href="//static.fsf.org/nosvn/enc-dev0/img/favicon.ico" />
</head>
-<body><iframe src="//static.fsf.org/nosvn/banners/2021fundraiser-spring/" style="width: 100%; height: 150px; display: block; margin: 0; border: 0 none; overflow: hidden;"></iframe><div style="text-align: center; padding: 2.5px; background-color: #a94442; color:#fcf8e3;"><p>Due to Enigmail's PGP functionality being migrated into Icedove and Thunderbird, steps 2 and 3 of the guide are currently out of date.</p><p> Thank you for your patience while we're working on a new round of updates.</p></div>
+<body><iframe src="//static.fsf.org/nosvn/banners/2021fundraiser-spring/" style="width: 100%; height: 150px; display: block; margin: 0; border: 0 none; overflow: hidden;"></iframe>
+<!--<div style="text-align: center; padding: 2.5px; background-color: #a94442; color:#fcf8e3;"><p>Due to Enigmail's PGP functionality being migrated into Icedove and Thunderbird, steps 2 and 3 of the guide are currently out of date.</p><p> Thank you for your patience while we're working on a new round of updates.</p></div>-->
<!-- PLACE FUNDRAISER MODAL WINDOW HERE -->
<!-- ~~~~~~~~~ GnuPG Header and introduction text ~~~~~~~~~ -->
<header class="row" id="header"><div>
+
<h1>Email Self-Defense</h1>
<!-- Language list for browsers that do not have JS enabled -->
</div>
<p><a
-href="https://crm.fsf.org/civicrm/contribute/transact?reset=1&id=14&pk_campaign=email_self_defense&
pk_kwd=guide_donate"><img
+href="https://crm.fsf.org/civicrm/contribute/transact?reset=1&id=14&pk_campaign=email_self_defense&
mtm_kwd=guide_donate"><img
alt="Donate"
src="//static.fsf.org/nosvn/enc-dev0/img/en/donate.png" /></a></p>
<p>In addition to using encryption, standing up
to surveillance requires fighting politically for a <a
-href="http://gnu.org/philosophy/surveillance-vs-democracy.html">reduction
+href="https://gnu.org/philosophy/surveillance-vs-democracy.html">reduction
in the amount of data collected on us</a>, but the essential first step is
to protect yourself and make surveillance of your communication as difficult
as possible. This guide helps you do that. It is designed for beginners, but
href="https://www.gnu.org/philosophy/free-sw.html">freely licensed</a>;
it's completely transparent and anyone can copy it or make their
own version. This makes it safer from surveillance than proprietary
-software (like Windows). Learn more about free software at <a
+software (like Windows
or Mac OS). Learn more about free software at <a
href="https://u.fsf.org/ys">fsf.org</a>.</p>
<p>Most GNU/Linux operating systems come with GnuPG installed on them,
-so you don't have to download it. Before configuring GnuPG though, you'll
-need the IceDove desktop email program installed on your computer. Most
-GNU/Linux distributions have IceDove installed already, though it may be
-under the alternate name "Thunderbird." Email programs are another way to
-access the same email accounts you can access in a browser (like Gmail),
-but provide extra features.</p>
+so you don't have to download it. Before configuring your encryption setup with this guide, though, you'll need a desktop email program based on Thunderbird installed on your computer. Many GNU/Linux distributions have Thunderbird installed already. If you're using a [fully free distribution of GNU/Linux](https://www.gnu.org/distros/free-distros.html), we recommend installing "Icedove" instead. Programs like these are another way to access the same email accounts you can access in a browser (like Gmail), but provide extra features.</p>
<p>If you already have an email program, you can skip to <a
href="#step-1b">Step 1.b</a>.</p>
<p>Open your email program and follow the wizard (step-by-step walkthrough)
that sets it up with your email account.</p>
-<p>Look for the letters SSL, TLS, or STARTTLS to the right of the servers
-when you're setting up your account. If you don't see them, you will still
-be able to use encryption, but this means that the people running your email
-system are running behind the industry standard in protecting your security
-and privacy. We recommend that you send them a friendly email asking them
-to enable SSL, TLS, or STARTTLS for your email server. They will know what
-you're talking about, so it's worth making the request even if you aren't
-an expert on these security systems.</p>
-
<!-- ~~~~~~~~~ Troubleshooting ~~~~~~~~~ -->
<div class="troubleshooting">
</div><!-- /.sidebar -->
<div class="main">
-<h3><em>Step 1.b</em> Install the Enigmail plugin for your email program</h3>
-
-<p>In your email program's menu, select Add-ons (it may be in the Tools
-section). Make sure Extensions is selected on the left. Do you see Enigmail?
