensions is selected on the left. Do you see
538 # | Enigmail? {+Make sure it's the latest version.+} If so, skip this step.
541 #| "In your email program's menu, select Add-ons (it may be in the Tools "
542 #| "section). Make sure Extensions is selected on the left. Do you see "
543 #| "Enigmail? If so, skip this step."
545 "In your email program's menu, select Add-ons (it may be in the Tools "
546 "section). Make sure Extensions is selected on the left. Do you see Enigmail? "
547 "Make sure it's the latest version. If so, skip this step."
549 "在邮件客户端的菜单栏里,选择“附加组件”(Add-ons,它可能在工具选项里)。确认选"
550 "上了左侧的“扩展”(Extensions)。看到了 Enigmail 吗?如果是,请跳过此步。"
552 #. type: Content of: <html><body><section><div><div><div><p>
554 "If not, search \"Enigmail\" with the search bar in the upper right. You can "
555 "take it from here. Restart your email program when you're done."
557 "如果没有,在右上方的搜索栏里搜索“Enigmail”。你可以在这里获取到它。安装完成后"
560 #. type: Content of: <html><body><section><div><div><div><p>
562 "There are major security flaws in versions of GnuPG prior to 2.2.8, and "
563 "Enigmail prior to 2.0.7. Make sure you have GnuPG 2.2.8 and Enigmail 2.0.7, "
567 #. type: Content of: <html><body><section><div><div><div><p>
569 "Note: As of June 18, 2018, GnuPG 2.2.8 is unavailable for Debian stable and "
573 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
574 msgid "I can't find the menu."
577 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
579 "In many new email programs, the main menu is represented by an image of "
580 "three stacked horizontal bars."
581 msgstr "在许多新型的邮件程序中,汉堡三线图标表示主菜单。"
583 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
584 msgid "My email looks weird"
585 msgstr "我的电子邮件看起来很奇怪"
587 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
590 "Enigmail doesn't tend to play nice with HTML, which is used to format "
591 "emails, so it may disable your HTML formatting automatically. To send an "
592 "HTML-formatted email without encryption or a signature, hold down the Shift "
593 "key when you select compose. You can then write an email as if Enigmail "
596 "Enigmail 不能正常的处理 HTML,因此他可能会自动禁用你的 HTML 格式。要发送一封 "
597 "HTML 格式的邮件而不加密或不签名,你需要在点击新建邮件时按住 Shift 键。现在你"
598 "可以像没有 Enigmail 一样写邮件了。"
600 #. type: Content of: <html><body><section><div><div><h2>
601 msgid "<em>#2</em> Make your keys"
604 #. type: Content of: <html><body><section><div><div><p>
606 "To use the GnuPG system, you'll need a public key and a private key (known "
607 "together as a keypair). Each is a long string of randomly generated numbers "
608 "and letters that are unique to you. Your public and private keys are linked "
609 "together by a special mathematical function."
611 "要使用 GnuPG,你将需要一个公钥和一个私钥(两者合称密钥对)。每一个密钥都是随"
612 "机生成的一长串数字和字母,并且对你来说独一无二。你的公钥和私钥以一种特别的数"
615 #. type: Content of: <html><body><section><div><div><p>
617 "Your public key isn't like a physical key, because it's stored in the open "
618 "in an online directory called a keyserver. People download it and use it, "
619 "along with GnuPG, to encrypt emails they send to you. You can think of the "
620 "keyserver as a phonebook; people who want to send you encrypted email can "
621 "look up your public key."
623 "公钥不像是现实中上的钥匙,因为它储存在称之为“密钥服务器”的开放在线目录中。人"
624 "们下载并使用它,借助 GnuPG 加密邮件,发送给你。你可以把密钥服务器看作是电话"
625 "簿;需要给你发加密邮件的人能够找到你的公钥。"
627 #. type: Content of: <html><body><section><div><div><p>
629 "Your private key is more like a physical key, because you keep it to "
630 "yourself (on your computer). You use GnuPG and your private key together to "
631 "descramble encrypted emails other people send to you. <span style=\"font-"
632 "weight: bold;\">You should never share you private key with anyone, under "
633 "any circumstances.</span>"
635 "你的是要更像是现实中的钥匙,因为你要好好(在计算机中)保管它。你则用 GnupG 和"
636 "你的是要来解密其他人给你发送的加密邮件。<span style=\"font-weight: bold;\">无"
637 "论如何,你都不应该把私钥交给别人。</span>"
639 #. type: Content of: <html><body><section><div><div><p>
641 "In addition to encryption and decryption, you can also use these keys to "
642 "sign messages and check the authenticity of other people's signatures. We'll "
643 "discuss this more in the next section."
645 "除了加密和解密,你也可以用这些密钥来签名,或者检查其他人签名的真实性。我们将"
648 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
649 msgid "Step 2.A: Make a Keypair"
650 msgstr "Step 2.A: 生成密钥对"
652 #. type: Content of: <html><body><section><div><div><div><h3>
654 msgid "<em>Step 2.a</em> Make a keypair"
655 msgstr "<em>Step 2.a</em> 生成密钥对"
657 #. type: Content of: <html><body><section><div><div><div><p>
660 "The Enigmail Setup wizard may start automatically. If it doesn't, select "
661 "Enigmail → Setup Wizard from your email program's menu. You don't need "
662 "to read the text in the window that pops up unless you'd like to, but it's "
663 "good to read the text on the later screens of the wizard. Click Next with "
664 "the default options selected, except in these instances, which are listed in "
665 "the order they appear:"
667 "Enigmail 安装向导可能会自动启动。如果没有,则从你的邮件程序中选择 Enigmail 安"
668 "装向导。如果你不愿意,你不必去看弹出的窗口上面的文字,但看一看也不赖。"
670 #. type: Content of: <html><body><section><div><div><div><ul><li>
672 "On the screen titled \"Encryption,\" select \"Encrypt all of my messages by "
673 "default, because privacy is critical to me.\""
674 msgstr "在“加密”窗口,选择“默认加密我所有的信件,因为隐私对我很重要。”"
676 #. type: Content of: <html><body><section><div><div><div><ul><li>
678 "On the screen titled \"Signing,\" select \"Don't sign my messages by default."
682 #. type: Content of: <html><body><section><div><div><div><ul><li>
684 "On the screen titled \"Key Selection,\" select \"I want to create a new key "
685 "pair for signing and encrypting my email.\""
688 #. type: Content of: <html><body><section><div><div><div><ul><li>
690 "On the screen titled \"Create Key,\" pick a strong password! You can do it "
691 "manually, or you can use the Diceware method. Doing it manually is faster "
692 "but not as secure. Using Diceware takes longer and requires dice, but "
693 "creates a password that is much harder for attackers figure out. To use it, "
694 "read the section \"Make a secure passphrase with Diceware\" in <a href="
695 "\"https://theintercept.com/2015/03/26/passphrases-can-memorize-attackers-"
696 "cant-guess/\">this article</a> by Micah Lee."
