fr: don't show stuff outside the infographic frame.
[enc.git] / esd-temp.pot
CommitLineData
db1d71be
TG
1# SOME DESCRIPTIVE TITLE
2# Copyright (C) YEAR Free Software Foundation, Inc.
3# This file is distributed under the same license as the PACKAGE package.
eabe8a9a
TS
4# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
5#
6#, fuzzy
7msgid ""
8msgstr ""
db1d71be 9"Project-Id-Version: PACKAGE VERSION\n"
f51f1d25 10"POT-Creation-Date: 2023-09-15 17:56+0200\n"
eabe8a9a
TS
11"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
12"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
13"Language-Team: LANGUAGE <LL@li.org>\n"
14"Language: \n"
15"MIME-Version: 1.0\n"
16"Content-Type: text/plain; charset=UTF-8\n"
17"Content-Transfer-Encoding: 8bit\n"
18
71b90906
TG
19#. type: Attribute 'lang' of: <html>
20msgid "en"
21msgstr ""
22
a8687551
TS
23#. type: Attribute 'content' of: <html><head><meta>
24msgid "text/html; charset=utf-8"
25msgstr ""
26
eabe8a9a 27#. type: Content of: <html><head><title>
eabe8a9a
TS
28msgid "Email Self-Defense - a guide to fighting surveillance with GnuPG encryption"
29msgstr ""
30
a8687551 31#. type: Attribute 'content' of: <html><head><meta>
8cd4252b
TG
32msgid ""
33"GnuPG, GPG, openpgp, surveillance, privacy, email, security, GnuPG2, "
34"encryption"
a8687551
TS
35msgstr ""
36
37#. type: Attribute 'content' of: <html><head><meta>
38msgid ""
39"Email surveillance violates our fundamental rights and makes free speech "
40"risky. This guide will teach you email self-defense in 40 minutes with "
41"GnuPG."
42msgstr ""
43
44#. type: Attribute 'content' of: <html><head><meta>
45msgid "width=device-width, initial-scale=1"
46msgstr ""
47
eabe8a9a 48#. type: Content of: <html><body><header><div><p>
eabe8a9a
TS
49msgid ""
50"<strong>Please check your email for a confirmation link now. Thanks for "
51"joining our list!</strong>"
52msgstr ""
53
54#. type: Content of: <html><body><header><div><p>
eabe8a9a
TS
55msgid ""
56"If you don't receive the confirmation link, send us an email at info@fsf.org "
57"to be added manually."
58msgstr ""
59
e7253b03 60#. type: Attribute 'alt' of: <html><body><header><div><p><img>
eabe8a9a
TS
61msgid "Try it out."
62msgstr ""
63
64#. type: Content of: <html><body><header><div><p>
eabe8a9a
TS
65msgid "Join us on microblogging services for day-to-day updates:"
66msgstr ""
67
68#. type: Content of: <html><body><section><div><div><div><p><a>
eabe8a9a
TS
69msgid "<a href=\"https://status.fsf.org/fsf\">"
70msgstr ""
71
72#. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
eabe8a9a
TS
73msgid "[GNU Social]"
74msgstr ""
75
76#. type: Content of: <html><body><section><div><div><div><p><a>
60715780 77msgid "&nbsp;GNU Social</a>&nbsp; |&nbsp; <a href=\"https://hostux.social/@fsf\">"
eabe8a9a
TS
78msgstr ""
79
80#. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
60715780 81msgid "[Mastodon]"
eabe8a9a
TS
82msgstr ""
83
84#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 85msgid ""
60715780 86"&nbsp;Mastodon</a>&nbsp; |&nbsp; <a "
eabe8a9a
TS
87"href=\"https://www.twitter.com/fsf\">Twitter</a>"
88msgstr ""
89
90#. type: Content of: <html><body><header><div><p>
eabe8a9a
TS
91msgid ""
92"<small><a href=\"https://www.fsf.org/twitter\">Read why GNU Social and "
60715780 93"Mastodon are better than Twitter.</a></small>"
eabe8a9a
TS
94msgstr ""
95
96#. type: Content of: <html><body><header><div><p>
eabe8a9a
TS
97msgid "&larr; Return to <a href=\"index.html\">Email Self-Defense</a>"
98msgstr ""
99
100#. type: Content of: <html><body><footer><div><div><h4><a>
eabe8a9a
TS
101msgid "<a href=\"https://u.fsf.org/ys\">"
102msgstr ""
103
104#. type: Attribute 'alt' of: <html><body><footer><div><div><h4><a><img>
eabe8a9a
TS
105msgid "Free Software Foundation"
106msgstr ""
107
108#. type: Content of: <html><body><footer><div><p>
eabe8a9a
TS
109msgid "</a>"
110msgstr ""
111
112#. type: Content of: <html><body><footer><div><div><p>
eabe8a9a 113msgid ""
e7253b03 114"Copyright &copy; 2014-2021 <a href=\"https://u.fsf.org/ys\">Free Software "
eabe8a9a
TS
115"Foundation</a>, Inc. <a "
116"href=\"https://my.fsf.org/donate/privacypolicy.html\">Privacy "
117"Policy</a>. Please support our work by <a "
118"href=\"https://u.fsf.org/yr\">joining us as an associate member.</a>"
119msgstr ""
120
121#. type: Content of: <html><body><footer><div><div><p>
eabe8a9a
TS
122msgid ""
123"The images on this page are under a <a "
124"href=\"https://creativecommons.org/licenses/by/4.0/\">Creative Commons "
125"Attribution 4.0 license (or later version)</a>, and the rest of it is under "
126"a <a href=\"https://creativecommons.org/licenses/by-sa/4.0\">Creative "
127"Commons Attribution-ShareAlike 4.0 license (or later version)</a>. Download "
128"the <a "
e7253b03 129"href=\"https://agpl.fsf.org/emailselfdefense.fsf.org/edward/CURRENT/edward.tar.gz\"> "
4aec1215 130"source code of Edward reply bot</a> by Andrew Engelbrecht "
8c6a812e 131"&lt;andrew@engelbrecht.io&gt; and Josh Drake &lt;zamnedix@gnu.org&gt;, "
eabe8a9a 132"available under the GNU Affero General Public License. <a "
e7253b03 133"href=\"https://www.gnu.org/licenses/license-list.html#OtherLicenses\">Why "
eabe8a9a
TS
134"these licenses?</a>"
135msgstr ""
136
137#. type: Content of: <html><body><footer><div><div><p>
eabe8a9a
TS
138msgid ""
139"Fonts used in the guide &amp; infographic: <a "
140"href=\"https://www.google.com/fonts/specimen/Dosis\">Dosis</a> by Pablo "
141"Impallari, <a "
e7253b03 142"href=\"https://www.google.com/fonts/specimen/Signika\">Signika</a> by Anna "
eabe8a9a 143"Giedry&#347;, <a "
e7253b03 144"href=\"https://www.google.com/fonts/specimen/Archivo+Narrow\">Archivo "
eabe8a9a
TS
145"Narrow</a> by Omnibus-Type, <a "
146"href=\"https://libreplanet.org/wiki/GPG_guide/Graphics_Howto#Pitfalls\">PXL-2000</a> "
147"by Florian Cramer."
148msgstr ""
149
150#. type: Content of: <html><body><footer><div><div><p>
eabe8a9a
TS
151msgid ""
152"Download the <a href=\"emailselfdefense_source.zip\">source package</a> for "
153"this guide, including fonts, image source files and the text of Edward's "
154"messages."
155msgstr ""
156
157#. type: Content of: <html><body><footer><div><div><p>
eabe8a9a
TS
158msgid ""
159"This site uses the Weblabels standard for labeling <a "
160"href=\"https://www.fsf.org/campaigns/freejs\">free JavaScript</a>. View the "
e7253b03 161"JavaScript <a href=\"https://weblabels.fsf.org/emailselfdefense.fsf.org/\" "
eabe8a9a
TS
162"rel=\"jslicense\">source code and license information</a>."
163msgstr ""
164
165#. type: Content of: <html><body><footer><div><p><a>
eabe8a9a
TS
166msgid ""
167"Infographic and guide design by <a rel=\"external\" "
e7253b03 168"href=\"https://jplusplus.org\"><strong>Journalism++</strong>"
eabe8a9a
TS
169msgstr ""
170
171#. type: Attribute 'alt' of: <html><body><footer><div><p><a><img>
eabe8a9a
TS
172msgid "Journalism++"
173msgstr ""
174
e7253b03
TG
175#. type: Content of: <html><body><header><div><h1>
176msgid "Email Self-Defense"
71b90906
TG
177msgstr ""
178
eabe8a9a 179#. type: Content of: <html><body><header><div><ul><li>
eabe8a9a 180msgid ""
8cd4252b
TG
181"<strong><a "
182"href=\"https://libreplanet.org/wiki/GPG_guide/Translation_Guide\"> "
183"Translate!</a></strong>"
eabe8a9a
TS
184msgstr ""
185
186#. type: Content of: <html><body><header><div><ul><li>
e7253b03 187msgid "<a href=\"index.html\" class=\"current\">Set up guide</a>"
eabe8a9a
TS
188msgstr ""
189
190#. type: Content of: <html><body><header><div><ul><li>
eabe8a9a
TS
191msgid "<a href=\"workshops.html\">Teach your friends</a>"
192msgstr ""
193
29139735
TG
194#. type: Content of: <html><body><header><div><ul><li>
195msgid ""
196"<a "
197"href=\"http://hhldo3tnt5solzj2bwfvh7xm4slk2forpjwjyemhcfrlob5gq75gioid.onion/en\" "
198"target=\"_blank\">This site's tor onion service</a>"
199msgstr ""
200
eabe8a9a 201#. type: Content of: <html><body><header><div><ul><li><a>
eabe8a9a 202msgid ""
e7253b03
TG
203"<a "
204"href=\"https://fsf.org/share?u=https://u.fsf.org/zb&amp;t=Email%20encryption%20for%20everyone%20via%20%40fsf\"> "
205"Share&nbsp;"
eabe8a9a
TS
206msgstr ""
207
208#. type: Content of: <html><body><header><div><ul><li><a>
eabe8a9a
TS
209msgid "&nbsp;"
210msgstr ""
211
212#. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
eabe8a9a
TS
213msgid "[Reddit]"
214msgstr ""
215
216#. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
eabe8a9a
TS
217msgid "[Hacker News]"
218msgstr ""
219
eabe8a9a 220#. type: Content of: <html><body><header><div><div><div><p>
eabe8a9a
TS
221msgid ""
222"We fight for computer users' rights, and promote the development of free (as "
223"in freedom) software. Resisting bulk surveillance is very important to us."
