From: zoe Date: Fri, 2 Jul 2021 13:40:19 +0000 (+0200) Subject: changes so far X-Git-Url: https://vcs.fsf.org/?a=commitdiff_plain;h=e59c77dadf8a0e56fe637468aef0a9ec8afb3321;p=enc-live.git changes so far --- diff --git a/en/confirmation.html b/en/confirmation.html index 27d7594..ffe2a6e 100644 --- a/en/confirmation.html +++ b/en/confirmation.html @@ -4,7 +4,7 @@ Email Self-Defense - a guide to fighting surveillance with GnuPG encryption - href="//static.fsf.org/nosvn/enc-dev0/img/favicon.ico" /> -

Due to Enigmail's PGP functionality being migrated into Icedove and Thunderbird, steps 2 and 3 of the guide are currently out of date.

Thank you for your patience while we're working on a new round of updates.

+ + @@ -439,6 +440,7 @@ window.addEventListener("keydown", function (event) {

Email Self-Defense

@@ -501,7 +503,7 @@ the world taking the first step towards protecting their privacy.

@@ -528,7 +530,7 @@ while shining light on human rights abuses, corruption and other crimes.

In addition to using encryption, standing up to surveillance requires fighting politically for a reduction +href="https://gnu.org/philosophy/surveillance-vs-democracy.html">reduction in the amount of data collected on us, but the essential first step is to protect yourself and make surveillance of your communication as difficult as possible. This guide helps you do that. It is designed for beginners, but @@ -551,16 +553,11 @@ to teaching your friends.

href="https://www.gnu.org/philosophy/free-sw.html">freely licensed; it's completely transparent and anyone can copy it or make their own version. This makes it safer from surveillance than proprietary -software (like Windows). Learn more about free software at fsf.org.

Most GNU/Linux operating systems come with GnuPG installed on them, -so you don't have to download it. Before configuring GnuPG though, you'll -need the IceDove desktop email program installed on your computer. Most -GNU/Linux distributions have IceDove installed already, though it may be -under the alternate name "Thunderbird." Email programs are another way to -access the same email accounts you can access in a browser (like Gmail), -but provide extra features.

+so you don't have to download it. Before configuring your encryption setup with this guide, though, you'll need a desktop email program based on Thunderbird installed on your computer. Many GNU/Linux distributions have Thunderbird installed already. If you're using a [fully free distribution of GNU/Linux](https://www.gnu.org/distros/free-distros.html), we recommend installing "Icedove" instead. Programs like these are another way to access the same email accounts you can access in a browser (like Gmail), but provide extra features.

If you already have an email program, you can skip to Step 1.b.

@@ -583,15 +580,6 @@ alt="Step 1.A: Install Wizard" />

Open your email program and follow the wizard (step-by-step walkthrough) that sets it up with your email account.

Look for the letters SSL, TLS, or STARTTLS to the right of the servers -when you're setting up your account. If you don't see them, you will still -be able to use encryption, but this means that the people running your email -system are running behind the industry standard in protecting your security -and privacy. We recommend that you send them a friendly email asking them -to enable SSL, TLS, or STARTTLS for your email server. They will know what -you're talking about, so it's worth making the request even if you aren't -an expert on these security systems.

@@ -633,19 +621,6 @@ alt="Step 1.B: Install Add-ons" />

Step 1.b Install the Enigmail plugin for your email program

- -

In your email program's menu, select Add-ons (it may be in the Tools -section). Make sure Extensions is selected on the left. Do you see Enigmail? -Make sure it's the latest version. If so, skip this step.

- -

If not, search "Enigmail" with the search bar in the upper right. You -can take it from here. Restart your email program when you're done.

- -

There are major security flaws in versions of GnuPG prior to 2.2.8, and -Enigmail prior to 2.0.7. Make sure you have GnuPG 2.2.8 and Enigmail 2.0.7, -or later versions.

@@ -656,13 +631,6 @@ or later versions.

In many new email programs, the main menu is represented by an image of three stacked horizontal bars.

My email looks weird

Enigmail doesn't tend to play nice with HTML, which is used to format -emails, so it may disable your HTML formatting automatically. To send an -HTML-formatted email without encryption or a signature, hold down the Shift -key when you select compose. You can then write an email as if Enigmail -wasn't there.

Don't see a solution to your problem?

Please let us know on the feedback @@ -718,24 +686,21 @@ alt="Step 2.A: Make a Keypair" />

Step 2.a Make a keypair

The Enigmail Setup wizard may start automatically. If it doesn't, select -Enigmail → Setup Wizard from your email program's menu. You don't need -to read the text in the window that pops up unless you'd like to, but it's -good to read the text on the later screens of the wizard. Click Next with -the default options selected, except in these instances, which are listed -in the order they appear:

We will use the command line to create a keypair using the gnupg program. This should be installed on your Gnu/Linux operating system. +Open a terminal using ctrl + alt + t and use the following code to create your keypair:

On the screen titled "Encryption," select "Encrypt all of my messages -by default, because privacy is critical to me."

gpg --full-generate-key to start the process.

To answer what kind of key you would like to create, select the default option 1 RSA and RSA.

Enter the following keysize: 4096

Choose the expiration date, we suggest 2y.

Follow the prompts to continue setting up with your personal details.

On the screen titled "Signing," select "Don't sign my messages by -default."

On the screen titled "Key Selection," select "I want to create a new -key pair for signing and encrypting my email."

+- What does RSA mean - +- Why the 4096 keysize - -

On the screen titled "Create Key," pick a strong password! You can +

On the screen titled "Passphrase," pick a strong password! You can do it manually, or you can use the Diceware method. Doing it manually is faster but not as secure. Using Diceware takes longer and requires dice, but creates a password that is much harder for attackers to figure @@ -751,10 +716,7 @@ punctuation symbol. Never pick a password you've used elsewhere. Don't use any recognizable patterns, such as birthdays, telephone numbers, pets' names, song lyrics, quotes from books, and so on.
-
The program will take a little while to finish the next -step, the "Key Creation" screen. While you wait, do something else with your -computer, like watching a movie or browsing the Web. The more you use the -computer at this point, the faster the key creation will go.
+
When the "Key Generation Completed" screen pops up, select Generate Certificate and choose to save it in a safe place on @@ -769,6 +731,16 @@ email self-defense, as you'll learn more about in Section
Troubleshooting

+
GnuPG is not installed
+
+
GPG is not installed. You can check if this is the case with +
gnupg --version +
If Gnupg is not installed, it would bring up the following result: +
Command 'gpg' not found, but can be installed with: + sudo apt install gnupg +
Then follow that command and install the program: + sudo apt install gnupg gnupg2
+
I can't find the Enigmail menu.

In many new email programs, the main menu is represented by an image of three stacked horizontal bars. Enigmail may be inside a section called