699 #. type: Content of: <html><body><section><div><div><div><p>
701 "If you'd like to pick a password manually, come up with something you can "
702 "remember which is at least twelve characters long, and includes at least one "
703 "lower case and upper case letter and at least one number or punctuation "
704 "symbol. Never pick a password you've used elsewhere. Don't use any "
705 "recognizable patterns, such as birthdays, telephone numbers, pets' names, "
706 "song lyrics, quotes from books, and so on."
709 #. type: Content of: <html><body><section><div><div><div><p>
711 "The program will take a little while to finish the next step, the \"Key "
712 "Creation\" screen. While you wait, do something else with your computer, "
713 "like watching a movie or browsing the Web. The more you use the computer at "
714 "this point, the faster the key creation will go."
717 #. type: Content of: <html><body><section><div><div><div><p>
719 "<span style=\"font-weight: bold;\">When the \"Key Generation Completed\" "
720 "screen pops up, select Generate Certificate and choose to save it in a safe "
721 "place on your computer (we recommend making a folder called \"Revocation "
722 "Certificate\" in your home folder and keeping it there). This step is "
723 "essential for your email self-defense, as you'll learn more about in <a href="
724 "\"#section5\">Section 5</a>.</span>"
727 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
728 msgid "I can't find the Enigmail menu."
729 msgstr "我找不到 Enigmail 菜单。"
731 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
733 "In many new email programs, the main menu is represented by an image of "
734 "three stacked horizontal bars. Enigmail may be inside a section called Tools."
736 "在许多新型的邮件程序中,汉堡三线图标表示主菜单。Enigmail 可能在工具条中。"
738 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
739 msgid "The wizard says that it cannot find GnuPG."
740 msgstr "向导程序说找不到 GnuPG。"
742 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
745 "Open whatever program you usually use for installing software, and search "
746 "for GnuPG, then install it. Then restart the Enigmail setup wizard by going "
747 "to Enigmail → Setup Wizard."
749 "打开你使用的安装软件的程序,搜索 GnuPG,并安装它。然后重启 Enigmail 安装向"
752 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
753 msgid "More resources"
756 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
758 "If you're having trouble with our instructions or just want to learn more, "
759 "check out <a href=\"https://enigmail.wiki/"
760 "Key_Management#Generating_your_own_key_pair\">Enigmail's wiki instructions "
761 "for key generation</a>."
763 "如果你对我们的说明有问题或是想了解更多,请访问<a href=\"https://enigmail."
764 "wiki/Key_Management#Generating_your_own_key_pair\">Enigmain 对于生成密钥说明"
767 #. type: Content of: <html><body><section><div><div><div><div><h4>
771 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
772 msgid "Command line key generation"
775 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
777 "If you prefer using the command line for a higher degree of control, you can "
778 "follow the documentation from <a href=\"https://www.gnupg.org/gph/en/manual/"
779 "c14.html#AEN25\">The GNU Privacy Handbook</a>. Make sure you stick with "
780 "\"RSA and RSA\" (the default), because it's newer and more secure than the "
781 "algorithms the documentation recommends. Also make sure your key is at least "
782 "2048 bits, or 4096 if you want to be extra secure."
784 "如果你想使用命令行进行更高级的控制,你可以参考文档 <a href=\"https://www."
785 "gnupg.org/gph/en/manual/c14.html#AEN25\">GNU 隐私指南</a>.。"
787 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
788 msgid "Advanced key pairs"
791 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
793 "When GnuPG creates a new keypair, it compartmentalizes the encryption "
794 "function from the signing function through <a href=\"https://wiki.debian.org/"
795 "Subkeys\">subkeys</a>. If you use subkeys carefully, you can keep your GnuPG "
796 "identity much more secure and recover from a compromised key much more "
797 "quickly. <a href=\"https://alexcabal.com/creating-the-perfect-gpg-keypair/"
798 "\">Alex Cabal</a> and <a href=\"http://keyring.debian.org/creating-key.html"
799 "\">the Debian wiki</a> provide good guides for setting up a secure subkey "
803 #. type: Content of: <html><body><section><div><div><div><h3>
804 msgid "<em>Step 2.b</em> Upload your public key to a keyserver"
807 #. type: Content of: <html><body><section><div><div><div><p>
808 msgid "In your email program's menu, select Enigmail → Key Management."
811 #. type: Content of: <html><body><section><div><div><div><p>
813 "Right click on your key and select Upload Public Keys to Keyserver. Use the "
814 "default keyserver in the popup."
817 #. type: Content of: <html><body><section><div><div><div><p>
819 "Now someone who wants to send you an encrypted message can download your "
820 "public key from the Internet. There are multiple keyservers that you can "
821 "select from the menu when you upload, but they are all copies of each other, "
822 "so it doesn't matter which one you use. However, it sometimes takes a few "
823 "hours for them to match each other when a new key is uploaded."
826 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
827 msgid "The progress bar never finishes"
830 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
832 "Close the upload popup, make sure you are connected to the Internet, and try "
833 "again. If that doesn't work, try again, selecting a different keyserver."
836 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
837 msgid "My key doesn't appear in the list"
840 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
841 msgid "Try checking \"Display All Keys by Default.\""
844 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
845 msgid "More documentation"
848 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
850 "If you're having trouble with our instructions or just want to learn more, "
851 "check out <a href=\"https://www.enigmail.net/documentation/quickstart-ch2."
852 "php#id2533620\">Enigmail's documentation</a>."
855 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
856 msgid "Uploading a key from the command line"
859 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
861 "You can also upload your keys to a keyserver through the <a href=\"https://"
862 "www.gnupg.org/gph/en/manual/x457.html\">command line</a>. <a href=\"https://"
863 "sks-keyservers.net/overview-of-pools.php\">The sks Web site</a> maintains a "
864 "list of highly interconnected keyservers. You can also <a href=\"https://www."
865 "gnupg.org/gph/en/manual/x56.html#AEN64\">directly export your key</a> as a "
866 "file on your computer."
869 #. type: Content of: <html><body><section><div><div><div><h3>
870 msgid "GnuPG, OpenPGP, what?"
873 #. type: Content of: <html><body><section><div><div><div><p>
875 "In general, the terms GnuPG, GPG, GNU Privacy Guard, OpenPGP and PGP are "
876 "used interchangeably. Technically, OpenPGP (Pretty Good Privacy) is the "
877 "encryption standard, and GNU Privacy Guard (often shortened to GPG or "
878 "GnuPG) is the program that implements the standard. Enigmail is a plug-in "
879 "program for your email program that provides an interface for GnuPG."
882 #. type: Content of: <html><body><section><div><div><h2>
883 msgid "<em>#3</em> Try it out!"
886 #. type: Content of: <html><body><section><div><div><p>
888 "Now you'll try a test correspondence with a computer program named Edward, "
889 "who knows how to use encryption. Except where noted, these are the same "
890 "steps you'd follow when corresponding with a real, live person."