224msgstr ""
225
226#. type: Content of: <html><body><header><div><div><div><p>
eabe8a9a 227msgid ""
71b90906 228"<strong>Please donate to support Email Self-Defense. We need to keep "
be1ae08b 229"improving it, and making more materials, for the benefit of people around "
71b90906 230"the world taking the first step towards protecting their privacy.</strong>"
eabe8a9a
TS
231msgstr ""
232
e7253b03 233#. type: Content of: <html><body><section><div><div><div><p><a>
eabe8a9a
TS
234msgid ""
235"<a "
e7253b03 236"href=\"https://crm.fsf.org/civicrm/contribute/transact?reset=1&amp;id=14&amp;mtm_campaign=email_self_defense&amp;mtm_kwd=guide_donate\">"
eabe8a9a
TS
237msgstr ""
238
239#. type: Attribute 'alt' of: <html><body><header><div><div><p><a><img>
eabe8a9a
TS
240msgid "Donate"
241msgstr ""
242
7f65cb9f
TG
243#. type: Content of: <html><body><header><div><div><div><h5>
244msgid "Sign up"
245msgstr ""
246
247#. type: Content of: <html><body><header><div><div><div><form><p>
248msgid "Enter your email address to receive our monthly newsletter, the"
249msgstr ""
250
eceb2f13 251#. type: Content of: <html><body><header><div><div><div><form><p>
7f65cb9f
TG
252msgid ""
253"<a href=\"https://www.fsf.org/free-software-supporter/\">Free Software "
254"Supporter</a>"
255msgstr ""
256
257#. type: Content of: <html><body><header><div><div><div><form><p>
258msgid ""
259"<input id=\"frmEmail\" type=\"text\" name=\"email-Primary\" size=\"18\" "
260"maxlength=\"80\" />"
261msgstr ""
262
263#. type: Content of: <html><body><header><div><div><div><form><p>
264msgid "<input type=\"submit\" name=\"_qf_Edit_next\" value=\"Subscribe me\" />"
265msgstr ""
266
267#. type: Content of: <html><body><header><div><div><div><form><div>
268msgid ""
269"<input name=\"postURL\" type=\"hidden\" value=\"\" /> <input type=\"hidden\" "
270"name=\"group[25]\" value=\"1\" /> <input name=\"cancelURL\" type=\"hidden\" "
eceb2f13 271"value=\"https://my.fsf.org/civicrm/profile?reset=1&amp;gid=31\" /> <input "
7f65cb9f
TG
272"name=\"_qf_default\" type=\"hidden\" value=\"Edit:cancel\" />"
273msgstr ""
274
974f8f55 275#. type: Content of: <html><body><header><div><div><p><a>
eabe8a9a
TS
276msgid "<a id=\"infographic\" href=\"infographic.html\">"
277msgstr ""
278
e7253b03 279#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><a><img>
eabe8a9a
TS
280msgid "View &amp; share our infographic &rarr;"
281msgstr ""
282
283#. type: Content of: <html><body><header><div><div><p>
eabe8a9a 284msgid ""
71b90906 285"</a> Bulk surveillance violates our fundamental rights and makes free speech "
eabe8a9a
TS
286"risky. This guide will teach you a basic surveillance self-defense skill: "
287"email encryption. Once you've finished, you'll be able to send and receive "
d3d12736
TG
288"emails that are scrambled to make sure a surveillance agent or thief "
289"intercepting your email can't read them. All you need is a computer with an "
290"Internet connection, an email account, and about forty minutes."
eabe8a9a
TS
291msgstr ""
292
293#. type: Content of: <html><body><header><div><div><p>
eabe8a9a
TS
294msgid ""
295"Even if you have nothing to hide, using encryption helps protect the privacy "
296"of people you communicate with, and makes life difficult for bulk "
297"surveillance systems. If you do have something important to hide, you're in "
298"good company; these are the same tools that whistleblowers use to protect "
e7253b03 299"their identities while shining light on human rights abuses, corruption, and "
eabe8a9a
TS
300"other crimes."
301msgstr ""
302
303#. type: Content of: <html><body><header><div><div><p>
eabe8a9a
TS
304msgid ""
305"In addition to using encryption, standing up to surveillance requires "
306"fighting politically for a <a "
e7253b03 307"href=\"https://gnu.org/philosophy/surveillance-vs-democracy.html\">reduction "
eabe8a9a
TS
308"in the amount of data collected on us</a>, but the essential first step is "
309"to protect yourself and make surveillance of your communication as difficult "
310"as possible. This guide helps you do that. It is designed for beginners, but "
311"if you already know the basics of GnuPG or are an experienced free software "
312"user, you'll enjoy the advanced tips and the <a "
313"href=\"workshops.html\">guide to teaching your friends</a>."
314msgstr ""
315
316#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
317msgid "<em>#1</em> Get the pieces"
318msgstr ""
319
320#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
321msgid ""
322"This guide relies on software which is <a "
323"href=\"https://www.gnu.org/philosophy/free-sw.html\">freely licensed</a>; "
324"it's completely transparent and anyone can copy it or make their own "
325"version. This makes it safer from surveillance than proprietary software "
e7253b03 326"(like Windows or macOS). Learn more about free software at <a "
eabe8a9a
TS
327"href=\"https://u.fsf.org/ys\">fsf.org</a>."
328msgstr ""
329
330#. type: Content of: <html><body><section><div><div><p>
eabe8a9a 331msgid ""
e7253b03
TG
332"Most GNU/Linux operating systems come with GnuPG installed on them, so if "
333"you're running one of these systems, you don't have to download it. If "
db1d71be 334"you're running macOS or Windows, steps to download GnuPG are below. Before "
e7253b03
TG
335"configuring your encryption setup with this guide, though, you'll need a "
336"desktop email program installed on your computer. Many GNU/Linux "
337"distributions have one installed already, such as Icedove, which may be "
338"under the alternate name \"Thunderbird.\" Programs like these are another "
339"way to access the same email accounts you can access in a browser (like "
340"Gmail), but provide extra features."
eabe8a9a
TS
341msgstr ""
342
eabe8a9a 343#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
eabe8a9a
TS
344msgid "Step 1.A: Install Wizard"
345msgstr ""
346
347#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
348msgid "<em>Step 1.a</em> Set up your email program with your email account"
349msgstr ""
350
351#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 352msgid ""
71b90906 353"Open your email program and follow the wizard (step-by-step walkthrough) "
e7253b03
TG
354"that sets it up with your email account. This usually starts from \"Account "
355"Settings\" &rarr; \"Add Mail Account\". You should get the email server "
356"settings from your systems administrator or the help section of your email "
357"account."
eabe8a9a
TS
358msgstr ""
359
360#. type: Content of: <html><body><section><div><div><div><div><h4>
eabe8a9a
TS
361msgid "Troubleshooting"
362msgstr ""
363
364#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
365msgid "The wizard doesn't launch"
366msgstr ""
367
368#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
369msgid ""
370"You can launch the wizard yourself, but the menu option for doing so is "
371"named differently in each email program. The button to launch it will be in "
372"the program's main menu, under \"New\" or something similar, titled "
373"something like \"Add account\" or \"New/Existing email account.\""
374msgstr ""
375
376#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
377msgid "The wizard can't find my account or isn't downloading my mail"
378msgstr ""
379
380#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
381msgid ""
382"Before searching the Web, we recommend you start by asking other people who "
383"use your email system, to figure out the correct settings."
384msgstr ""
385
e7253b03
TG
386#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
387msgid "I can't find the menu"
388msgstr ""
389
390#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
391msgid ""
392"In many new email programs, the main menu is represented by an image of "
393"three stacked horizontal bars."
394msgstr ""
395
eabe8a9a 396#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
397msgid "Don't see a solution to your problem?"
398msgstr ""
399
400#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
401msgid ""
402"Please let us know on the <a "
403"href=\"https://libreplanet.org/wiki/GPG_guide/Public_Review\">feedback "
404"page</a>."
405msgstr ""
406
e7253b03 407#. type: Content of: <html><body><section><div><div><div><h3>
b2c34a2a 408msgid "<em>Step 1.b</em> Install GnuPG"
eabe8a9a
TS
409msgstr ""
410
e7253b03
TG
411#. type: Content of: <html><body><section><div><div><div><p>
412msgid ""
413"If you are using a GNU/Linux machine, you should already have GnuPG "
b2c34a2a 414"installed, and you can skip to <a href=\"#section2\">Section 2</a>."
eabe8a9a
TS
415msgstr ""
416
e7253b03
TG
417#. type: Content of: <html><body><section><div><div><div><p>
418msgid ""
419"If you are using a macOS or Windows machine, however, you need to first "
420"install the GnuPG program. Select your operating system below and follow the "
b2c34a2a
TG
421"instructions. For the rest of this guide, the steps are the same for all "
422"operating systems."
eabe8a9a
TS
423msgstr ""
424
e7253b03 425#. type: Content of: <html><body><section><div><div><div><div><h4>
8cd4252b 426msgid "macOS"
eabe8a9a
TS
427msgstr ""
428
e7253b03
TG
429#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
430msgid "Use a third-party package manager to install GnuPG"
eabe8a9a
TS
431msgstr ""
432
b2c34a2a 433#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
eabe8a9a 434msgid ""
b2c34a2a
TG
435"The default macOS package manager makes it difficult to install GnuPG and "
436"other pieces of free software (like Emacs, GIMP, or Inkscape). To make "
437"things easier, we recommend setting up the third-party package manager "
438"\"Homebrew\" to install GnuPG. For this, we will use a program called "
674646df 439"\"Terminal,\" which is pre-installed on macOS."
eabe8a9a
TS
440msgstr ""
441
b2c34a2a 442#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8c163d47 443msgid ""
b2c34a2a
TG
444"# Copy the first command on the home page of <a "
445"href=\"https://brew.sh/\">Homebrew</a> by clicking on the clipboard icon, "
446"and paste it in Terminal. Click \"Enter\" and wait for the installation to "
447"finalize."
2fd4a6dc
TG
448msgstr ""
449
b2c34a2a
TG
450#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
451msgid "# Then install GnuPG by entering the following code in Terminal:"
eabe8a9a
TS
452msgstr ""
453
b2c34a2a
TG
454#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
455msgid "<code>brew install gnupg gnupg2</code>"
e7253b03
TG
456msgstr ""
457
458#. type: Content of: <html><body><section><div><div><div><div><h4>
459msgid "Windows"
eabe8a9a
TS
460msgstr ""
461
462#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 463msgid "Get GnuPG by downloading GPG4Win"
eabe8a9a
TS
464msgstr ""
465
2094a53c 466#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
eabe8a9a 467msgid ""
2094a53c 468"<a href=\"https://www.gpg4win.org/\">GPG4Win</a> is an email and file "
e7253b03
TG
469"encryption software package that includes GnuPG. Download and install the "
470"latest version, choosing default options whenever asked. After it's "
471"installed, you can close any windows that it creates."
472msgstr ""
473
e7253b03
TG
474#. type: Content of: <html><body><section><div><div><div><h3>
475msgid "GnuPG, OpenPGP, what?"
476msgstr ""
477
478#. type: Content of: <html><body><section><div><div><div><p>
479msgid ""
480"In general, the terms GnuPG, GPG, GNU Privacy Guard, OpenPGP and PGP are "
481"used interchangeably. Technically, OpenPGP (Pretty Good Privacy) is the "
482"encryption standard, and GNU Privacy Guard (often shortened to GPG or GnuPG) "
483"is the program that implements the standard. Most email programs provide an "
484"interface for GnuPG. There is also a newer version of GnuPG, called GnuPG2."
eabe8a9a
TS
485msgstr ""
486
487#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
488msgid "<em>#2</em> Make your keys"
489msgstr ""
490
e7253b03
TG
491#. type: Attribute 'alt' of: <html><body><section><div><div><p><img>
492msgid "A robot with a head shaped like a key holding a private and a public key"
493msgstr ""
494
eabe8a9a 495#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
496msgid ""
497"To use the GnuPG system, you'll need a public key and a private key (known "
498"together as a keypair). Each is a long string of randomly generated numbers "
499"and letters that are unique to you. Your public and private keys are linked "
500"together by a special mathematical function."
