From e6bd00f28078c1d6dbb7906d06101016bcf80a1b Mon Sep 17 00:00:00 2001 From: Zak Rogoff Date: Wed, 20 Jan 2016 13:04:55 -0500 Subject: [PATCH] Tweaks and typo fixes in step 3. --- en/index.html | 15 +++++++-------- 1 file changed, 7 insertions(+), 8 deletions(-) diff --git a/en/index.html b/en/index.html index 45c0f46..3bd8e07 100644 --- a/en/index.html +++ b/en/index.html @@ -302,7 +302,7 @@

#3 Try it out!

-

Now you'll try a test correspondence with a computer program named Edward, which knows how to use encryption. Except where noted, these are the same steps you'd follow when corresponding with a real, live person.

+

Now you'll try a test correspondence with a computer program named Edward, who knows how to use encryption. Except where noted, these are the same steps you'd follow when corresponding with a real, live person.

@@ -319,7 +319,7 @@

Address the message to edward-en@fsf.org. Put at least one word (whatever you want) in the subject and body of the email. Don't send yet.

The lock icon in the top left should be yellow, meaning encryption is -turned on. We want the this first special message to be unencrypted, so +turned on. We want this first special message to be unencrypted, so click the icon once to turn it off. The lock should become grey, with a blue dot on it (to alert you that the setting has been changed from the default). Once encryption is off, hit Send.

@@ -335,7 +335,7 @@ default). Once encryption is off, hit Send.

Step 3.b Send a test encrypted email

Write a new email in your email program, addressed to edward-en@fsf.org. Make the subject "Encryption test" or something similar and write something in the body.

-

The lock icon in the top left of the window should be closed, meaning encryption is on. This will be your default from now on.

+

The lock icon in the top left of the window should be yellow, meaning encryption is on. This will be your default from now on.

Next to the lock, you'll notice an icon of a pencil. We'll get to this in a moment.

Click Send. Enigmail will pop up a window that says "Recipients not valid, not trusted or not found."

@@ -365,7 +365,7 @@ default). Once encryption is off, hit Send.

Advanced

Encrypt messages from the command line
-
You can also encrypt and decrypt messages and files form the command line, if that's your preference. The option --armor makes the encrypted output appear in the regular character set.
+
You can also encrypt and decrypt messages and files from the command line, if that's your preference. The option --armor makes the encrypted output appear in the regular character set.
@@ -377,9 +377,7 @@ default). Once encryption is off, hit Send.

Important: Security tips

-

Even if you encrypt your email, the subject line is not encrypted, so don't put private information there. The sending and receiving addresses aren't encrypted either, so a surveillance system can still figure out who you're communicating with. Also, surveillance agents will know that you're using GnuPG, even if they can't figure out what you're saying. When you send attachments, Enigmail will give you an option of whether you want to encrypt them.

-

Encryption only works when you use it, so it's a good habit to double-check that email encryption is turned on before you hit send.

- +

Even if you encrypt your email, the subject line is not encrypted, so don't put private information there. The sending and receiving addresses aren't encrypted either, so a surveillance system can still figure out who you're communicating with. Also, surveillance agents will know that you're using GnuPG, even if they can't figure out what you're saying. When you send attachments, Enigmail will give you the choice to encrypt them or not, independent of the actual email.

@@ -402,7 +400,8 @@ default). Once encryption is off, hit Send.

Step 3.d Send a test signed email to a friend

GnuPG includes a way for you to sign messages and files, verifying that they came from you and that they weren't tampered with along the way. These signatures are stronger than their pen-and-paper cousins -- they're impossible to forge, because they're impossible to create without your private key (another reason to keep your private key safe).

-

You can sign messages to anyone (including people who haven't created their own keypair!) so it's a great way to promote GnuPG. To sign an email to a friend, click the pencil icon next to the lock icon so that it turns gold. If you sign a message, Enigmail will ask you for your password before it sends the message off. It will do this every time it needs to use your private key.

+

You can sign messages to anyone, so it's a great way to make people aware that you use GnuPG and that they can communicate with you securely. If they don't have GnuPG, they will be able to read your message and see your signature. If they do have GnuPG, they'll also be able to verify that your signature is authentic.

+

To sign an email to a friend, click the pencil icon next to the lock icon so that it turns gold. If you sign a message, Enigmail will ask you for your password before it sends the message, because it needs to unlock your private key for signing.

When the pencil is gold but the lock is grey, the email will be signed but not encrypted. When the pencil is grey and the lock is gold, the email will be encrypted but not signed. When they're both gold, the email will be signed and encrypted.

-- 2.25.1