893 #. type: Content of: <html><body><section><div><div><div><h3>
894 msgid "<em>Step 3.a</em> Send Edward your public key"
897 #. type: Content of: <html><body><section><div><div><div><p>
899 "This is a special step that you won't have to do when corresponding with "
900 "real people. In your email program's menu, go to Enigmail → Key "
901 "Management. You should see your key in the list that pops up. Right click on "
902 "your key and select Send Public Keys by Email. This will create a new draft "
903 "message, as if you had just hit the Write button."
906 #. type: Content of: <html><body><section><div><div><div><p>
908 "Address the message to <a href=\"mailto:edward-en@fsf.org\">edward-en@fsf."
909 "org</a>. Put at least one word (whatever you want) in the subject and body "
910 "of the email. Don't send yet."
913 #. type: Content of: <html><body><section><div><div><div><p>
915 "The lock icon in the top left should be yellow, meaning encryption is turned "
916 "on. We want this first special message to be unencrypted, so click the icon "
917 "once to turn it off. The lock should become grey, with a blue dot on it (to "
918 "alert you that the setting has been changed from the default). Once "
919 "encryption is off, hit Send."
922 #. type: Content of: <html><body><section><div><div><div><p>
924 "It may take two or three minutes for Edward to respond. In the meantime, you "
925 "might want to skip ahead and check out the <a href=\"#section5\">Use it "
926 "Well</a> section of this guide. Once he's responded, head to the next step. "
927 "From here on, you'll be doing just the same thing as when corresponding with "
931 #. type: Content of: <html><body><section><div><div><div><p>
933 "When you open Edward's reply, GnuPG may prompt you for your password before "
934 "using your private key to decrypt it."
937 #. type: Content of: <html><body><section><div><div><div><h3>
938 msgid "<em>Step 3.b</em> Send a test encrypted email"
941 #. type: Content of: <html><body><section><div><div><div><p>
943 "Write a new email in your email program, addressed to <a href=\"mailto:"
944 "edward-en@fsf.org\">edward-en@fsf.org</a>. Make the subject \"Encryption test"
945 "\" or something similar and write something in the body."
948 #. type: Content of: <html><body><section><div><div><div><p>
950 "The lock icon in the top left of the window should be yellow, meaning "
951 "encryption is on. This will be your default from now on."
954 #. type: Content of: <html><body><section><div><div><div><p>
956 "Next to the lock, you'll notice an icon of a pencil. We'll get to this in a "
960 #. type: Content of: <html><body><section><div><div><div><p>
962 "Click Send. Enigmail will pop up a window that says \"Recipients not valid, "
963 "not trusted or not found.\""
966 #. type: Content of: <html><body><section><div><div><div><p>
968 "To encrypt an email to Edward, you need his public key, so now you'll have "
969 "Enigmail download it from a keyserver. Click Download Missing Keys and use "
970 "the default in the pop-up that asks you to choose a keyserver. Once it finds "
971 "keys, check the first one (Key ID starting with C), then select ok. Select "
972 "ok in the next pop-up."
975 #. type: Content of: <html><body><section><div><div><div><p>
977 "Now you are back at the \"Recipients not valid, not trusted or not found\" "
978 "screen. Check the box in front of Edward's key and click Send."
981 #. type: Content of: <html><body><section><div><div><div><p>
983 "Since you encrypted this email with Edward's public key, Edward's private "
984 "key is required to decrypt it. Edward is the only one with his private key, "
985 "so no one except him can decrypt it."
988 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
989 msgid "Enigmail can't find Edward's key"
992 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
994 "Close the pop-ups that have appeared since you clicked Send. Make sure you "
995 "are connected to the Internet and try again. If that doesn't work, repeat "
996 "the process, choosing a different keyserver when it asks you to pick one."
999 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
1000 msgid "Unscrambled messages in the Sent folder"
1003 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1005 "Even though you can't decrypt messages encrypted to someone else's key, your "
1006 "email program will automatically save a copy encrypted to your public key, "
1007 "which you'll be able to view from the Sent folder like a normal email. This "
1008 "is normal, and it doesn't mean that your email was not sent encrypted."
1011 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1013 "If you're still having trouble with our instructions or just want to learn "
1014 "more, check out <a href=\"https://enigmail.wiki/"
1015 "Signature_and_Encryption#Encrypting_a_message\">Enigmail's wiki</a>."
1018 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
1019 msgid "Encrypt messages from the command line"
1022 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1024 "You can also encrypt and decrypt messages and files from the <a href="
1025 "\"https://www.gnupg.org/gph/en/manual/x110.html\">command line</a>, if "
1026 "that's your preference. The option --armor makes the encrypted output appear "
1027 "in the regular character set."
1030 #. type: Content of: <html><body><section><div><div><div><h3>
1031 msgid "<em>Important:</em> Security tips"
1034 #. type: Content of: <html><body><section><div><div><div><p>
1036 "Even if you encrypt your email, the subject line is not encrypted, so don't "
1037 "put private information there. The sending and receiving addresses aren't "
1038 "encrypted either, so a surveillance system can still figure out who you're "
1039 "communicating with. Also, surveillance agents will know that you're using "
1040 "GnuPG, even if they can't figure out what you're saying. When you send "
1041 "attachments, Enigmail will give you the choice to encrypt them or not, "
1042 "independent of the actual email."
1045 #. type: Content of: <html><body><section><div><div><div><p>
1047 "For greater security against potential attacks, you can turn off HTML. "
1048 "Instead, you can render the message body as plain text. In order to do this "
1049 "in Thunderbird, go to View > Message Body As > Plain Text."
1052 #. type: Content of: <html><body><section><div><div><div><h3>
1053 msgid "<em>Step 3.c</em> Receive a response"
1056 #. type: Content of: <html><body><section><div><div><div><p>
1058 "When Edward receives your email, he will use his private key to decrypt it, "
1059 "then use your public key (which you sent him in <a href=\"#step-3a\">Step 3."
1060 "A</a>) to encrypt his reply to you."
1063 #. type: Content of: <html><body><section><div><div><div><p>
1065 "It may take two or three minutes for Edward to respond. In the meantime, you "
1066 "might want to skip ahead and check out the <a href=\"#section5\">Use it "
1067 "Well</a> section of this guide."
1070 #. type: Content of: <html><body><section><div><div><div><p>
1072 "When you receive Edward's email and open it, Enigmail will automatically "
1073 "detect that it is encrypted with your public key, and then it will use your "
1074 "private key to decrypt it."
1077 #. type: Content of: <html><body><section><div><div><div><p>
1079 "Notice the bar that Enigmail shows you above the message, with information "
1080 "about the status of Edward's key."
1083 #. type: Content of: <html><body><section><div><div><div><h3>
1084 msgid "<em>Step 3.d</em> Send a test signed email"
1087 #. type: Content of: <html><body><section><div><div><div><p>
1089 "GnuPG includes a way for you to sign messages and files, verifying that they "
1090 "came from you and that they weren't tampered with along the way. These "
1091 "signatures are stronger than their pen-and-paper cousins -- they're "
1092 "impossible to forge, because they're impossible to create without your "
1093 "private key (another reason to keep your private key safe)."