501msgstr ""
502
503#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
504msgid ""
505"Your public key isn't like a physical key, because it's stored in the open "
506"in an online directory called a keyserver. People download it and use it, "
507"along with GnuPG, to encrypt emails they send to you. You can think of the "
508"keyserver as a phonebook; people who want to send you encrypted email can "
509"look up your public key."
510msgstr ""
511
512#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
513msgid ""
514"Your private key is more like a physical key, because you keep it to "
515"yourself (on your computer). You use GnuPG and your private key together to "
8cd4252b
TG
516"descramble encrypted emails other people send to you. <strong>You should "
517"never share your private key with anyone, under any circumstances.</strong>"
eabe8a9a
TS
518msgstr ""
519
520#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
521msgid ""
522"In addition to encryption and decryption, you can also use these keys to "
523"sign messages and check the authenticity of other people's signatures. We'll "
524"discuss this more in the next section."
525msgstr ""
526
527#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
e7253b03
TG
528msgid "Step 2.A: Make your Keypair"
529msgstr ""
530
531#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
532msgid "Step 2.A: Set your passphrase"
eabe8a9a
TS
533msgstr ""
534
535#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
536msgid "<em>Step 2.a</em> Make a keypair"
537msgstr ""
538
8cd4252b 539#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03
TG
540msgid "Make your keypair"
541msgstr ""
542
eabe8a9a 543#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 544msgid ""
b2c34a2a
TG
545"We will use the command line in a terminal to create a keypair using the "
546"GnuPG program."
eabe8a9a
TS
547msgstr ""
548
e7253b03 549#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 550msgid ""
b2c34a2a
TG
551"Whether on GNU/Linux, macOS or Windows, you can launch your terminal "
552"(\"Terminal\" in macOS, \"PowerShell\" in Windows) from the Applications "
553"menu (some GNU/Linux systems respond to the <kbd>Ctrl + Alt + T</kbd> "
554"shortcut)."
eabe8a9a
TS
555msgstr ""
556
e7253b03 557#. type: Content of: <html><body><section><div><div><div><p>
b2c34a2a 558msgid "# Enter <code>gpg --full-generate-key</code> to start the process."
eabe8a9a
TS
559msgstr ""
560
e7253b03 561#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 562msgid ""
e7253b03 563"# To answer what kind of key you would like to create, select the default "
8cd4252b 564"option: <samp>1&nbsp;RSA&nbsp;and&nbsp;RSA</samp>."
eabe8a9a
TS
565msgstr ""
566
e7253b03 567#. type: Content of: <html><body><section><div><div><div><p>
8cd4252b 568msgid "# Enter the following keysize: <code>4096</code> for a strong key."
e7253b03
TG
569msgstr ""
570
571#. type: Content of: <html><body><section><div><div><div><p>
b2c34a2a 572msgid "# Choose the expiration date; we suggest <code>2y</code> (2 years)."
e7253b03
TG
573msgstr ""
574
575#. type: Content of: <html><body><section><div><div><div><p>
576msgid "Follow the prompts to continue setting up with your personal details."
577msgstr ""
578
39ad5485
TG
579#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
580msgid ""
581"Depending on your version of GPG, you may need to use <code>--gen-key</code> "
1c3b81e7 582"instead of <code>--full-generate-key</code>&#65279;."
39ad5485
TG
583msgstr ""
584
f51f1d25
TG
585#. type: Content of: <html><body><section><div><div><div><p>
586msgid ""
587"You can set further options by running <code>gpg --edit-key "
588"[your@email]</code> in a terminal window."
589msgstr ""
590
8cd4252b 591#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03
TG
592msgid "Set your passphrase"
593msgstr ""
594
595#. type: Content of: <html><body><section><div><div><div><p>
596msgid ""
9a1f3824 597"On the screen titled \"Passphrase,\" pick a strong passphrase! You can do it "
eabe8a9a
TS
598"manually, or you can use the Diceware method. Doing it manually is faster "
599"but not as secure. Using Diceware takes longer and requires dice, but "
9a1f3824 600"creates a passphrase that is much harder for attackers to figure out. To use "
4aec1215
TG
601"it, read the section \"Make a secure passphrase with Diceware\" in <a "
602"href=\"https://theintercept.com/2015/03/26/passphrases-can-memorize-attackers-cant-guess/\"> "
603"this article</a> by Micah Lee."
eabe8a9a
TS
604msgstr ""
605
606#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 607msgid ""
e7253b03 608"If you'd like to pick a passphrase manually, come up with something you can "
eabe8a9a
TS
609"remember which is at least twelve characters long, and includes at least one "
610"lower case and upper case letter and at least one number or punctuation "
9a1f3824 611"symbol. Never pick a passphrase you've used elsewhere. Don't use any "
eabe8a9a
TS
612"recognizable patterns, such as birthdays, telephone numbers, pets' names, "
613"song lyrics, quotes from books, and so on."
614msgstr ""
615
eabe8a9a 616#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 617msgid "GnuPG is not installed"
eabe8a9a
TS
618msgstr ""
619
620#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a 621msgid ""
b2c34a2a
TG
622"You can check if this is the case with the command <code>gpg "
623"--version</code>&#65279;. If GnuPG is not installed, it will bring up the "
624"following result on most GNU/Linux operating systems, or something like it: "
625"<samp>Command 'gpg' not found, but can be installed with: sudo apt install "
626"gnupg</samp>. Follow that command and install the program."
eabe8a9a
TS
627msgstr ""
628
f950b092
TG
629#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
630msgid "<i>gpg --full-generate-key</i> command not working"
631msgstr ""
632
633#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
634msgid ""
635"Some distributions use a different version of GPG. When you receive an error "
636"code that is something along the lines of: <samp>gpg: Invalid option "
637"\"--full-generate-key\"</samp>, you can try the following commands:"
638msgstr ""
639
640#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
641msgid "<code>sudo apt update</code>"
642msgstr ""
643
644#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
645msgid "<code>sudo apt install gnupg2</code>"
646msgstr ""
647
648#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
649msgid "<code>gpg2 --full-generate-key</code>"
650msgstr ""
651
652#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
653msgid ""
654"If this resolved the issue, you need to continue to use the gpg2 identifier "
655"instead of gpg throughout the following steps of the guide."
656msgstr ""
657
eabe8a9a 658#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 659msgid "I took too long to create my passphrase"
eabe8a9a
TS
660msgstr ""
661
662#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a 663msgid ""
e7253b03
TG
664"That's okay. It's important to think about your passphrase. When you're "
665"ready, just follow the steps from the beginning again to create your key."
eabe8a9a
TS
666msgstr ""
667
668#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 669msgid "How can I see my key?"
eabe8a9a
TS
670msgstr ""
671
672#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a 673msgid ""
b2c34a2a
TG
674"Use the following command to see all keys: <code>gpg "
675"--list-keys</code>&#65279;. Yours should be listed in there, and later, so "
676"will Edward's (<a href=\"#section3\">Section 3</a>)."
677msgstr ""
678
679#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
680msgid ""
681"If you want to see only your key, you can use <code>gpg --list-key "
682"[your@email]</code>&#65279;."
683msgstr ""
684
685#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
686msgid ""
687"You can also use <code>gpg --list-secret-key</code> to see your own private "
688"key."
eabe8a9a
TS
689msgstr ""
690
691#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 692msgid "More resources"
eabe8a9a
TS
693msgstr ""
694
695#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a 696msgid ""
e7253b03 697"For more information about this process, you can also refer to <a "
eabe8a9a
TS
698"href=\"https://www.gnupg.org/gph/en/manual/c14.html#AEN25\">The GNU Privacy "
699"Handbook</a>. Make sure you stick with \"RSA and RSA\" (the default), "
700"because it's newer and more secure than the algorithms the documentation "
b2c34a2a
TG
701"recommends. Also make sure your key is at least 4096&nbsp;bits if you want "
702"to be secure."
e7253b03
TG
703msgstr ""
704
705#. type: Content of: <html><body><section><div><div><div><div><h4>
706msgid "Advanced"
eabe8a9a
TS
707msgstr ""
708
709#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
710msgid "Advanced key pairs"
711msgstr ""
712
713#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
714msgid ""
715"When GnuPG creates a new keypair, it compartmentalizes the encryption "
716"function from the signing function through <a "
717"href=\"https://wiki.debian.org/Subkeys\">subkeys</a>. If you use subkeys "
e7253b03
TG
718"carefully, you can keep your GnuPG identity more secure and recover from a "
719"compromised key much more quickly. <a "
eabe8a9a 720"href=\"https://alexcabal.com/creating-the-perfect-gpg-keypair/\">Alex "
e7253b03 721"Cabal</a> and <a href=\"https://keyring.debian.org/creating-key.html\">the "
eabe8a9a
TS
722"Debian wiki</a> provide good guides for setting up a secure subkey "
723"configuration."
724msgstr ""
725
e7253b03
TG
726#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
727msgid "Step 2.B: Send to server and generate a certificate"
728msgstr ""
729
eabe8a9a 730#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03
TG
731msgid "<em>Step 2.b</em> Some important steps following creation"
732msgstr ""
733
8cd4252b 734#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03 735msgid "Upload your key to a keyserver"
eabe8a9a
TS
736msgstr ""
737
738#. type: Content of: <html><body><section><div><div><div><p>
e7253b03
TG
739msgid ""
740"We will upload your key to a keyserver, so if someone wants to send you an "
741"encrypted message, they can download your public key from the "
742"Internet. There are multiple keyservers that you can select from the menu "
39ad5485
TG
743"when you upload, but they are mostly all copies of each other. Any server "
744"will work, but it's good to remember which one you uploaded your key to "
745"originally. Also keep in mind, sometimes takes a few hours for them to match "
e7253b03 746"each other when a new key is uploaded."
eabe8a9a
TS
747msgstr ""
748
749#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 750msgid ""
8cd4252b
TG
751"# Copy your keyID: <code>gpg --list-key [your@email]</code> will list your "
752"public (\"pub\") key information, including your keyID, which is a unique "
753"list of numbers and letters. Copy this keyID, so you can use it in the "
754"following command."
eabe8a9a
TS
755msgstr ""
756
757#. type: Content of: <html><body><section><div><div><div><p>
8cd4252b 758msgid "# Upload your key to a server: <code>gpg --send-key [keyID]</code>"
eabe8a9a
TS
759msgstr ""
760
8cd4252b 761#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03
TG
762msgid "Export your key to a file"
763msgstr ""
764
765#. type: Content of: <html><body><section><div><div><div><p>
766msgid ""
767"Use the following command to export your secret key so you can import it "
768"into your email client at the next <a href=\"#section3\">step</a>. To avoid "
769"getting your key compromised, store this in a safe place, and make sure that "
770"if it is transferred, it is done so in a trusted way. Exporting your keys "
771"can be done with the following commands:"
772msgstr ""
773
8cd4252b
TG
774#. type: Content of: <html><body><section><div><div><div><p><code>
775msgid "<code> $ gpg --export-secret-keys -a [keyID] > my_secret_key.asc"
e7253b03
TG
776msgstr ""
777
2094a53c 778#. type: Content of: <html><body><section><div><div><div><p>
8cd4252b 779msgid "$ gpg --export -a [keyID] > my_public_key.asc </code>"
e7253b03
TG
780msgstr ""
781
8cd4252b 782#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03
TG
783msgid "Generate a revocation certificate"
784msgstr ""
785
786#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 787msgid ""
e7253b03
TG
788"Just in case you lose your key, or it gets compromised, you want to generate "
789"a certificate and choose to save it in a safe place on your computer for now "
b2c34a2a 790"(please refer to <a href=\"#step-6c\">Step 6.C</a> for how to best store "
e7253b03
TG
791"your revocation cerficate safely). This step is essential for your email "
792"self-defense, as you'll learn more about in <a href=\"#section5\">Section "
793"5</a>."
