X-Git-Url: https://vcs.fsf.org/?a=blobdiff_plain;f=en%2Fwindows.html;h=febf7cdaa635052be7ba2e746e732d311e38dbb5;hb=a3a9a0acf3552b45e59872c6067832c26b83e22d;hp=374fdac0f00e3e9021fccd5b7ded53dc7ee76fa1;hpb=64f80aa291b7647c59005a9228a0abdff57a2de0;p=enc-live.git diff --git a/en/windows.html b/en/windows.html index 374fdac..febf7cd 100644 --- a/en/windows.html +++ b/en/windows.html @@ -15,7 +15,7 @@ self-defense in 40 minutes with GnuPG." /> href="//static.fsf.org/nosvn/enc-dev0/img/favicon.ico" /> - +

@@ -25,8 +25,8 @@ href="//static.fsf.org/nosvn/enc-dev0/img/favicon.ico" />

@@ -139,10 +131,10 @@ to teaching your friends.

This guide relies on software which is freely licensed; it's completely transparent and anyone can copy it or make their own version. This -makes it safer from surveillance than proprietary software (like Windows). To -defend your freedom as well as protect yourself from surveillance, we recommend -you switch to a free software operating system like GNU/Linux. Learn more -about free software at fsf.org.

+makes it safer from surveillance than proprietary software (like Windows or Mac +OS). To defend your freedom as well as protect yourself from surveillance, we +recommend you switch to a free software operating system like GNU/Linux. Learn +more about free software at fsf.org.

To get started, you'll need the IceDove desktop email program installed on your computer. For your system, IceDove may be known by the alternate name @@ -170,6 +162,15 @@ alt="Step 1.A: Install Wizard" />

Open your email program and follow the wizard (step-by-step walkthrough) that sets it up with your email account.

Look for the letters SSL, TLS, or STARTTLS to the right of the servers +when you're setting up your account. If you don't see them, you will still +be able to use encryption, but this means that the people running your email +system are running behind the industry standard in protecting your security +and privacy. We recommend that you send them a friendly email asking them +to enable SSL, TLS, or STARTTLS for your email server. They will know what +you're talking about, so it's worth making the request even if you aren't +an expert on these security systems.

@@ -178,7 +179,7 @@ that sets it up with your email account.

The wizard doesn't launch: You can launch the wizard yourself, but the menu option for doing so is -named differently in each email programs. The button to launch it will be in +named differently in each email program. The button to launch it will be in the program's main menu, under "New" or something similar, titled something like "Add account" or "New/Existing email account."

@@ -232,12 +232,15 @@ alt="Step 1.C: Install Add-ons" />

Step 1.c Install the Enigmail plugin for your email program

In your email program's menu, select Add-ons (it may be in the Tools -section). Make sure Extensions is selected on the left. Do you see Enigmail? If -so, skip this step.

+section). Make sure Extensions is selected on the left. Do you see Enigmail? +Make sure it's the latest version. If so, skip this step.

If not, search "Enigmail" with the search bar in the upper right. You can take it from here. Restart your email program when you're done.

There are major security flaws in Enigmail prior to version 2.0.7. Make +sure you have Enigmail 2.0.7 or later.

@@ -248,6 +251,13 @@ can take it from here. Restart your email program when you're done.

In many new email programs, the main menu is represented by an image of three stacked horizontal bars.

My email looks weird

Enigmail doesn't tend to play nice with HTML, which is used to format +emails, so it may disable your HTML formatting automatically. To send an +HTML-formatted email without encryption or a signature, hold down the Shift +key when you select compose. You can then write an email as if Enigmail +wasn't there.

Don't see a solution to your problem?

Please let us know on the feedback @@ -256,7 +266,7 @@ page.

+ @@ -281,7 +291,7 @@ look up your public key.

Your private key is more like a physical key, because you keep it to yourself (on your computer). You use GnuPG and your private key together to descramble encrypted emails other people send to you. You should never share you private key with anyone, under any +bold;">You should never share your private key with anyone, under any circumstances.

In addition to encryption and decryption, you can also use these keys to @@ -323,10 +333,10 @@ key pair for signing and encrypting my email."

On the screen titled "Create Key," pick a strong password! You can do it manually, or you can use the Diceware method. Doing it manually is faster but not as secure. Using Diceware takes longer and requires -dice, but creates a password that is much harder for attackers figure +dice, but creates a password that is much harder for attackers to figure out. To use it, read the section "Make a secure passphrase with Diceware" in this -article by Micah Lee.

+href="https://theintercept.com/2015/03/26/passphrases-can-memorize-attackers-cant-guess/"> +this article by Micah Lee.

If you'd like to pick a password manually, come up with something @@ -362,15 +372,8 @@ Tools.