1096 #. type: Content of: <html><body><section><div><div><div><p>
1098 "You can sign messages to anyone, so it's a great way to make people aware "
1099 "that you use GnuPG and that they can communicate with you securely. If they "
1100 "don't have GnuPG, they will be able to read your message and see your "
1101 "signature. If they do have GnuPG, they'll also be able to verify that your "
1102 "signature is authentic."
1105 #. type: Content of: <html><body><section><div><div><div><p>
1107 "To sign an email to Edward, compose any message to him and click the pencil "
1108 "icon next to the lock icon so that it turns gold. If you sign a message, "
1109 "GnuPG may ask you for your password before it sends the message, because it "
1110 "needs to unlock your private key for signing."
1113 #. type: Content of: <html><body><section><div><div><div><p>
1115 "With the lock and pencil icons, you can choose whether each message will be "
1116 "encrypted, signed, both, or neither."
1119 #. type: Content of: <html><body><section><div><div><div><h3>
1120 msgid "<em>Step 3.e</em> Receive a response"
1123 #. type: Content of: <html><body><section><div><div><div><p>
1125 "When Edward receives your email, he will use your public key (which you sent "
1126 "him in <a href=\"#step-3a\">Step 3.A</a>) to verify that your signature is "
1127 "authentic and the message you sent has not been tampered with."
1130 #. type: Content of: <html><body><section><div><div><div><p>
1132 "Edward's reply will arrive encrypted, because he prefers to use encryption "
1133 "whenever possible. If everything goes according to plan, it should say "
1134 "\"Your signature was verified.\" If your test signed email was also "
1135 "encrypted, he will mention that first."
1138 #. type: Content of: <html><body><section><div><div><h2>
1139 msgid "<em>#4</em> Learn the Web of Trust"
1142 #. type: Content of: <html><body><section><div><div><p>
1144 "Email encryption is a powerful technology, but it has a weakness; it "
1145 "requires a way to verify that a person's public key is actually theirs. "
1146 "Otherwise, there would be no way to stop an attacker from making an email "
1147 "address with your friend's name, creating keys to go with it and "
1148 "impersonating your friend. That's why the free software programmers that "
1149 "developed email encryption created keysigning and the Web of Trust."
1152 #. type: Content of: <html><body><section><div><div><p>
1154 "When you sign someone's key, you are publicly saying that you've verified "
1155 "that it belongs to them and not someone else."
1158 #. type: Content of: <html><body><section><div><div><p>
1160 "Signing keys and signing messages use the same type of mathematical "
1161 "operation, but they carry very different implications. It's a good practice "
1162 "to generally sign your email, but if you casually sign people's keys, you "
1163 "may accidently end up vouching for the identity of an imposter."
1166 #. type: Content of: <html><body><section><div><div><p>
1168 "People who use your public key can see who has signed it. Once you've used "
1169 "GnuPG for a long time, your key may have hundreds of signatures. You can "
1170 "consider a key to be more trustworthy if it has many signatures from people "
1171 "that you trust. The Web of Trust is a constellation of GnuPG users, "
1172 "connected to each other by chains of trust expressed through signatures."
1175 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1176 msgid "Section 4: Web of Trust"
1179 #. type: Content of: <html><body><section><div><div><div><h3>
1180 msgid "<em>Step 4.a</em> Sign a key"
1183 #. type: Content of: <html><body><section><div><div><div><p>
1184 msgid "In your email program's menu, go to Enigmail → Key Management."
1187 #. type: Content of: <html><body><section><div><div><div><p>
1189 "Right click on Edward's public key and select Sign Key from the context menu."
1192 #. type: Content of: <html><body><section><div><div><div><p>
1193 msgid "In the window that pops up, select \"I will not answer\" and click ok."
1196 #. type: Content of: <html><body><section><div><div><div><p>
1198 "Now you should be back at the Key Management menu. Select Keyserver → "
1199 "Upload Public Keys and hit ok."
1202 #. type: Content of: <html><body><section><div><div><div><p>
1204 "You've just effectively said \"I trust that Edward's public key actually "
1205 "belongs to Edward.\" This doesn't mean much because Edward isn't a real "
1206 "person, but it's good practice."
1209 #. type: Content of: <html><body><section><div><div><div><h3>
1210 msgid "Identifying keys: Fingerprints and IDs"
1213 #. type: Content of: <html><body><section><div><div><div><p>
1215 "People's public keys are usually identified by their key fingerprint, which "
1216 "is a string of digits like F357AA1A5B1FA42CFD9FE52A9FF2194CC09A61E8 (for "
1217 "Edward's key). You can see the fingerprint for your public key, and other "
1218 "public keys saved on your computer, by going to Enigmail → Key "
1219 "Management in your email program's menu, then right clicking on the key and "
1220 "choosing Key Properties. It's good practice to share your fingerprint "
1221 "wherever you share your email address, so that people can double-check that "
1222 "they have the correct public key when they download yours from a keyserver."
1225 #. type: Content of: <html><body><section><div><div><div><p>
1227 "You may also see public keys referred to by a shorter key ID. This key ID is "
1228 "visible directly from the Key Management window. These eight character key "
1229 "IDs were previously used for identification, which used to be safe, but is "
1230 "no longer reliable. You need to check the full fingerprint as part of "
1231 "verifying you have the correct key for the person you are trying to contact. "
1232 "Spoofing, in which someone intentionally generates a key with a fingerprint "
1233 "whose final eight characters are the same as another, is unfortunately "
1237 #. type: Content of: <html><body><section><div><div><div><h3>
1238 msgid "<em>Important:</em> What to consider when signing keys"
1241 #. type: Content of: <html><body><section><div><div><div><p>
1243 "Before signing a person's key, you need to be confident that it actually "
1244 "belongs to them, and that they are who they say they are. Ideally, this "
1245 "confidence comes from having interactions and conversations with them over "
1246 "time, and witnessing interactions between them and others. Whenever signing "
1247 "a key, ask to see the full public key fingerprint, and not just the shorter "
1248 "key ID. If you feel it's important to sign the key of someone you've just "
1249 "met, also ask them to show you their government identification, and make "
1250 "sure the name on the ID matches the name on the public key. In Enigmail, "
1251 "answer honestly in the window that pops up and asks \"How carefully have you "
1252 "verified that the key you are about to sign actually belongs to the person"
1253 "(s) named above?\""
1256 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
1257 msgid "Master the Web of Trust"
1260 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1262 "Unfortunately, trust does not spread between users the way <a href=\"http://"
1263 "fennetic.net/irc/finney.org/~hal/web_of_trust.html\">many people think</a>. "
1264 "One of best ways to strengthen the GnuPG community is to deeply <a href="
1265 "\"https://www.gnupg.org/gph/en/manual/x334.html\">understand</a> the Web of "
1266 "Trust and to carefully sign as many people's keys as circumstances permit."
