From: zoe1 Date: Wed, 14 Jul 2021 20:18:55 +0000 (+0200) Subject: warning resolves X-Git-Url: https://vcs.fsf.org/?a=commitdiff_plain;h=35f08087d25334a7b2b04bc9e25d3993bd59f116;p=enc-live.git warning resolves --- diff --git a/en/index.html b/en/index.html index bcf48ec..c31f545 100644 --- a/en/index.html +++ b/en/index.html @@ -623,9 +623,9 @@ page.
Use a third-party package manager to install GnuPG
-
Your macOS comes with a program called "Terminal" pre-installed, which we'll use to set up your encryption with GnuPG, using the command line. However, the default macOS package manager makes it difficult to install GnuPG and other pieces of free software (like Emacs, GIMP, or Inkscape).

-To make things easier, we recommend setting up the third-party package manager "Homebrew" to install GnuPG. Copy the link on the home page of Homebrew and paste it in Terminal. Click "Enter" and wait for it to finalize.

-When it is done, install the program by entering the following code in Terminal:

+
Your macOS comes with a program called "Terminal" pre-installed, which we'll use to set up your encryption with GnuPG, using the command line. However, the default macOS package manager makes it difficult to install GnuPG and other pieces of free software (like Emacs, GIMP, or Inkscape).
+To make things easier, we recommend setting up the third-party package manager "Homebrew" to install GnuPG. Copy the link on the home page of Homebrew and paste it in Terminal. Click "Enter" and wait for it to finalize.
+When it is done, install the program by entering the following code in Terminal:
brew install gnupg gnupg2. After installation is done, you can follow the steps of the rest of this guide.
@@ -638,7 +638,7 @@ When it is done, install the program by entering the following code in Terminal:
Get GnuPG by downloading GPG4Win
-
GPG4Win is a email and file encryption software package that includes GnuPG. Download and install the latest version, choosing default options whenever asked. After it's installed, you can close any windows that it creates.

+
GPG4Win is a email and file encryption software package that includes GnuPG. Download and install the latest version, choosing default options whenever asked. After it's installed, you can close any windows that it creates.

To follow the rest of the steps in this guide, you'll use the program called "PowerShell", which is a program you'll see elsewhere referred to as a "terminal." This allows you to operate your computer using the command line.

@@ -702,7 +702,7 @@ discuss this more in the next section.

+alt="Step 2.A: Make your Keypair" />


Use the following command to export your secret key so you can import it into your email client at the next step. To avoid getting your key compromised, store this in a safe place, and make sure that if it is transferred, it is done so in a trusted way. Exporting your keys can be done with the following commands:

-

$ gpg --export-secret-keys -a keyid > my_secret_key.asc

-

$ gpg --export -a keyid > my_public_key.asc

- +$ gpg --export-secret-keys -a keyid > my_secret_key.asc
+$ gpg --export -a keyid > my_public_key.asc
+

@@ -848,14 +848,15 @@ takes a few hours for them to match each other when a new key is uploaded.

My key doesn't seem to be working or I get a "permission denied."
-
Like every other file or folder, gpg keys are subject to permissions. If these are not set correctly, your system may not be accepting your keys. You can follow the next steps to check, and update to the right permissions.

+
Like every other file or folder, gpg keys are subject to permissions. If these are not set correctly, your system may not be accepting your keys. You can follow the next steps to check, and update to the right permissions.

-# Check your permissions: ls -l ~/.gnupg/*

-# Set permissions to read, write, execute for only yourself, no others. This is the recommended permission for your folder. You can use the code -chmod 700 ~/.gnupg.

-# Set permissions to read and write for yourself only, no others. This is the recommended permission for the keys inside your folder. You can use the code: chmod 600 ~/.gnupg/*.

+# Check your permissions: ls -l ~/.gnupg/*

+# Set permissions to read, write, execute for only yourself, no others. This is the recommended permission for your folder.
+You can use the code chmod 700 ~/.gnupg

+# Set permissions to read and write for yourself only, no others. This is the recommended permission for the keys inside your folder.
+You can use the code: chmod 600 ~/.gnupg/*

-

If you have (for any reason) created your own folders inside ~/.gnupg, you must also additionally apply execute permissions to that folder. Folders require execution privileges to be opened. For more information on permissions, you can check out this detailed information guide.

+

If you have (for any reason) created your own folders inside ~/.gnupg, you must also additionally apply execute permissions to that folder. Folders require execution privileges to be opened. For more information on permissions, you can check out this detailed information guide.

Transferring your keys
-
Use the following commands to transfer your keys. To avoid getting your key compromised, store it in a safe place, and make sure that if it is transferred, it is done so in a trusted way. Importing and exporting a key can be done with the following commands:

+
Use the following commands to transfer your keys. To avoid getting your key compromised, store it in a safe place, and make sure that if it is transferred, it is done so in a trusted way. Importing and exporting a key can be done with the following commands:
-$ gpg --export-secret-keys -a keyid > my_private_key.asc

-$ gpg --export -a keyid > my_public_key.asc

+$ gpg --export-secret-keys -a keyid > my_private_key.asc
+$ gpg --export -a keyid > my_public_key.asc
+$ gpg --import my_private_key.asc
+$ gpg --import my_public_key.asc
 +

Ensure that the keyID printed is the correct one, and if so, then go ahead and add ultimate trust for it:

-$ gpg --import my_private_key.asc

-$ gpg --import my_public_key.asc

- - -Ensure that the keyID printed is the correct one, and if so, then go ahead and add ultimate trust for it:

- -$ gpg --edit-key [your@email]

- +$ gpg --edit-key [your@email] +
Because this is your key, you should choose ultimate. You shouldn't trust anyone else's key ultimately. @@ -940,7 +938,7 @@ alt="Step 3.A: Troubleshoot" />

Step 3.a Set up your email with encryption

Once you have set up your email with encryption, you can start contributing to encrypted traffic on the Internet. First we'll get your email client to import your secret key, and we will also learn how to get other people's public keys from servers so you can send and receive encrypted email. -

# Open your email client and use "Tools" → OpenPGP Manager

+

# Open your email client and use "Tools" → OpenPGP Manager

# Under "File" → Import Secret Key(s) From File

# Select the file you saved under the name [my_secret_key.asc] in step step 3.b when you exported your key

# Unlock with your passphrase

@@ -1463,7 +1461,7 @@ of your new key.

-
@@ -1479,7 +1477,7 @@ a scrambled email.

-
@@ -1498,8 +1496,8 @@ or business card. (At the Free Software Foundation, we put ours on our culture to the point that we feel like something is missing when we see an email address without a public key fingerprint.

-
--> +
+