794msgstr ""
795
796#. type: Content of: <html><body><section><div><div><div><p>
797msgid ""
8cd4252b
TG
798"# Generate a revocation certificate: <code>gpg --gen-revoke --output "
799"revoke.asc [keyID]</code>"
e7253b03
TG
800msgstr ""
801
802#. type: Content of: <html><body><section><div><div><div><p>
803msgid ""
804"# It will prompt you to give a reason for revocation, we recommend to use "
8cd4252b 805"<samp>1&nbsp;=&nbsp;key has been compromised</samp>."
e7253b03
TG
806msgstr ""
807
808#. type: Content of: <html><body><section><div><div><div><p>
809msgid ""
b2c34a2a
TG
810"# You don't have to fill in a reason, but you can; then press \"Enter\" for "
811"an empty line, and confirm your selection."
eabe8a9a
TS
812msgstr ""
813
f950b092
TG
814#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
815msgid "Sending my key to the keyserver is not working"
816msgstr ""
817
818#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
819msgid ""
820"Instead of using the general command to upload your key to the keyserver, "
821"you can use a more specific command and add the keyserver to your command "
f68b2d75 822"<code>gpg --keyserver keys.openpgp.org --send-key [keyID]</code>&#65279;."
f950b092
TG
823msgstr ""
824
eabe8a9a 825#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 826msgid "My key doesn't seem to be working or I get a \"permission denied.\""
eabe8a9a
TS
827msgstr ""
828
2094a53c 829#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
e7253b03
TG
830msgid ""
831"Like every other file or folder, gpg keys are subject to permissions. If "
832"these are not set correctly, your system may not be accepting your keys. You "
833"can follow the next steps to check, and update to the right permissions."
834msgstr ""
835
2094a53c 836#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8cd4252b 837msgid "# Check your permissions: <code>ls -l ~/.gnupg/*</code>"
e7253b03
TG
838msgstr ""
839
2094a53c 840#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
e7253b03 841msgid ""
db1d71be
TG
842"# Set permissions to read, write, execute for only yourself, no "
843"others. These are the recommended permissions for your folder."
e7253b03
TG
844msgstr ""
845
2094a53c 846#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
9a1f3824 847msgid "You can use the command: <code>chmod 700 ~/.gnupg</code>"
e7253b03
TG
848msgstr ""
849
2094a53c 850#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
e7253b03 851msgid ""
db1d71be
TG
852"# Set permissions to read and write for yourself only, no others. These are "
853"the recommended permissions for the keys inside your folder."
e7253b03
TG
854msgstr ""
855
2094a53c 856#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8cd4252b 857msgid "You can use the code: <code>chmod 600 ~/.gnupg/*</code>"
e7253b03
TG
858msgstr ""
859
860#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
861msgid ""
862"If you have (for any reason) created your own folders inside ~/.gnupg, you "
863"must also additionally apply execute permissions to that folder. Folders "
864"require execution privileges to be opened. For more information on "
865"permissions, you can check out <a "
866"href=\"https://helpdeskgeek.com/linux-tips/understanding-linux-permissions-chmod-usage/\">this "
867"detailed information guide</a>."
eabe8a9a
TS
868msgstr ""
869
870#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 871msgid "More about keyservers"
eabe8a9a
TS
872msgstr ""
873
874#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a 875msgid ""
9a1f3824
TG
876"You can find some more keyserver information <a "
877"href=\"https://www.gnupg.org/gph/en/manual/x457.html\">in this "
337ff07a 878"manual</a>. You can also <a "
e7253b03
TG
879"href=\"https://www.gnupg.org/gph/en/manual/x56.html#AEN64\">directly export "
880"your key</a> as a file on your computer."
eabe8a9a
TS
881msgstr ""
882
883#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 884msgid "Transferring your keys"
eabe8a9a
TS
885msgstr ""
886
2094a53c 887#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
eabe8a9a 888msgid ""
e7253b03
TG
889"Use the following commands to transfer your keys. To avoid getting your key "
890"compromised, store it in a safe place, and make sure that if it is "
891"transferred, it is done so in a trusted way. Importing and exporting a key "
892"can be done with the following commands:"
893msgstr ""
894
8cd4252b
TG
895#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p><code>
896msgid "<code> $ gpg --export-secret-keys -a [keyID] > my_private_key.asc"
e7253b03
TG
897msgstr ""
898
8cd4252b 899#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p><code>
2094a53c 900msgid "$ gpg --export -a [keyID] > my_public_key.asc"
e7253b03
TG
901msgstr ""
902
8cd4252b 903#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p><code>
e7253b03
TG
904msgid "$ gpg --import my_private_key.asc"
905msgstr ""
906
2094a53c 907#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8cd4252b 908msgid "$ gpg --import my_public_key.asc </code>"
e7253b03
TG
909msgstr ""
910
911#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
912msgid ""
913"Ensure that the keyID printed is the correct one, and if so, then go ahead "
914"and add ultimate trust for it:"
915msgstr ""
916
2094a53c 917#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8cd4252b 918msgid "<code> $ gpg --edit-key [your@email] </code>"
e7253b03
TG
919msgstr ""
920
2094a53c 921#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
e7253b03 922msgid ""
b2c34a2a
TG
923"Because this is your key, you should choose "
924"<code>ultimate</code>&#65279;. You shouldn't trust anyone else's key "
925"ultimately."
e7253b03
TG
926msgstr ""
927
928#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
929msgid ""
b2c34a2a 930"Refer to <a href=\"#step-2b\">Troubleshooting in Step 2.B</a> for more "
e7253b03
TG
931"information on permissions. When transferring keys, your permissions may get "
932"mixed, and errors may be prompted. These are easily avoided when your "
933"folders and files have the right permissions"
934msgstr ""
935
936#. type: Content of: <html><body><section><div><div><h2>
937msgid "<em>#3</em> Set up email encryption"
938msgstr ""
939
940#. type: Content of: <html><body><section><div><div><p>
941msgid ""
942"The Icedove (or Thunderbird) email program has PGP functionality integrated, "
943"which makes it pretty easy to work with. We'll take you through the steps of "
944"integrating and using your key in these email clients."
945msgstr ""
946
947#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
948msgid "Step 3.A: Email Menu"
949msgstr ""
950
951#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
952msgid "Step 3.A: Import From File"
953msgstr ""
954
955#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
956msgid "Step 3.A: Success"
957msgstr ""
958
959#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
960msgid "Step 3.A: Troubleshoot"
eabe8a9a
TS
961msgstr ""
962
963#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03
TG
964msgid "<em>Step 3.a</em> Set up your email with encryption"
965msgstr ""
966
2094a53c 967#. type: Content of: <html><body><section><div><div><div><p>
e7253b03
TG
968msgid ""
969"Once you have set up your email with encryption, you can start contributing "
970"to encrypted traffic on the Internet. First we'll get your email client to "
971"import your secret key, and we will also learn how to get other people's "
972"public keys from servers so you can send and receive encrypted email."
eabe8a9a
TS
973msgstr ""
974
975#. type: Content of: <html><body><section><div><div><div><p>
252b506d 976msgid "# Open your email client and use \"Tools\" &rarr; <i>OpenPGP Key Manager</i>"
e7253b03
TG
977msgstr ""
978
979#. type: Content of: <html><body><section><div><div><div><p>
8cd4252b 980msgid "# Under \"File\" &rarr; <i>Import Secret Key(s) From File</i>"
e7253b03
TG
981msgstr ""
982
983#. type: Content of: <html><body><section><div><div><div><p>
984msgid ""
252b506d 985"# Select the file you saved under the name [my_secret_key.asc] in <a "
b2c34a2a 986"href=\"#step-2b\">Step 2.B</a> when you exported your key"
e7253b03
TG
987msgstr ""
988
989#. type: Content of: <html><body><section><div><div><div><p>
990msgid "# Unlock with your passphrase"
991msgstr ""
992
993#. type: Content of: <html><body><section><div><div><div><p>
994msgid ""
995"# You will receive a \"OpenPGP keys successfully imported\" window to "
996"confirm success"
997msgstr ""
998
999#. type: Content of: <html><body><section><div><div><div><p>
1000msgid ""
252b506d
TG
1001"# Go to \"Account settings\" &rarr; \"End-To-End Encryption,\" and make sure "
1002"your key is imported and select <i>Treat this key as a Personal Key</i>."
e7253b03
TG
1003msgstr ""
1004
1005#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
1006msgid "I'm not sure the import worked correctly"
1007msgstr ""
1008
1009#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1010msgid ""
8cd4252b
TG
1011"Look for \"Account settings\" &rarr; \"End-To-End Encryption.\" Here you can "
1012"see if your personal key associated with this email is found. If it is not, "
252b506d
TG
1013"you can try again via the <i>Add key</i> option. Make sure you have the "
1014"correct, active, secret key file."
eabe8a9a
TS
1015msgstr ""
1016
1017#. type: Content of: <html><body><section><div><div><h2>
e7253b03
TG
1018msgid "<em>#4</em> Try it out!"
1019msgstr ""
1020
1021#. type: Attribute 'alt' of: <html><body><section><div><div><p><img>
1022msgid "Illustration of a person in a house with a cat connected to a server"
eabe8a9a
TS
1023msgstr ""
1024
1025#. type: Content of: <html><body><section><div><div><p>
eabe8a9a 1026msgid ""
e7253b03
TG
1027"Now you'll try a test correspondence with an FSF computer program named "
1028"Edward, who knows how to use encryption. Except where noted, these are the "
1029"same steps you'd follow when corresponding with a real, live person."
1030msgstr ""
1031
1032#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1033msgid "Step 4.A Send key to Edward."
eabe8a9a
TS
1034msgstr ""
1035
1036#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1037msgid "<em>Step 4.a</em> Send Edward your public key"
eabe8a9a
TS
1038msgstr ""
1039
1040#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1041msgid ""
1042"This is a special step that you won't have to do when corresponding with "
e7253b03
TG
1043"real people. In your email program's menu, go to \"Tools\" &rarr; \"OpenPGP "
1044"Key Manager.\" You should see your key in the list that pops up. Right click "
8cd4252b
TG
1045"on your key and select <i>Send Public Keys by Email</i>. This will create a "
1046"new draft message, as if you had just hit the \"Write\" button, but in the "
1047"attachment you will find your public keyfile."
eabe8a9a
TS
1048msgstr ""
1049
1050#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1051msgid ""
1052"Address the message to <a "
1053"href=\"mailto:edward-en@fsf.org\">edward-en@fsf.org</a>. Put at least one "
1054"word (whatever you want) in the subject and body of the email. Don't send "
1055"yet."