More resources

If you're having trouble with our instructions or just want to learn more, check out Enigmail's -wiki instructions for key generation.

- -

My email looks weird

Enigmail doesn't tend to play nice with HTML, which is used to format -emails, so it may disable your HTML formatting automatically. To send an -HTML-formatted email without encryption or a signature, hold down the Shift -key when you select compose. You can then write an email as if Enigmail -wasn't there.

+href="https://www.enigmail.net/documentation/Key_Management#Generating_your_own_key_pair"> +Enigmail's wiki instructions for key generation.

Don't see a solution to your problem?

Please let us know on the

In your email program's menu, select Enigmail → Key Management.

Right click on your key and select Upload Public Keys to Keyserver. Use -the default keyserver in the popup.

Right click on your key and select Upload Public Keys to Keyserver. You +don't have to use the default keyserver. If, after research, you would like +to change to a different default keyserver, you can change that setting +manually in the Enigmail preferences.

Now someone who wants to send you an encrypted message can download your public key from the Internet. There are multiple keyservers @@ -444,8 +449,8 @@ keyserver.

Step 3.c Receive a response

When Edward receives your email, he will use his private key to decrypt -it, then use your public key (which you sent him in Step -3.A) to encrypt his reply to you.

+it, then reply to you.

It may take two or three minutes for Edward to respond. In the meantime, you might want to skip ahead and check out the Use it Well section of this guide.

When you receive Edward's email and open it, Enigmail will automatically -detect that it is encrypted with your public key, and then it will use your -private key to decrypt it.

- -

Notice the bar that Enigmail shows you above the message, with information -about the status of Edward's key.

- @@ -705,9 +705,9 @@ be encrypted, signed, both, or neither.

Step 3.e Receive a response

When Edward receives your email, he will use your public key (which you -sent him in Step 3.A) to verify that your signature -is authentic and the message you sent has not been tampered with.

When Edward receives your email, he will use your public key (which +you sent him in Step 3.A) to verify the message +you sent has not been tampered with and to encrypt his reply to you.

It may take two or three minutes for Edward to respond. In the meantime, you might want to skip ahead and check out the +

When you receive Edward's email and open it, Enigmail will +automatically detect that it is encrypted with your public key, and +then it will use your private key to decrypt it.

+ +

Notice the bar that Enigmail shows you above the message, with +information about the status of Edward's key.

+ @@ -785,10 +792,10 @@ a real person, but it's good practice.

From:From:

To:

@@ -814,15 +821,15 @@ and choosing Key Properties. It's good practice to share your fingerprint wherever you share your email address, so that people can double-check that they have the correct public key when they download yours from a keyserver.

You may also see public keys referred to by their key ID, -which is simply the last eight digits of the fingerprint, like C09A61E8 for -Edward. The key ID is visible directly from the Key Management window. This -key ID is like a person's first name (it is a useful shorthand but may not be -unique to a given key), whereas the fingerprint actually identifies the key -uniquely without the possibility of confusion. If you only have the key ID, -you can still look up the key (as well as its fingerprint), like you did in -Step 3, but if multiple options appear, you'll need the fingerprint of the -person to whom you are trying to communicate to verify which one to use.

You may also see public keys referred to by a shorter +key ID. This key ID is visible directly from the Key Management +window. These eight character key IDs were previously used for +identification, which used to be safe, but is no longer reliable. You +need to check the full fingerprint as part of verifying you have the +correct key for the person you are trying to contact. Spoofing, in +which someone intentionally generates a key with a fingerprint whose +final eight characters are the same as another, is unfortunately +common.

@@ -991,7 +998,7 @@ of your new key.

Transferring you key

You can use Enigmail's key management +href="https://www.enigmail.net/documentation/Key_Management">key management window to import and export keys. If you want to be able to read your encrypted email on a different computer, you will need to export your secret key from here. Be warned, if you transfer the key without Creative Commons Attribution 4.0 license (or later version), and the rest of it is under a Creative Commons Attribution-ShareAlike 4.0 license (or later version). Download the source -code of Edward reply bot by Andrew Engelbrecht -<sudoman@ninthfloor.org> and Josh Drake <zamnedix@gnu.org>, +href="http://agpl.fsf.org/emailselfdefense.fsf.org/edward/CURRENT/edward.tar.gz"> +source code of Edward reply bot by Andrew Engelbrecht +<andrew@engelbrecht.io> and Josh Drake <zamnedix@gnu.org>, available under the GNU Affero General Public License. Why these licenses?

@@ -1130,22 +1137,30 @@ src="//static.fsf.org/nosvn/enc-dev0/img/jplusplus.png" alt="Journalism++" />

- - + + - - - + + + + +