-Make sure it's the latest version. If so, skip this step.</p>
-
-<p>If not, search "Enigmail" with the search bar in the upper right. You
-can take it from here. Restart your email program when you're done.</p>
-
-<p>There are major security flaws in versions of GnuPG prior to 2.2.8, and
-Enigmail prior to 2.0.7. Make sure you have GnuPG 2.2.8 and Enigmail 2.0.7,
-or later versions.</p>
-
<!-- ~~~~~~~~~ Troubleshooting ~~~~~~~~~ -->
<div class="troubleshooting">
<dd>In many new email programs, the main menu is represented by an image of
three stacked horizontal bars.</dd>
-<dt>My email looks weird</dt>
-<dd>Enigmail doesn't tend to play nice with HTML, which is used to format
-emails, so it may disable your HTML formatting automatically. To send an
-HTML-formatted email without encryption or a signature, hold down the Shift
-key when you select compose. You can then write an email as if Enigmail
-wasn't there.</dd>
-
<dt class="feedback">Don't see a solution to your problem?</dt>
<dd class="feedback">Please let us know on the <a
href="https://libreplanet.org/wiki/GPG_guide/Public_Review">feedback
<h3><em>Step 2.a</em> Make a keypair</h3>
-<p>The Enigmail Setup wizard may start automatically. If it doesn't, select
-Enigmail → Setup Wizard from your email program's menu. You don't need
-to read the text in the window that pops up unless you'd like to, but it's
-good to read the text on the later screens of the wizard. Click Next with
-the default options selected, except in these instances, which are listed
-in the order they appear:</p>
+<p>We will use the command line to create a keypair using the gnupg program. This should be installed on your Gnu/Linux operating system.
+Open a terminal using <text style= "color:#2f5faa">ctrl + alt + t</text> and use the following code to create your keypair:</p>
-<ul>
-<li>On the screen titled "Encryption," select "Encrypt all of my messages
-by default, because privacy is critical to me."</li>
+<p><text style="color:#2f5faa">gpg --full-generate-key</text> to start the process.</p>
+<p>To answer what kind of key you would like to create, select the default option <text style="color:#2f5faa"> 1 RSA and RSA<text>.</p>
+<p>Enter the following keysize: <text style="color:#2f5faa">4096</text></p>
+<p>Choose the expiration date, we suggest <text style="color:#2f5faa">2y</text>.</p>
+<p>Follow the prompts to continue setting up with your personal details.</p>
-<li>On the screen titled "Signing," select "Don't sign my messages by
-default."</li>
+<img src="create-key.png">
-<li>On the screen titled "Key Selection," select "I want to create a new
-key pair for signing and encrypting my email."</li>
+- What does RSA mean -
+- Why the 4096 keysize -
-<li>On the screen titled "Create Key," pick a strong password! You can
+<li>On the screen titled "Passphrase," pick a strong password! You can
do it manually, or you can use the Diceware method. Doing it manually
is faster but not as secure. Using Diceware takes longer and requires
dice, but creates a password that is much harder for attackers to figure
any recognizable patterns, such as birthdays, telephone numbers, pets' names,
song lyrics, quotes from books, and so on.</p>
-<p class="notes">The program will take a little while to finish the next
-step, the "Key Creation" screen. While you wait, do something else with your
-computer, like watching a movie or browsing the Web. The more you use the
-computer at this point, the faster the key creation will go.</p>
+
<p><span style="font-weight: bold;">When the "Key Generation Completed" screen
pops up, select Generate Certificate and choose to save it in a safe place on
<h4>Troubleshooting</h4>
<dl>
+<dt>GnuPG is not installed</dt>
+<dd><p class = "notes">
+ <p>GPG is not installed. You can check if this is the case with
+ <p>gnupg --version
+ <p>If Gnupg is not installed, it would bring up the following result:
+ <p>Command 'gpg' not found, but can be installed with:
+ sudo apt install gnupg
+ <p>Then follow that command and install the program:
+ sudo apt install gnupg gnupg2</p></dd>
+
<dt>I can't find the Enigmail menu.</dt>
<dd>In many new email programs, the main menu is represented by an image
of three stacked horizontal bars. Enigmail may be inside a section called
projects / enc-live.git / commitdiff