1056msgstr ""
1057
1058#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1059msgid ""
e7253b03
TG
1060"We want Edward to be able to open the email with your keyfile, so we want "
1061"this first special message to be unencrypted. Make sure encryption is turned "
8cd4252b
TG
1062"off by using the dropdown menu \"Security\" and select <i>Do Not "
1063"Encrypt</i>. Once encryption is off, hit Send."
eabe8a9a
TS
1064msgstr ""
1065
1066#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1067msgid ""
1068"It may take two or three minutes for Edward to respond. In the meantime, you "
e7253b03
TG
1069"might want to skip ahead and check out the <a href=\"#section6\">Use it "
1070"Well</a> section of this guide. Once you have received a response, head to "
1071"the next step. From here on, you'll be doing just the same thing as when "
eabe8a9a
TS
1072"corresponding with a real person."
1073msgstr ""
1074
1075#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1076msgid ""
e7253b03
TG
1077"When you open Edward's reply, GnuPG may prompt you for your passphrase "
1078"before using your private key to decrypt it."
1079msgstr ""
1080
1081#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1082msgid "Step 4.B Option 1. Verify key"
1083msgstr ""
1084
1085#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1086msgid "Step 4.B Option 2. Import key"
eabe8a9a
TS
1087msgstr ""
1088
1089#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03
TG
1090msgid "<em>Step 4.b</em> Send a test encrypted email"
1091msgstr ""
1092
8cd4252b 1093#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03 1094msgid "Get Edward's key"
eabe8a9a
TS
1095msgstr ""
1096
1097#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1098msgid ""
e7253b03
TG
1099"To encrypt an email to Edward, you need its public key, so now you'll have "
1100"to download it from a keyserver. You can do this in two different ways:"
eabe8a9a
TS
1101msgstr ""
1102
1103#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1104msgid ""
e7253b03
TG
1105"<strong>Option 1.</strong> In the email answer you received from Edward as a "
1106"response to your first email, Edward's public key was included. On the right "
1107"of the email, just above the writing area, you will find an \"OpenPGP\" "
1108"button that has a lock and a little wheel next to it. Click that, and select "
252b506d
TG
1109"<i>Discover</i> next to the text: \"This message was signed with a key that "
1110"you don't yet have.\" A popup with Edward's key details will follow."
eabe8a9a
TS
1111msgstr ""
1112
1113#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1114msgid ""
252b506d
TG
1115"<strong>Option 2.</strong> Open your OpenPGP Key manager, and under "
1116"\"Keyserver\" choose <i>Discover Keys Online</i>. Here, fill in Edward's "
1117"email address, and import Edward's key."
eabe8a9a
TS
1118msgstr ""
1119
1120#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1121msgid ""
8cd4252b
TG
1122"The option <i>Accepted (unverified)</i> will add this key to your key "
1123"manager, and now it can be used to send encrypted emails and to verify "
1124"digital signatures from Edward."
eabe8a9a
TS
1125msgstr ""
1126
1127#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1128msgid ""
e7253b03
TG
1129"In the popup window confirming if you want to import Edward's key, you'll "
1130"see many different emails that are all associated with its key. This is "
1131"correct; you can safely import the key."
eabe8a9a
TS
1132msgstr ""
1133
1134#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1135msgid ""
e7253b03
TG
1136"Since you encrypted this email with Edward's public key, Edward's private "
1137"key is required to decrypt it. Edward is the only one with its private key, "
1138"so no one except Edward can decrypt it."
1139msgstr ""
1140
8cd4252b 1141#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03 1142msgid "Send Edward an encrypted email"
eabe8a9a
TS
1143msgstr ""
1144
1145#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1146msgid ""
e7253b03
TG
1147"Write a new email in your email program, addressed to <a "
1148"href=\"mailto:edward-en@fsf.org\">edward-en@fsf.org</a>. Make the subject "
1149"\"Encryption test\" or something similar and write something in the body."
1150msgstr ""
1151
1152#. type: Content of: <html><body><section><div><div><div><p>
1153msgid ""
1154"This time, make sure encryption is turned on by using the dropdown menu "
8cd4252b
TG
1155"\"Security\" and select <i>Require Encryption</i>. Once encryption is on, "
1156"hit Send."
eabe8a9a
TS
1157msgstr ""
1158
1159#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03
TG
1160msgid "\"Recipients not valid, not trusted or not found\""
1161msgstr ""
1162
1163#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1164msgid ""
8cd4252b
TG
1165"You could get the above error message, or something along these lines: "
1166"\"Unable to send this message with end-to-end encryption, because there are "
1167"problems with the keys of the following recipients: ...\" In these cases, "
1168"you may be trying to send an encrypted email to someone when you do not have "
e7253b03 1169"their public key yet. Make sure you follow the steps above to import the key "
f950b092
TG
1170"to your key manager. Open the OpenPGP Key Manager to make sure the recipient "
1171"is listed there."
e7253b03
TG
1172msgstr ""
1173
1174#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
1175msgid "Unable to send message"
1176msgstr ""
1177
1178#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1179msgid ""
1180"You could get the following message when trying to send your encrypted "
1181"email: \"Unable to send this message with end-to-end encryption, because "
1182"there are problems with the keys of the following recipients: "
9a1f3824
TG
1183"edward-en@fsf.org.\" This usually means you imported the key with the \"Not "
1184"accepted (undecided)\" option. Go to the \"key properties\" of this key by "
1185"right clicking on the key in the OpenPGP Key Manager, and select the option "
1186"<i>Yes, but I have not verified that this is the correct key</i> in the "
1187"\"Acceptance\" option at the bottom of this window. Resend the email."
e7253b03
TG
1188msgstr ""
1189
1190#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
1191msgid "I can't find Edward's key"
eabe8a9a
TS
1192msgstr ""
1193
1194#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
1195msgid ""
1196"Close the pop-ups that have appeared since you clicked Send. Make sure you "
f950b092
TG
1197"are connected to the Internet and try again. If that doesn't work, you can "
1198"download the key manually from <a "
1199"href=\"https://keys.openpgp.org/search?q=edward-en%40fsf.org\">the "
1200"keyserver</a>, and import it by using the <i>Import Public Key(s) from "
1201"File</i> option in the OpenPGP Key Manager."
eabe8a9a
TS
1202msgstr ""
1203
1204#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
1205msgid "Unscrambled messages in the Sent folder"
1206msgstr ""
1207
1208#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
1209msgid ""
1210"Even though you can't decrypt messages encrypted to someone else's key, your "
1211"email program will automatically save a copy encrypted to your public key, "
1212"which you'll be able to view from the Sent folder like a normal email. This "
1213"is normal, and it doesn't mean that your email was not sent encrypted."
1214msgstr ""
1215
eabe8a9a 1216#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
1217msgid "Encrypt messages from the command line"
1218msgstr ""
1219
1220#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
1221msgid ""
1222"You can also encrypt and decrypt messages and files from the <a "
1223"href=\"https://www.gnupg.org/gph/en/manual/x110.html\">command line</a>, if "
1224"that's your preference. The option --armor makes the encrypted output appear "
1225"in the regular character set."
1226msgstr ""
1227
1228#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1229msgid "<em>Important:</em> Security tips"
1230msgstr ""
1231
1232#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1233msgid ""
1234"Even if you encrypt your email, the subject line is not encrypted, so don't "
1235"put private information there. The sending and receiving addresses aren't "
1236"encrypted either, so a surveillance system can still figure out who you're "
1237"communicating with. Also, surveillance agents will know that you're using "
1238"GnuPG, even if they can't figure out what you're saying. When you send "
e7253b03
TG
1239"attachments, you can choose to encrypt them or not, independent of the "
1240"actual email."
eabe8a9a
TS
1241msgstr ""
1242
8c163d47
TG
1243#. type: Content of: <html><body><section><div><div><div><p>
1244msgid ""
1245"For greater security against potential attacks, you can turn off "
1246"HTML. Instead, you can render the message body as plain text. In order to do "
8cd4252b
TG
1247"this in Icedove or Thunderbird, go to \"View\" &rarr; \"Message Body As\" "
1248"&rarr; <i>Plain Text</i>."
e7253b03
TG
1249msgstr ""
1250
1251#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1252msgid "Step 4.C Edward's response"
8c163d47
TG
1253msgstr ""
1254
eabe8a9a 1255#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1256msgid "<em>Step 4.c</em> Receive a response"
eabe8a9a
TS
1257msgstr ""
1258
1259#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1260msgid ""
e7253b03 1261"When Edward receives your email, it will use its private key to decrypt it, "
9ecb61bd 1262"then reply to you."
eabe8a9a
TS
1263msgstr ""
1264
1265#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1266msgid ""
1267"It may take two or three minutes for Edward to respond. In the meantime, you "
e7253b03 1268"might want to skip ahead and check out the <a href=\"#section6\">Use it "
eabe8a9a
TS
1269"Well</a> section of this guide."
1270msgstr ""
1271
e7253b03
TG
1272#. type: Content of: <html><body><section><div><div><div><p>
1273msgid ""
1274"Edward will send you an encrypted email back saying your email was received "
eb9903b9
TG
1275"and decrypted. Your email client will automatically decrypt Edward's "
1276"message."
e7253b03
TG
1277msgstr ""
1278
1279#. type: Content of: <html><body><section><div><div><div><p>
1280msgid ""
1281"The OpenPGP button in the email will show a little green checkmark over the "
098ebaeb 1282"lock symbol to show the message is encrypted, and a little orange warning "
e7253b03
TG
1283"sign which means that you have accepted the key, but not verified it. When "
1284"you have not yet accepted the key, you will see a little question mark "
1285"there. Clicking the prompts in this button will lead you to key properties "
1286"as well."
1287msgstr ""
1288
eabe8a9a 1289#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1290msgid "<em>Step 4.d</em> Send a signed test email"
eabe8a9a
TS
1291msgstr ""
1292
1293#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1294msgid ""
1295"GnuPG includes a way for you to sign messages and files, verifying that they "
1296"came from you and that they weren't tampered with along the way. These "
1297"signatures are stronger than their pen-and-paper cousins -- they're "
1298"impossible to forge, because they're impossible to create without your "
1299"private key (another reason to keep your private key safe)."
1300msgstr ""
1301
1302#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1303msgid ""
1304"You can sign messages to anyone, so it's a great way to make people aware "
1305"that you use GnuPG and that they can communicate with you securely. If they "
1306"don't have GnuPG, they will be able to read your message and see your "
1307"signature. If they do have GnuPG, they'll also be able to verify that your "
1308"signature is authentic."