1269 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
1270 msgid "Set ownertrust"
1273 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1275 "If you trust someone enough to validate other people's keys, you can assign "
1276 "them an ownertrust level through Enigmails's key management window. Right "
1277 "click on the other person's key, go to the \"Select Owner Trust\" menu "
1278 "option, select the trustlevel and click OK. Only do this once you feel you "
1279 "have a deep understanding of the Web of Trust."
1282 #. type: Content of: <html><body><section><div><div><h2>
1283 msgid "<em>#5</em> Use it well"
1286 #. type: Content of: <html><body><section><div><div><p>
1288 "Everyone uses GnuPG a little differently, but it's important to follow some "
1289 "basic practices to keep your email secure. Not following them, you risk the "
1290 "privacy of the people you communicate with, as well as your own, and damage "
1294 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1295 msgid "Section 5: Use it Well (1)"
1298 #. type: Content of: <html><body><section><div><div><div><h3>
1299 msgid "When should I encrypt? When should I sign?"
1302 #. type: Content of: <html><body><section><div><div><div><p>
1304 "The more you can encrypt your messages, the better. If you only encrypt "
1305 "emails occasionally, each encrypted message could raise a red flag for "
1306 "surveillance systems. If all or most of your email is encrypted, people "
1307 "doing surveillance won't know where to start. That's not to say that only "
1308 "encrypting some of your email isn't helpful -- it's a great start and it "
1309 "makes bulk surveillance more difficult."
1312 #. type: Content of: <html><body><section><div><div><div><p>
1314 "Unless you don't want to reveal your own identity (which requires other "
1315 "protective measures), there's no reason not to sign every message, whether "
1316 "or not you are encrypting. In addition to allowing those with GnuPG to "
1317 "verify that the message came from you, signing is a non-intrusive way to "
1318 "remind everyone that you use GnuPG and show support for secure "
1319 "communication. If you often send signed messages to people that aren't "
1320 "familiar with GnuPG, it's nice to also include a link to this guide in your "
1321 "standard email signature (the text kind, not the cryptographic kind)."
1324 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1325 msgid "Section 5: Use it Well (2)"
1328 #. type: Content of: <html><body><section><div><div><div><h3>
1329 msgid "Be wary of invalid keys"
1332 #. type: Content of: <html><body><section><div><div><div><p>
1334 "GnuPG makes email safer, but it's still important to watch out for invalid "
1335 "keys, which might have fallen into the wrong hands. Email encrypted with "
1336 "invalid keys might be readable by surveillance programs."
1339 #. type: Content of: <html><body><section><div><div><div><p>
1341 "In your email program, go back to the first encrypted email that Edward sent "
1342 "you. Because Edward encrypted it with your public key, it will have a "
1343 "message from Enigmail at the top, which most likely says \"Enigmail: Part of "
1344 "this message encrypted.\""
1347 #. type: Content of: <html><body><section><div><div><div><p>
1349 "<b>When using GnuPG, make a habit of glancing at that bar. The program will "
1350 "warn you there if you get an email signed with a key that can't be trusted.</"
1354 #. type: Content of: <html><body><section><div><div><div><h3>
1355 msgid "Copy your revocation certificate to somewhere safe"
1358 #. type: Content of: <html><body><section><div><div><div><p>
1360 "Remember when you created your keys and saved the revocation certificate "
1361 "that GnuPG made? It's time to copy that certificate onto the safest digital "
1362 "storage that you have -- the ideal thing is a flash drive, disk, or hard "
1363 "drive stored in a safe place in your home, not on a device you carry with "
1367 #. type: Content of: <html><body><section><div><div><div><p>
1369 "If your private key ever gets lost or stolen, you'll need this certificate "
1370 "file to let people know that you are no longer using that keypair."
1373 #. type: Content of: <html><body><section><div><div><div><h3>
1374 msgid "<em>Important:</em> act swiftly if someone gets your private key"
1377 #. type: Content of: <html><body><section><div><div><div><p>
1379 "If you lose your private key or someone else gets ahold of it (say, by "
1380 "stealing or cracking your computer), it's important to revoke it immediately "
1381 "before someone else uses it to read your encrypted email or forge your "
1382 "signature. This guide doesn't cover how to revoke a key, but you can follow "
1383 "these <a href=\"https://www.hackdiary.com/2004/01/18/revoking-a-gpg-key/"
1384 "\">instructions</a>. After you're done revoking, make a new key and send an "
1385 "email to everyone with whom you usually use your key to make sure they know, "
1386 "including a copy of your new key."
1389 #. type: Content of: <html><body><section><div><div><div><h3>
1390 msgid "Webmail and GnuPG"
1393 #. type: Content of: <html><body><section><div><div><div><p>
1395 "When you use a web browser to access your email, you're using webmail, an "
1396 "email program stored on a distant website. Unlike webmail, your desktop "
1397 "email program runs on your own computer. Although webmail can't decrypt "
1398 "encrypted email, it will still display it in its encrypted form. If you "
1399 "primarily use webmail, you'll know to open your email client when you "
1400 "receive a scrambled email."
1403 #. type: Content of: <html><body><section><div><div><h2>
1404 msgid "<a href=\"next_steps.html\">Great job! Check out the next steps.</a>"
1407 #. type: Content of: <html><body><header><div><p>
1408 msgid "← Read the <a href=\"index.html\">full guide</a>"
1411 #. type: Content of: <html><body><header><div><h3><a>
1413 "<a href=\"https://fsf.org/share?u=https://u.fsf.org/zc&t=How public-"
1414 "key encryption works. Infographic via %40fsf\">"
1417 #. type: Content of: <html><body><header><div><h3>
1418 msgid " Share our infographic </a> with the hashtag #EmailSelfDefense"
1421 #. type: Attribute 'alt' of: <html><body><header><div><p><img>
1422 msgid "View & share our infographic"
1425 #. type: Content of: <html><body><header><div><ul><li>
1426 msgid "<a href=\"index.html\">GNU/Linux</a>"
1429 #. type: Content of: <html><body><header><div><ul><li>
1430 msgid "<a href=\"mac.html\" class=\"current\">Mac OS</a>"
1433 #. type: Content of: <html><body><section><div><div><p>
1435 "This guide relies on software which is <a href=\"https://www.gnu.org/"
1436 "philosophy/free-sw.html\">freely licensed</a>; it's completely transparent "
1437 "and anyone can copy it or make their own version. This makes it safer from "
1438 "surveillance than proprietary software (like Mac OS). To defend your freedom "
1439 "as well as protect yourself from surveillance, we recommend you switch to a "
1440 "free software operating system like GNU/Linux. Learn more about free "
1441 "software at <a href=\"https://u.fsf.org/ys\">fsf.org</a>."