1309msgstr ""
1310
1311#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1312msgid ""
e7253b03
TG
1313"To sign an email to Edward, compose any message to the email address and "
1314"click the pencil icon next to the lock icon so that it turns gold. If you "
9a1f3824 1315"sign a message, GnuPG may ask you for your passphrase before it sends the "
e7253b03 1316"message, because it needs to unlock your private key for signing."
eabe8a9a
TS
1317msgstr ""
1318
1319#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1320msgid ""
e7253b03 1321"In \"Account Settings\" &rarr; \"End-To-End-Encryption\" you can opt to "
8cd4252b 1322"<i>add digital signature by default</i>."
eabe8a9a
TS
1323msgstr ""
1324
1325#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1326msgid "<em>Step 4.e</em> Receive a response"
eabe8a9a
TS
1327msgstr ""
1328
1329#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1330msgid ""
1331"When Edward receives your email, he will use your public key (which you sent "
9ecb61bd 1332"him in <a href=\"#step-3a\">Step 3.A</a>) to verify the message you sent has "
e7253b03 1333"not been tampered with and to encrypt a reply to you."
eabe8a9a
TS
1334msgstr ""
1335
1336#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1337msgid ""
1338"Edward's reply will arrive encrypted, because he prefers to use encryption "
1339"whenever possible. If everything goes according to plan, it should say "
1340"\"Your signature was verified.\" If your test signed email was also "
1341"encrypted, he will mention that first."
1342msgstr ""
1343
9ecb61bd
TG
1344#. type: Content of: <html><body><section><div><div><div><p>
1345msgid ""
e7253b03
TG
1346"When you receive Edward's email and open it, your email client will "
1347"automatically detect that it is encrypted with your public key, and then it "
1348"will use your private key to decrypt it."
9ecb61bd
TG
1349msgstr ""
1350
e7253b03
TG
1351#. type: Content of: <html><body><section><div><div><h2>
1352msgid "<em>#5</em> Learn about the Web of Trust"
9ecb61bd
TG
1353msgstr ""
1354
e7253b03
TG
1355#. type: Attribute 'alt' of: <html><body><section><div><div><p><img>
1356msgid "Illustration of keys all interconnected with a web of lines"
eabe8a9a
TS
1357msgstr ""
1358
1359#. type: Content of: <html><body><section><div><div><p>
eabe8a9a 1360msgid ""
e7253b03 1361"Email encryption is a powerful technology, but it has a weakness: it "
eabe8a9a
TS
1362"requires a way to verify that a person's public key is actually "
1363"theirs. Otherwise, there would be no way to stop an attacker from making an "
e7253b03 1364"email address with your friend's name, creating keys to go with it, and "
eabe8a9a
TS
1365"impersonating your friend. That's why the free software programmers that "
1366"developed email encryption created keysigning and the Web of Trust."
1367msgstr ""
1368
1369#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1370msgid ""
1371"When you sign someone's key, you are publicly saying that you've verified "
1372"that it belongs to them and not someone else."
1373msgstr ""
1374
1375#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1376msgid ""
1377"Signing keys and signing messages use the same type of mathematical "
1378"operation, but they carry very different implications. It's a good practice "
1379"to generally sign your email, but if you casually sign people's keys, you "
8cd4252b 1380"may accidentally end up vouching for the identity of an imposter."
eabe8a9a
TS
1381msgstr ""
1382
1383#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1384msgid ""
1385"People who use your public key can see who has signed it. Once you've used "
1386"GnuPG for a long time, your key may have hundreds of signatures. You can "
1387"consider a key to be more trustworthy if it has many signatures from people "
1388"that you trust. The Web of Trust is a constellation of GnuPG users, "
1389"connected to each other by chains of trust expressed through signatures."
1390msgstr ""
1391
1392#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
e7253b03 1393msgid "Section 5: trusting a key"
eabe8a9a
TS
1394msgstr ""
1395
1396#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1397msgid "<em>Step 5.a</em> Sign a key"
eabe8a9a
TS
1398msgstr ""
1399
1400#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1401msgid ""
8cd4252b
TG
1402"In your email program's menu, go to OpenPGP Key Manager and select <i>Key "
1403"properties</i> by right clicking on Edward's key."
eabe8a9a
TS
1404msgstr ""
1405
1406#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1407msgid ""
8cd4252b 1408"Under \"Your Acceptance,\" you can select <i>Yes, I've verified in person "
9a1f3824 1409"this key has the correct fingerprint</i>."
eabe8a9a
TS
1410msgstr ""
1411
1412#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1413msgid ""
1414"You've just effectively said \"I trust that Edward's public key actually "
1415"belongs to Edward.\" This doesn't mean much because Edward isn't a real "
e7253b03
TG
1416"person, but it's good practice, and for real people it is important. You can "
1417"read more about signing a person's key in the <a "
1418"href=\"#check-ids-before-signing\">check IDs before signing</a> section."
eabe8a9a
TS
1419msgstr ""
1420
1421#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1422msgid "Identifying keys: Fingerprints and IDs"
1423msgstr ""
1424
1425#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1426msgid ""
1427"People's public keys are usually identified by their key fingerprint, which "
1428"is a string of digits like F357AA1A5B1FA42CFD9FE52A9FF2194CC09A61E8 (for "
1429"Edward's key). You can see the fingerprint for your public key, and other "
e7253b03
TG
1430"public keys saved on your computer, by going to OpenPGP Key Management in "
1431"your email program's menu, then right clicking on the key and choosing Key "
1432"Properties. It's good practice to share your fingerprint wherever you share "
1433"your email address, so that people can double-check that they have the "
1434"correct public key when they download yours from a keyserver."
eabe8a9a
TS
1435msgstr ""
1436
1437#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1438msgid ""
e7253b03
TG
1439"You may also see public keys referred to by a shorter keyID. This keyID is "
1440"visible directly from the Key Management window. These eight character "
1441"keyIDs were previously used for identification, which used to be safe, but "
1442"is no longer reliable. You need to check the full fingerprint as part of "
2fd4a6dc
TG
1443"verifying you have the correct key for the person you are trying to "
1444"contact. Spoofing, in which someone intentionally generates a key with a "
1445"fingerprint whose final eight characters are the same as another, is "
1446"unfortunately common."
eabe8a9a
TS
1447msgstr ""
1448
1449#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1450msgid "<em>Important:</em> What to consider when signing keys"
1451msgstr ""
1452
1453#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1454msgid ""
1455"Before signing a person's key, you need to be confident that it actually "
1456"belongs to them, and that they are who they say they are. Ideally, this "
1457"confidence comes from having interactions and conversations with them over "
1458"time, and witnessing interactions between them and others. Whenever signing "
1459"a key, ask to see the full public key fingerprint, and not just the shorter "
e7253b03 1460"keyID. If you feel it's important to sign the key of someone you've just "
eabe8a9a 1461"met, also ask them to show you their government identification, and make "
e7253b03 1462"sure the name on the ID matches the name on the public key."
eabe8a9a
TS
1463msgstr ""
1464
1465#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
1466msgid "Master the Web of Trust"
1467msgstr ""
1468
1469#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
1470msgid ""
1471"Unfortunately, trust does not spread between users the way <a "
e7253b03
TG
1472"href=\"https://fennetic.net/irc/finney.org/~hal/web_of_trust.html\">many "
1473"people think</a>. One of the best ways to strengthen the GnuPG community is "
1474"to deeply <a "
eabe8a9a
TS
1475"href=\"https://www.gnupg.org/gph/en/manual/x334.html\">understand</a> the "
1476"Web of Trust and to carefully sign as many people's keys as circumstances "
1477"permit."
1478msgstr ""
1479
eabe8a9a 1480#. type: Content of: <html><body><section><div><div><h2>
e7253b03 1481msgid "<em>#6</em> Use it well"
eabe8a9a
TS
1482msgstr ""
1483
1484#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1485msgid ""
1486"Everyone uses GnuPG a little differently, but it's important to follow some "
1487"basic practices to keep your email secure. Not following them, you risk the "
1488"privacy of the people you communicate with, as well as your own, and damage "
1489"the Web of Trust."
1490msgstr ""
1491
1492#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
e7253b03 1493msgid "Section 6: Use it Well (1)"
eabe8a9a
TS
1494msgstr ""
1495
1496#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1497msgid "When should I encrypt? When should I sign?"
1498msgstr ""
1499
1500#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1501msgid ""
1502"The more you can encrypt your messages, the better. If you only encrypt "
1503"emails occasionally, each encrypted message could raise a red flag for "
1504"surveillance systems. If all or most of your email is encrypted, people "
1505"doing surveillance won't know where to start. That's not to say that only "
1506"encrypting some of your email isn't helpful -- it's a great start and it "
1507"makes bulk surveillance more difficult."
1508msgstr ""
1509
1510#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1511msgid ""
1512"Unless you don't want to reveal your own identity (which requires other "
1513"protective measures), there's no reason not to sign every message, whether "
1514"or not you are encrypting. In addition to allowing those with GnuPG to "
1515"verify that the message came from you, signing is a non-intrusive way to "
1516"remind everyone that you use GnuPG and show support for secure "
1517"communication. If you often send signed messages to people that aren't "
1518"familiar with GnuPG, it's nice to also include a link to this guide in your "
1519"standard email signature (the text kind, not the cryptographic kind)."
1520msgstr ""
1521
1522#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
e7253b03 1523msgid "Section 6: Use it Well (2)"
eabe8a9a
TS
1524msgstr ""
1525
1526#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1527msgid "Be wary of invalid keys"
1528msgstr ""
1529
1530#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1531msgid ""
1532"GnuPG makes email safer, but it's still important to watch out for invalid "
1533"keys, which might have fallen into the wrong hands. Email encrypted with "
1534"invalid keys might be readable by surveillance programs."
1535msgstr ""
1536
1537#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1538msgid ""
1539"In your email program, go back to the first encrypted email that Edward sent "
e7253b03 1540"you. Because Edward encrypted it with your public key, it will have a green "
d71144f9 1541"checkmark on the \"OpenPGP\" button."
eabe8a9a
TS
1542msgstr ""
1543
1544#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1545msgid ""
8cd4252b
TG
1546"<strong>When using GnuPG, make a habit of glancing at that button. The "
1547"program will warn you there if you get an email signed with a key that can't "
1548"be trusted.</strong>"
eabe8a9a
TS
1549msgstr ""
1550
1551#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1552msgid "Copy your revocation certificate to somewhere safe"
1553msgstr ""
1554
1555#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1556msgid ""
1557"Remember when you created your keys and saved the revocation certificate "
e7253b03
TG
1558"that GnuPG made? It's time to copy that certificate onto the safest storage "
1559"that you have -- a flash drive, disk, or hard drive stored in a safe place "
1560"in your home could work, not on a device you carry with you regularly. The "
1561"safest way we know is actually to print the revocation certificate and store "
1562"it in a safe place."
eabe8a9a
TS
1563msgstr ""
1564
1565#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1566msgid ""
1567"If your private key ever gets lost or stolen, you'll need this certificate "
1568"file to let people know that you are no longer using that keypair."
1569msgstr ""
1570
1571#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1572msgid "<em>IMPORTANT:</em> ACT SWIFTLY if someone gets your private key"
eabe8a9a
TS
1573msgstr ""
1574
1575#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1576msgid ""
e7253b03 1577"If you lose your private key or someone else gets a hold of it (say, by "
eabe8a9a
TS
1578"stealing or cracking your computer), it's important to revoke it immediately "
1579"before someone else uses it to read your encrypted email or forge your "
1580"signature. This guide doesn't cover how to revoke a key, but you can follow "
1581"these <a "
71b90906 1582"href=\"https://www.hackdiary.com/2004/01/18/revoking-a-gpg-key/\">instructions</a>. "
eabe8a9a
TS
1583"After you're done revoking, make a new key and send an email to everyone "
1584"with whom you usually use your key to make sure they know, including a copy "
1585"of your new key."
1586msgstr ""
1587
71b90906 1588#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1589msgid "Webmail and GnuPG"
1590msgstr ""
1591
71b90906 1592#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1593msgid ""
1594"When you use a web browser to access your email, you're using webmail, an "
1595"email program stored on a distant website. Unlike webmail, your desktop "
1596"email program runs on your own computer. Although webmail can't decrypt "
1597"encrypted email, it will still display it in its encrypted form. If you "
1598"primarily use webmail, you'll know to open your email client when you "
1599"receive a scrambled email."
1600msgstr ""
1601
eabe8a9a 1602#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1603msgid "Make your public key part of your online identity"
eabe8a9a
TS
1604msgstr ""
1605
1606#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1607msgid ""
e7253b03
TG
1608"First add your public key fingerprint to your email signature, then compose "
1609"an email to at least five of your friends, telling them you just set up "
1610"GnuPG and mentioning your public key fingerprint. Link to this guide and ask "
1611"them to join you. Don't forget that there's also an awesome <a "
1612"href=\"infographic.html\">infographic to share.</a>"
eabe8a9a
TS
1613msgstr ""
1614
2fd4a6dc
TG
1615#. type: Content of: <html><body><section><div><div><div><p>
1616msgid ""
e7253b03
TG
1617"Start writing your public key fingerprint anywhere someone would see your "
1618"email address: your social media profiles, blog, Website, or business "
1619"card. (At the Free Software Foundation, we put ours on our <a "
1620"href=\"https://fsf.org/about/staff\">staff page</a>.) We need to get our "
1621"culture to the point that we feel like something is missing when we see an "
1622"email address without a public key fingerprint."
2fd4a6dc
TG
1623msgstr ""
1624
e7253b03
TG
1625#. type: Content of: <html><body><section><div><div><h2>
1626msgid "<a href=\"next_steps.html\">Great job! Check out the next steps.</a>"
eabe8a9a
TS
1627msgstr ""
1628
f51f1d25
TG
1629#. type: Content of: <html><body><footer><div><div><p>
1630msgid ""
1631"Copyright &copy; 2014-2023 <a href=\"https://u.fsf.org/ys\">Free Software "
1632"Foundation</a>, Inc. <a "
1633"href=\"https://my.fsf.org/donate/privacypolicy.html\">Privacy "
1634"Policy</a>. Please support our work by <a "
1635"href=\"https://u.fsf.org/yr\">joining us as an associate member.</a>"
1636msgstr ""
1637
e7253b03
TG
1638#. type: Content of: <html><body><header><div><p>
1639msgid "&larr; Read the <a href=\"index.html\">full guide</a>"
eabe8a9a
TS
1640msgstr ""
1641
e7253b03
TG
1642#. type: Content of: <html><body><header><div><h3><a>
1643msgid ""
1644"<a "
1645"href=\"https://fsf.org/share?u=https://u.fsf.org/zc&amp;t=How%20public-key%20encryption%20works.%20Infographic%20via%20%40fsf\">"
eabe8a9a
TS
1646msgstr ""
1647
e7253b03
TG
1648#. type: Content of: <html><body><header><div><h3>
1649msgid "&nbsp; Share our infographic </a> with the hashtag #EmailSelfDefense"
2fd4a6dc
TG
1650msgstr ""
1651
e7253b03
TG
1652#. type: Attribute 'alt' of: <html><body><header><div><p><img>
1653msgid "View &amp; share our infographic"
1654msgstr ""
1655
eabe8a9a 1656#. type: Content of: <html><body><header><div><h1>
eabe8a9a
TS
1657msgid "Great job!"
1658msgstr ""
1659
1660#. type: Content of: <html><body><section><div><div><h2>
e7253b03 1661msgid "<em>#7</em> Next steps"
eabe8a9a
TS
1662msgstr ""
1663
1664#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1665msgid ""
1666"You've now completed the basics of email encryption with GnuPG, taking "
1667"action against bulk surveillance. These next steps will help make the most "
1668"of the work you've done."
1669msgstr ""
1670
e7253b03
TG
1671#. type: Content of: <html><body><section><div><div><div><p>
1672msgid "&larr; <a href=\"index.html\">Return to the guide</a>"
1673msgstr ""
1674
eabe8a9a 1675#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1676msgid "Join the movement"
1677msgstr ""
1678
1679#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1680msgid ""
1681"You've just taken a huge step towards protecting your privacy online. But "
1682"each of us acting alone isn't enough. To topple bulk surveillance, we need "
1683"to build a movement for the autonomy and freedom of all computer users. Join "
1684"the Free Software Foundation's community to meet like-minded people and work "
1685"together for change."
1686msgstr ""
1687
1688#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1689msgid ""
1690"<small>Read <a href=\"https://www.fsf.org/twitter\">why GNU Social and "
60715780 1691"Mastodon are better than Twitter</a>, and <a "
e7253b03 1692"href=\"https://www.fsf.org/facebook\">why we don't use Facebook</a>.</small>"
eabe8a9a
TS
1693msgstr ""
1694
1695#. type: Content of: <html><body><section><div><div><div><div><p>
eabe8a9a
TS
1696msgid "Low-volume mailing list"
1697msgstr ""
1698
1699#. type: Content of: <html><body><section><div><div><div><div><form>
eabe8a9a 1700msgid ""
9a1f3824
TG
1701"<input type=\"text\" placeholder=\"Type your email...\" "
1702"name=\"email-Primary\" id=\"frmEmail\" /> <input type=\"submit\" value=\"Add "
1703"me\" name=\"_qf_Edit_next\" /> <input type=\"hidden\" "
eabe8a9a
TS
1704"value=\"https://emailselfdefense.fsf.org/en/confirmation.html\" "
1705"name=\"postURL\" /> <input type=\"hidden\" value=\"1\" name=\"group[25]\" /> "
1706"<input type=\"hidden\" "
1707"value=\"https://my.fsf.org/civicrm/profile?reset=1&amp;gid=391\" "
1708"name=\"cancelURL\" /> <input type=\"hidden\" value=\"Edit:cancel\" "
1709"name=\"_qf_default\" />"
1710msgstr ""
1711
1712#. type: Content of: <html><body><section><div><div><div><div><p>
eabe8a9a
TS
1713msgid ""
1714"<small>Read our <a "
1715"href=\"https://my.fsf.org/donate/privacypolicy.html\">privacy "
1716"policy</a>.</small>"
1717msgstr ""
1718
1719#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1720msgid "Bring Email Self-Defense to new people"
1721msgstr ""
1722
1723#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1724msgid ""
1725"Understanding and setting up email encryption is a daunting task for "
1726"many. To welcome them, make it easy to find your public key and offer to "
1727"help with encryption. Here are some suggestions:"
1728msgstr ""
1729
1730#. type: Content of: <html><body><section><div><div><div><ul><li>
eabe8a9a 1731msgid ""
e7253b03 1732"# Lead an Email Self-Defense workshop for your friends and community, using "
eabe8a9a
TS
1733"our <a href=\"workshops.html\">teaching guide</a>."
1734msgstr ""
1735
1736#. type: Content of: <html><body><section><div><div><div><ul><li>
eabe8a9a 1737msgid ""
e7253b03
TG
1738"# Use <a "
1739"href=\"https://fsf.org/share?u=https://u.fsf.org/zb&amp;t=Encrypt%20with%20me%20using%20Email%20Self-Defense%20%40fsf\"> "
1740"our sharing page</a> to compose a message to a few friends and ask them to "
1741"join you in using encrypted email. Remember to include your GnuPG public key "
1742"fingerprint so they can easily download your key."
eabe8a9a
TS
1743msgstr ""
1744
1745#. type: Content of: <html><body><section><div><div><div><ul><li>
eabe8a9a 1746msgid ""
e7253b03 1747"# Add your public key fingerprint anywhere that you normally display your "
eabe8a9a 1748"email address. Some good places are: your email signature (the text kind, "
e7253b03 1749"not the cryptographic kind), social media profiles, blogs, Web sites, or "
eabe8a9a
TS
1750"business cards. At the Free Software Foundation, we put ours on our <a "
1751"href=\"https://fsf.org/about/staff\">staff page</a>."
1752msgstr ""
1753
1754#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1755msgid "Protect more of your digital life"
1756msgstr ""
1757
1758#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1759msgid ""
1760"Learn surveillance-resistant technologies for instant messages, hard drive "
1761"storage, online sharing, and more at <a "
1762"href=\"https://directory.fsf.org/wiki/Collection:Privacy_pack\"> the Free "
1763"Software Directory's Privacy Pack</a> and <a "
1764"href=\"https://prism-break.org\">prism-break.org</a>."
1765msgstr ""
1766
1767#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1768msgid ""
8cd4252b 1769"If you are using Windows, macOS or any other proprietary operating system, "
eabe8a9a
TS
1770"we recommend you switch to a free software operating system like "
1771"GNU/Linux. This will make it much harder for attackers to enter your "
1772"computer through hidden back doors. Check out the Free Software Foundation's "
e7253b03 1773"<a href=\"https://www.gnu.org/distros/free-distros.html\">endorsed versions "
eabe8a9a
TS
1774"of GNU/Linux.</a>"
1775msgstr ""
1776
1777#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1778msgid "Optional: Add more email protection with Tor"
1779msgstr ""
1780
1781#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1782msgid ""
1783"<a href=\"https://www.torproject.org/about/overview.html.en\">The Onion "
1784"Router (Tor) network</a> wraps Internet communication in multiple layers of "
1785"encryption and bounces it around the world several times. When used "
1786"properly, Tor confuses surveillance field agents and the global surveillance "
1787"apparatus alike. Using it simultaneously with GnuPG's encryption will give "
1788"you the best results."
1789msgstr ""
1790
1791#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1792msgid ""
1793"To have your email program send and receive email over Tor, install the <a "
1794"href=\"https://addons.mozilla.org/en-us/thunderbird/addon/torbirdy/\">Torbirdy "
e7253b03 1795"plugin</a> by searching for it through Add-ons."
eabe8a9a
TS
1796msgstr ""
1797
1798#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1799msgid ""
1800"Before beginning to check your email over Tor, make sure you understand <a "
4aec1215
TG
1801"href=\"https://www.torproject.org/docs/faq.html.en#WhatProtectionsDoesTorProvide\"> "
1802"the security tradeoffs involved</a>. This <a "
eabe8a9a
TS
1803"href=\"https://www.eff.org/pages/tor-and-https\">infographic</a> from our "
1804"friends at the Electronic Frontier Foundation demonstrates how Tor keeps you "
1805"secure."