1444 #. type: Content of: <html><body><section><div><div><p>
1446 "To get started, you'll need the IceDove desktop email program installed on "
1447 "your computer. For your system, IceDove may be known by the alternate name "
1448 "\"Thunderbird.\" Email programs are another way to access the same email "
1449 "accounts you can access in a browser (like Gmail), but provide extra "
1453 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1455 "You can launch the wizard yourself, but the menu option for doing so is "
1456 "named differently in each email programs. The button to launch it will be in "
1457 "the program's main menu, under \"New\" or something similar, titled "
1458 "something like \"Add account\" or \"New/Existing email account.\""
1461 #. type: Content of: <html><body><section><div><div><div><h3>
1462 msgid "<em>Step 1.b</em> Get GnuPG by downloading GPGTools"
1465 #. type: Content of: <html><body><section><div><div><div><p>
1467 "GPGTools is a software package that includes GnuPG. <a href=\"https://"
1468 "gpgtools.org/#gpgsuite\">Download</a> and install it, choosing default "
1469 "options whenever asked. After it's installed, you can close any windows that "
1473 #. type: Content of: <html><body><section><div><div><div><p>
1475 "There are major security flaws in versions of GnuPG provided by GPGTools "
1476 "prior to 2018.3. Make sure you have GPGTools 2018.3 or later."
1479 #. type: Attribute 'alt' of: <html><body><section><div><div><div><ul><li><img>
1480 msgid "Step 1.C: Tools -> Add-ons"
1483 #. type: Attribute 'alt' of: <html><body><section><div><div><div><ul><li><img>
1484 msgid "Step 1.C: Search Add-ons"
1487 #. type: Attribute 'alt' of: <html><body><section><div><div><div><ul><li><img>
1488 msgid "Step 1.C: Install Add-ons"
1491 #. type: Content of: <html><body><section><div><div><div><h3>
1492 msgid "<em>Step 1.c</em> Install the Enigmail plugin for your email program"
1495 #. type: Content of: <html><body><section><div><div><div><p>
1497 "There are major security flaws in Enigmail prior to version 2.0.7. Make sure "
1498 "you have Enigmail 2.0.7 or later."
1501 #. type: Content of: <html><body><section><div><div><div><p>
1503 "For greater security against potential attacks, you can turn off HTML. "
1504 "Instead, you can render the message body as plain text."
1507 #. type: Content of: <html><body><header><div><h1>
1511 #. type: Content of: <html><body><section><div><div><h2>
1512 msgid "<em>#6</em> Next steps"
1515 #. type: Content of: <html><body><section><div><div><p>
1517 "You've now completed the basics of email encryption with GnuPG, taking "
1518 "action against bulk surveillance. These next steps will help make the most "
1519 "of the work you've done."
1522 #. type: Content of: <html><body><section><div><div><div><h3>
1523 msgid "Join the movement"
1526 #. type: Content of: <html><body><section><div><div><div><p>
1528 "You've just taken a huge step towards protecting your privacy online. But "
1529 "each of us acting alone isn't enough. To topple bulk surveillance, we need "
1530 "to build a movement for the autonomy and freedom of all computer users. Join "
1531 "the Free Software Foundation's community to meet like-minded people and work "
1532 "together for change."
1535 #. type: Content of: <html><body><section><div><div><div><p>
1537 "<small>Read <a href=\"https://www.fsf.org/twitter\">why GNU Social and Pump."
1538 "io are better than Twitter</a>, and <a href=\"http://www.fsf.org/facebook"
1539 "\">why we don't use Facebook</a>.</small>"
1542 #. type: Content of: <html><body><section><div><div><div><div><p>
1543 msgid "Low-volume mailing list"
1546 #. type: Content of: <html><body><section><div><div><div><div><form>
1548 "<input type=\"text\" placeholder=\"Type your email...\" name=\"email-Primary"
1549 "\" id=\"frmEmail\" /> <input type=\"submit\" value=\"Add me\" name="
1550 "\"_qf_Edit_next\" /> <input type=\"hidden\" value=\"https://emailselfdefense."
1551 "fsf.org/en/confirmation.html\" name=\"postURL\" /> <input type=\"hidden\" "
1552 "value=\"1\" name=\"group[25]\" /> <input type=\"hidden\" value=\"https://my."
1553 "fsf.org/civicrm/profile?reset=1&gid=391\" name=\"cancelURL\" /> <input "
1554 "type=\"hidden\" value=\"Edit:cancel\" name=\"_qf_default\" />"
1557 #. type: Content of: <html><body><section><div><div><div><div><p>
1559 "<small>Read our <a href=\"https://my.fsf.org/donate/privacypolicy.html"
1560 "\">privacy policy</a>.</small>"
1563 #. type: Content of: <html><body><section><div><div><div><h3>
1564 msgid "Bring Email Self-Defense to new people"
1567 #. type: Content of: <html><body><section><div><div><div><p>
1569 "Understanding and setting up email encryption is a daunting task for many. "
1570 "To welcome them, make it easy to find your public key and offer to help with "
1571 "encryption. Here are some suggestions:"
1574 #. type: Content of: <html><body><section><div><div><div><ul><li>
1576 "Lead an Email Self-Defense workshop for your friends and community, using "
1577 "our <a href=\"workshops.html\">teaching guide</a>."
1580 #. type: Content of: <html><body><section><div><div><div><ul><li>
1582 "Use <a href=\"https://fsf.org/share?u=https://u.fsf.org/zb&t=Encrypt "
1583 "with me using Email Self-Defense %40fsf\">our sharing page</a> to compose a "
1584 "message to a few friends and ask them to join you in using encrypted email. "
1585 "Remember to include your GnuPG public key fingerprint so they can easily "
1586 "download your key."
1589 #. type: Content of: <html><body><section><div><div><div><ul><li>
1591 "Add your public key fingerprint anywhere that you normally display your "
1592 "email address. Some good places are: your email signature (the text kind, "
1593 "not the cryptographic kind), social media profiles, blogs, Websites, or "
1594 "business cards. At the Free Software Foundation, we put ours on our <a href="
1595 "\"https://fsf.org/about/staff\">staff page</a>."
1598 #. type: Content of: <html><body><section><div><div><div><h3>
1599 msgid "Protect more of your digital life"
1602 #. type: Content of: <html><body><section><div><div><div><p>
1604 "Learn surveillance-resistant technologies for instant messages, hard drive "
1605 "storage, online sharing, and more at <a href=\"https://directory.fsf.org/"
1606 "wiki/Collection:Privacy_pack\"> the Free Software Directory's Privacy Pack</"
1607 "a> and <a href=\"https://prism-break.org\">prism-break.org</a>."
1610 #. type: Content of: <html><body><section><div><div><div><p>
1612 "If you are using Windows, Mac OS or any other proprietary operating system, "
1613 "we recommend you switch to a free software operating system like GNU/Linux. "
1614 "This will make it much harder for attackers to enter your computer through "
1615 "hidden back doors. Check out the Free Software Foundation's <a href=\"http://"
1616 "www.gnu.org/distros/free-distros.html\">endorsed versions of GNU/Linux.</a>"
1619 #. type: Content of: <html><body><section><div><div><div><h3>
1620 msgid "Optional: Add more email protection with Tor"
1623 #. type: Content of: <html><body><section><div><div><div><p>
1625 "<a href=\"https://www.torproject.org/about/overview.html.en\">The Onion "
1626 "Router (Tor) network</a> wraps Internet communication in multiple layers of "
1627 "encryption and bounces it around the world several times. When used "
1628 "properly, Tor confuses surveillance field agents and the global surveillance "
1629 "apparatus alike. Using it simultaneously with GnuPG's encryption will give "
1630 "you the best results."
1633 #. type: Content of: <html><body><section><div><div><div><p>
1635 "To have your email program send and receive email over Tor, install the <a "
1636 "href=\"https://addons.mozilla.org/en-us/thunderbird/addon/torbirdy/"
1637 "\">Torbirdy plugin</a> the same way you installed Enigmail, by searching for "
1638 "it through Add-ons."
1641 #. type: Content of: <html><body><section><div><div><div><p>
1643 "Before beginning to check your email over Tor, make sure you understand <a "
1644 "href=\"https://www.torproject.org/docs/faq.html."
1645 "en#WhatProtectionsDoesTorProvide\">the security tradeoffs involved</a>. This "
1646 "<a href=\"https://www.eff.org/pages/tor-and-https\">infographic</a> from our "
1647 "friends at the Electronic Frontier Foundation demonstrates how Tor keeps you "
1651 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1652 msgid "Section 6: Next Steps"
1655 #. type: Content of: <html><body><section><div><div><div><p>
1656 msgid "← <a href=\"index.html\">Return to the guide</a>"
1659 #. type: Content of: <html><body><section><div><div><div><h3>
1660 msgid "Make Email Self-Defense tools even better"
1663 #. type: Content of: <html><body><section><div><div><div><p>
1665 "<a href=\"https://libreplanet.org/wiki/GPG_guide/Public_Review\">Leave "
1666 "feedback and suggest improvements to this guide</a>. We welcome "
1667 "translations, but we ask that you contact us at <a href=\"mailto:"
1668 "campaigns@fsf.org\">campaigns@fsf.org</a> before you start, so that we can "
1669 "connect you with other translators working in your language."
1672 #. type: Content of: <html><body><section><div><div><div><p>
1674 "If you like programming, you can contribute code to <a href=\"https://www."
1675 "gnupg.org/\">GnuPG</a> or <a href=\"https://www.enigmail.net/home/index.php"
1679 #. type: Content of: <html><body><section><div><div><div><p>
1681 "To go the extra mile, support the Free Software Foundation so we can keep "
1682 "improving Email Self-Defense, and make more tools like it."
1685 #. type: Content of: <html><body><header><div><ul><li>
1686 msgid "<a href=\"windows.html\" class=\"current\">Windows</a>"
1689 #. type: Content of: <html><body><section><div><div><p>
1691 "This guide relies on software which is <a href=\"https://www.gnu.org/"
1692 "philosophy/free-sw.html\">freely licensed</a>; it's completely transparent "
1693 "and anyone can copy it or make their own version. This makes it safer from "
1694 "surveillance than proprietary software (like Windows). To defend your "
1695 "freedom as well as protect yourself from surveillance, we recommend you "
1696 "switch to a free software operating system like GNU/Linux. Learn more about "
1697 "free software at <a href=\"https://u.fsf.org/ys\">fsf.org</a>."
1700 #. type: Content of: <html><body><section><div><div><div><h3>
1701 msgid "<em>Step 1.b</em> Get GnuPG by downloading GPG4Win"
1704 #. type: Content of: <html><body><section><div><div><div><p>
1706 "GPG4Win is a software package that includes GnuPG. <a href=\"https://www."
1707 "gpg4win.org/\">Download</a> and install it, choosing default options "
1708 "whenever asked. After it's installed, you can close any windows that it "
1712 #. type: Content of: <html><body><section><div><div><div><p>
1714 "There are major security flaws in versions of GnuPG provided by GPG4Win "
1715 "prior to 3.1.2. Make sure you have GPG4Win 3.1.2 or later."
1718 #. type: Content of: <html><head><title>
1719 msgid "Email Self-Defense - Teach your friends!"
1722 #. type: Content of: <html><body><header><div><ul><li>
1723 msgid "<a href=\"workshops.html\" class=\"current\">Teach your friends</a>"
1726 #. type: Content of: <html><body><header><div><div><div><p>
1728 "We want to translate this guide into more languages, and make a version for "
1729 "encryption on mobile devices. Please donate, and help people around the "
1730 "world take the first step towards protecting their privacy with free "
1734 #. type: Content of: <html><body><header><div><div><p><a>
1736 "<a id=\"infographic\" href=\"https://emailselfdefense.fsf.org/en/infographic."
1740 #. type: Attribute 'alt' of: <html><body><header><div><div><p><a><img>
1741 msgid "View & share our infographic →"
1744 #. type: Content of: <html><body><header><div><div><p>
1746 "</a> Understanding and setting up email encryption sounds like a daunting "
1747 "task to many people. That's why helping your friends with GnuPG plays such "
1748 "an important role in helping spread encryption. Even if only one person "
1749 "shows up, that's still one more person using encryption who wasn't before. "
1750 "You have the power to help your friends keep their digital love letters "
1751 "private, and teach them about the importance of free software. If you use "
1752 "GnuPG to send and receive encrypted email, you're a perfect candidate for "
1753 "leading a workshop!"
1756 #. type: Attribute 'alt' of: <html><body><section><div><div><p><img>
1757 msgid "A small workshop among friends"
1760 #. type: Content of: <html><body><section><div><div><h2>
1761 msgid "<em>#1</em> Get your friends or community interested"
1764 #. type: Content of: <html><body><section><div><div><p>
1766 "If you hear friends grumbling about their lack of privacy, ask them if "
1767 "they're interested in attending a workshop on Email Self-Defense. If your "
1768 "friends don't grumble about privacy, they may need some convincing. You "
1769 "might even hear the classic \"if you've got nothing to hide, you've got "
1770 "nothing to fear\" argument against using encryption."
1773 #. type: Content of: <html><body><section><div><div><p>
1775 "Here are some talking points you can use to help explain why it's worth it "
1776 "to learn GnuPG. Mix and match whichever you think will make sense to your "
1780 #. type: Content of: <html><body><section><div><div><div><h3>
1781 msgid "Strength in numbers"
1784 #. type: Content of: <html><body><section><div><div><div><p>
1786 "Each person who chooses to resist mass surveillance with encryption makes it "
1787 "easier for others to resist as well. People normalizing the use of strong "
1788 "encryption has multiple powerful effects: it means those who need privacy "
1789 "the most, like potential whistle-blowers and activists, are more likely to "
1790 "learn about encryption. More people using encryption for more things also "
1791 "makes it harder for surveillance systems to single out those that can't "
1792 "afford to be found, and shows solidarity with those people."