1806msgstr ""
1807
1808#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
e7253b03 1809msgid "Section 7: Next Steps"
eabe8a9a
TS
1810msgstr ""
1811
1812#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1813msgid "Make Email Self-Defense tools even better"
1814msgstr ""
1815
1816#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1817msgid ""
1818"<a href=\"https://libreplanet.org/wiki/GPG_guide/Public_Review\">Leave "
1819"feedback and suggest improvements to this guide</a>. We welcome "
1820"translations, but we ask that you contact us at <a "
1821"href=\"mailto:campaigns@fsf.org\">campaigns@fsf.org</a> before you start, so "
1822"that we can connect you with other translators working in your language."
1823msgstr ""
1824
1825#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1826msgid ""
1827"If you like programming, you can contribute code to <a "
e7253b03 1828"href=\"https://www.gnupg.org/\">GnuPG</a>."
eabe8a9a
TS
1829msgstr ""
1830
1831#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1832msgid ""
1833"To go the extra mile, support the Free Software Foundation so we can keep "
1834"improving Email Self-Defense, and make more tools like it."
1835msgstr ""
1836
1837#. type: Content of: <html><body><header><div><ul><li>
e7253b03 1838msgid "<a href=\"index.html\">Set up guide</a>"
2fd4a6dc
TG
1839msgstr ""
1840
eabe8a9a 1841#. type: Content of: <html><body><header><div><ul><li>
eabe8a9a
TS
1842msgid "<a href=\"workshops.html\" class=\"current\">Teach your friends</a>"
1843msgstr ""
1844
1845#. type: Content of: <html><body><header><div><div><div><p>
eabe8a9a
TS
1846msgid ""
1847"We want to translate this guide into more languages, and make a version for "
1848"encryption on mobile devices. Please donate, and help people around the "
1849"world take the first step towards protecting their privacy with free "
1850"software."
1851msgstr ""
1852
e7253b03
TG
1853#. type: Content of: <html><body><header><div><div><p><a>
1854msgid ""
1855"<a "
1856"href=\"https://crm.fsf.org/civicrm/contribute/transact?reset=1&amp;id=14&amp;pk_campaign=email_self_defense&amp;pk_kwd=guide_donate\">"
1857msgstr ""
1858
eabe8a9a 1859#. type: Attribute 'alt' of: <html><body><header><div><div><p><a><img>
eabe8a9a
TS
1860msgid "View &amp; share our infographic →"
1861msgstr ""
1862
1863#. type: Content of: <html><body><header><div><div><p>
eabe8a9a
TS
1864msgid ""
1865"</a> Understanding and setting up email encryption sounds like a daunting "
1866"task to many people. That's why helping your friends with GnuPG plays such "
1867"an important role in helping spread encryption. Even if only one person "
1868"shows up, that's still one more person using encryption who wasn't "
1869"before. You have the power to help your friends keep their digital love "
1870"letters private, and teach them about the importance of free software. If "
1871"you use GnuPG to send and receive encrypted email, you're a perfect "
1872"candidate for leading a workshop!"
1873msgstr ""
1874
1875#. type: Attribute 'alt' of: <html><body><section><div><div><p><img>
eabe8a9a
TS
1876msgid "A small workshop among friends"
1877msgstr ""
1878
1879#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
1880msgid "<em>#1</em> Get your friends or community interested"
1881msgstr ""
1882
1883#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1884msgid ""
1885"If you hear friends grumbling about their lack of privacy, ask them if "
1886"they're interested in attending a workshop on Email Self-Defense. If your "
1887"friends don't grumble about privacy, they may need some convincing. You "
1888"might even hear the classic \"if you've got nothing to hide, you've got "
1889"nothing to fear\" argument against using encryption."
1890msgstr ""
1891
1892#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1893msgid ""
1894"Here are some talking points you can use to help explain why it's worth it "
1895"to learn GnuPG. Mix and match whichever you think will make sense to your "
1896"community:"
1897msgstr ""
1898
1899#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1900msgid "Strength in numbers"
1901msgstr ""
1902
1903#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1904msgid ""
1905"Each person who chooses to resist mass surveillance with encryption makes it "
1906"easier for others to resist as well. People normalizing the use of strong "
1907"encryption has multiple powerful effects: it means those who need privacy "
1908"the most, like potential whistle-blowers and activists, are more likely to "
1909"learn about encryption. More people using encryption for more things also "
1910"makes it harder for surveillance systems to single out those that can't "
1911"afford to be found, and shows solidarity with those people."
1912msgstr ""
1913
1914#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1915msgid "People you respect may already be using encryption"
1916msgstr ""
1917
1918#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1919msgid ""
1920"Many journalists, whistleblowers, activists, and researchers use GnuPG, so "
1921"your friends might unknowingly have heard of a few people who use it "
1922"already. You can search for \"BEGIN PUBLIC KEY BLOCK\" + keyword to help "
1923"make a list of people and organizations who use GnuPG whom your community "
1924"will likely recognize."
1925msgstr ""
1926
1927#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1928msgid "Respect your friends' privacy"
1929msgstr ""
1930
1931#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1932msgid ""
1933"There's no objective way to judge what constitutes privacy-sensitive "
1934"correspondence. As such, it's better not to presume that just because you "
1935"find an email you sent to a friend innocuous, your friend (or a surveillance "
1936"agent, for that matter!) feels the same way. Show your friends respect by "
1937"encrypting your correspondence with them."
1938msgstr ""
1939
1940#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1941msgid "Privacy technology is normal in the physical world"
1942msgstr ""
1943
1944#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1945msgid ""
1946"In the physical realm, we take window blinds, envelopes, and closed doors "
1947"for granted as ways of protecting our privacy. Why should the digital realm "
1948"be any different?"
1949msgstr ""
1950
1951#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1952msgid "We shouldn't have to trust our email providers with our privacy"
1953msgstr ""
1954
1955#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1956msgid ""
1957"Some email providers are very trustworthy, but many have incentives not to "
1958"protect your privacy and security. To be empowered digital citizens, we need "
1959"to build our own security from the bottom up."
1960msgstr ""
1961
1962#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
1963msgid "<em>#2</em> Plan The Workshop"
1964msgstr ""
1965
1966#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1967msgid ""
1968"Once you've got at least one interested friend, pick a date and start "
1969"planning out the workshop. Tell participants to bring their computer and ID "
1970"(for signing each other's keys). If you'd like to make it easy for the "
e7253b03
TG
1971"participants to use <a "
1972"href=\"https://theintercept.com/2015/03/26/passphrases-can-memorize-attackers-cant-guess/\">Diceware</a> "
d71144f9 1973"for choosing passphrases, get a pack of dice beforehand. Make sure the "
e7253b03
TG
1974"location you select has an easily accessible Internet connection, and make "
1975"backup plans in case the connection stops working on the day of the "
1976"workshop. Libraries, coffee shops, and community centers make great "
1977"locations. Try to get all the participants to set up an email client based "
1978"on Thunderbird before the event. Direct them to their email provider's IT "
1979"department or help page if they run into errors."
eabe8a9a
TS
1980msgstr ""
1981
1982#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1983msgid ""
1984"Estimate that the workshop will take at least forty minutes plus ten minutes "
1985"for each participant. Plan extra time for questions and technical glitches."
1986msgstr ""
1987
1988#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1989msgid ""
1990"The success of the workshop requires understanding and catering to the "
1991"unique backgrounds and needs of each group of participants. Workshops should "
1992"stay small, so that each participant receives more individualized "
1993"instruction. If more than a handful of people want to participate, keep the "
1994"facilitator to participant ratio high by recruiting more facilitators, or by "
1995"facilitating multiple workshops. Small workshops among friends work great!"
1996msgstr ""
1997
1998#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
1999msgid "<em>#3</em> Follow the guide as a group"
2000msgstr ""
2001
2002#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2003msgid ""
2004"Work through the Email Self-Defense guide a step at a time as a group. Talk "
2005"about the steps in detail, but make sure not to overload the participants "
2006"with minutia. Pitch the bulk of your instructions to the least tech-savvy "
2007"participants. Make sure all the participants complete each step before the "
2008"group moves on to the next one. Consider facilitating secondary workshops "
2009"afterwards for people that had trouble grasping the concepts, or those that "
2010"grasped them quickly and want to learn more."
2011msgstr ""
2012
2013#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2014msgid ""
2015"In <a href=\"index.html#section2\">Section 2</a> of the guide, make sure the "
2016"participants upload their keys to the same keyserver so that they can "
2017"immediately download each other's keys later (sometimes there is a delay in "
2018"synchronization between keyservers). During <a "
2019"href=\"index.html#section3\">Section 3</a>, give the participants the option "
2020"to send test messages to each other instead of or as well as "
2021"Edward. Similarly, in <a href=\"index.html#section4\">Section 4</a>, "
2022"encourage the participants to sign each other's keys. At the end, make sure "
2023"to remind people to safely back up their revocation certificates."
2024msgstr ""
2025
2026#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
2027msgid "<em>#4</em> Explain the pitfalls"
2028msgstr ""
2029
2030#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2031msgid ""
2032"Remind participants that encryption works only when it's explicitly used; "
2033"they won't be able to send an encrypted email to someone who hasn't already "
2034"set up encryption. Also remind participants to double-check the encryption "
2035"icon before hitting send, and that subjects and timestamps are never "
2036"encrypted."
2037msgstr ""
2038
2039#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2040msgid ""
2041"Explain the <a "
2042"href=\"https://www.gnu.org/proprietary/proprietary.html\">dangers of running "
2043"a proprietary system</a> and advocate for free software, because without it, "
2044"we can't <a "
2045"href=\"https://www.fsf.org/bulletin/2013/fall/how-can-free-software-protect-us-from-surveillance\">meaningfully "
2046"resist invasions of our digital privacy and autonomy</a>."
2047msgstr ""
2048
2049#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
2050msgid "<em>#5</em> Share additional resources"
2051msgstr ""
2052
2053#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2054msgid ""
2055"GnuPG's advanced options are far too complex to teach in a single "
2056"workshop. If participants want to know more, point out the advanced "
2057"subsections in the guide and consider organizing another workshop. You can "
2058"also share <a "
e7253b03
TG
2059"href=\"https://www.gnupg.org/documentation/index.html\">GnuPG's</a> official "
2060"documentation and mailing lists, and the <a "
2061"href=\"https://libreplanet.org/wiki/GPG_guide/Public_Review\">Email "
2062"Self-Defense feedback</a> page. Many GNU/Linux distribution's Web sites also "
2063"contain a page explaining some of GnuPG's advanced features."
eabe8a9a
TS
2064msgstr ""
2065
2066#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
2067msgid "<em>#6</em> Follow up"
2068msgstr ""
2069
2070#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2071msgid ""
2072"Make sure everyone has shared email addresses and public key fingerprints "
2073"before they leave. Encourage the participants to continue to gain GnuPG "
2074"experience by emailing each other. Send them each an encrypted email one "
2075"week after the event, reminding them to try adding their public key ID to "
2076"places where they publicly list their email address."
2077msgstr ""
2078
2079#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2080msgid ""
2081"If you have any suggestions for improving this workshop guide, please let us "
2082"know at <a href=\"mailto:campaigns@fsf.org\">campaigns@fsf.org</a>."
2083msgstr ""