1795 #. type: Content of: <html><body><section><div><div><div><h3>
1796 msgid "People you respect may already be using encryption"
1799 #. type: Content of: <html><body><section><div><div><div><p>
1801 "Many journalists, whistleblowers, activists, and researchers use GnuPG, so "
1802 "your friends might unknowingly have heard of a few people who use it "
1803 "already. You can search for \"BEGIN PUBLIC KEY BLOCK\" + keyword to help "
1804 "make a list of people and organizations who use GnuPG whom your community "
1805 "will likely recognize."
1808 #. type: Content of: <html><body><section><div><div><div><h3>
1809 msgid "Respect your friends' privacy"
1812 #. type: Content of: <html><body><section><div><div><div><p>
1814 "There's no objective way to judge what constitutes privacy-sensitive "
1815 "correspondence. As such, it's better not to presume that just because you "
1816 "find an email you sent to a friend innocuous, your friend (or a surveillance "
1817 "agent, for that matter!) feels the same way. Show your friends respect by "
1818 "encrypting your correspondence with them."
1821 #. type: Content of: <html><body><section><div><div><div><h3>
1822 msgid "Privacy technology is normal in the physical world"
1825 #. type: Content of: <html><body><section><div><div><div><p>
1827 "In the physical realm, we take window blinds, envelopes, and closed doors "
1828 "for granted as ways of protecting our privacy. Why should the digital realm "
1832 #. type: Content of: <html><body><section><div><div><div><h3>
1833 msgid "We shouldn't have to trust our email providers with our privacy"
1836 #. type: Content of: <html><body><section><div><div><div><p>
1838 "Some email providers are very trustworthy, but many have incentives not to "
1839 "protect your privacy and security. To be empowered digital citizens, we need "
1840 "to build our own security from the bottom up."
1843 #. type: Content of: <html><body><section><div><div><h2>
1844 msgid "<em>#2</em> Plan The Workshop"
1847 #. type: Content of: <html><body><section><div><div><p>
1849 "Once you've got at least one interested friend, pick a date and start "
1850 "planning out the workshop. Tell participants to bring their computer and ID "
1851 "(for signing each other's keys). If you'd like to make it easy for the "
1852 "participants to use Diceware for choosing passwords, get a pack of dice "
1853 "beforehand. Make sure the location you select has an easily accessible "
1854 "Internet connection, and make backup plans in case the connection stops "
1855 "working on the day of the workshop. Libraries, coffee shops, and community "
1856 "centers make great locations. Try to get all the participants to set up an "
1857 "Enigmail-compatible email client before the event. Direct them to their "
1858 "email provider's IT department or help page if they run into errors."
1861 #. type: Content of: <html><body><section><div><div><p>
1863 "Estimate that the workshop will take at least forty minutes plus ten minutes "
1864 "for each participant. Plan extra time for questions and technical glitches."
1867 #. type: Content of: <html><body><section><div><div><p>
1869 "The success of the workshop requires understanding and catering to the "
1870 "unique backgrounds and needs of each group of participants. Workshops should "
1871 "stay small, so that each participant receives more individualized "
1872 "instruction. If more than a handful of people want to participate, keep the "
1873 "facilitator to participant ratio high by recruiting more facilitators, or by "
1874 "facilitating multiple workshops. Small workshops among friends work great!"
1877 #. type: Content of: <html><body><section><div><div><h2>
1878 msgid "<em>#3</em> Follow the guide as a group"
1881 #. type: Content of: <html><body><section><div><div><p>
1883 "Work through the Email Self-Defense guide a step at a time as a group. Talk "
1884 "about the steps in detail, but make sure not to overload the participants "
1885 "with minutia. Pitch the bulk of your instructions to the least tech-savvy "
1886 "participants. Make sure all the participants complete each step before the "
1887 "group moves on to the next one. Consider facilitating secondary workshops "
1888 "afterwards for people that had trouble grasping the concepts, or those that "
1889 "grasped them quickly and want to learn more."
1892 #. type: Content of: <html><body><section><div><div><p>
1894 "In <a href=\"index.html#section2\">Section 2</a> of the guide, make sure the "
1895 "participants upload their keys to the same keyserver so that they can "
1896 "immediately download each other's keys later (sometimes there is a delay in "
1897 "synchronization between keyservers). During <a href=\"index."
1898 "html#section3\">Section 3</a>, give the participants the option to send test "
1899 "messages to each other instead of or as well as Edward. Similarly, in <a "
1900 "href=\"index.html#section4\">Section 4</a>, encourage the participants to "
1901 "sign each other's keys. At the end, make sure to remind people to safely "
1902 "back up their revocation certificates."
1905 #. type: Content of: <html><body><section><div><div><h2>
1906 msgid "<em>#4</em> Explain the pitfalls"
1909 #. type: Content of: <html><body><section><div><div><p>
1911 "Remind participants that encryption works only when it's explicitly used; "
1912 "they won't be able to send an encrypted email to someone who hasn't already "
1913 "set up encryption. Also remind participants to double-check the encryption "
1914 "icon before hitting send, and that subjects and timestamps are never "
1918 #. type: Content of: <html><body><section><div><div><p>
1920 "Explain the <a href=\"https://www.gnu.org/proprietary/proprietary.html"
1921 "\">dangers of running a proprietary system</a> and advocate for free "
1922 "software, because without it, we can't <a href=\"https://www.fsf.org/"
1923 "bulletin/2013/fall/how-can-free-software-protect-us-from-surveillance"
1924 "\">meaningfully resist invasions of our digital privacy and autonomy</a>."
1927 #. type: Content of: <html><body><section><div><div><h2>
1928 msgid "<em>#5</em> Share additional resources"
1931 #. type: Content of: <html><body><section><div><div><p>
1933 "GnuPG's advanced options are far too complex to teach in a single workshop. "
1934 "If participants want to know more, point out the advanced subsections in the "
1935 "guide and consider organizing another workshop. You can also share <a href="
1936 "\"https://www.gnupg.org/documentation/index.html\">GnuPG's</a> and <a href="
1937 "\"https://www.enigmail.net/documentation/index.php\">Enigmail's</a> official "
1938 "documentation and mailing lists. Many GNU/Linux distribution's Web sites "
1939 "also contain a page explaining some of GnuPG's advanced features."
1942 #. type: Content of: <html><body><section><div><div><h2>
1943 msgid "<em>#6</em> Follow up"
1946 #. type: Content of: <html><body><section><div><div><p>
1948 "Make sure everyone has shared email addresses and public key fingerprints "
1949 "before they leave. Encourage the participants to continue to gain GnuPG "
1950 "experience by emailing each other. Send them each an encrypted email one "
1951 "week after the event, reminding them to try adding their public key ID to "
1952 "places where they publicly list their email address."
1955 #. type: Content of: <html><body><section><div><div><p>
1957 "If you have any suggestions for improving this workshop guide, please let us "
1958 "know at <a href=\"mailto:campaigns@fsf.org\">campaigns@fsf.org</a>."