en: apply fixes by Besnik and Tom (Typo Re: Substantial update...)
[enc.git] / esd-temp.pot
CommitLineData
db1d71be
TG
1# SOME DESCRIPTIVE TITLE
2# Copyright (C) YEAR Free Software Foundation, Inc.
3# This file is distributed under the same license as the PACKAGE package.
eabe8a9a
TS
4# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
5#
6#, fuzzy
7msgid ""
8msgstr ""
db1d71be 9"Project-Id-Version: PACKAGE VERSION\n"
29139735 10"POT-Creation-Date: 2022-09-21 20:43+0200\n"
eabe8a9a
TS
11"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
12"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
13"Language-Team: LANGUAGE <LL@li.org>\n"
14"Language: \n"
15"MIME-Version: 1.0\n"
16"Content-Type: text/plain; charset=UTF-8\n"
17"Content-Transfer-Encoding: 8bit\n"
18
71b90906
TG
19#. type: Attribute 'lang' of: <html>
20msgid "en"
21msgstr ""
22
a8687551
TS
23#. type: Attribute 'content' of: <html><head><meta>
24msgid "text/html; charset=utf-8"
25msgstr ""
26
eabe8a9a 27#. type: Content of: <html><head><title>
eabe8a9a
TS
28msgid "Email Self-Defense - a guide to fighting surveillance with GnuPG encryption"
29msgstr ""
30
a8687551 31#. type: Attribute 'content' of: <html><head><meta>
8cd4252b
TG
32msgid ""
33"GnuPG, GPG, openpgp, surveillance, privacy, email, security, GnuPG2, "
34"encryption"
a8687551
TS
35msgstr ""
36
37#. type: Attribute 'content' of: <html><head><meta>
38msgid ""
39"Email surveillance violates our fundamental rights and makes free speech "
40"risky. This guide will teach you email self-defense in 40 minutes with "
41"GnuPG."
42msgstr ""
43
44#. type: Attribute 'content' of: <html><head><meta>
45msgid "width=device-width, initial-scale=1"
46msgstr ""
47
eabe8a9a 48#. type: Content of: <html><body><header><div><p>
eabe8a9a
TS
49msgid ""
50"<strong>Please check your email for a confirmation link now. Thanks for "
51"joining our list!</strong>"
52msgstr ""
53
54#. type: Content of: <html><body><header><div><p>
eabe8a9a
TS
55msgid ""
56"If you don't receive the confirmation link, send us an email at info@fsf.org "
57"to be added manually."
58msgstr ""
59
e7253b03 60#. type: Attribute 'alt' of: <html><body><header><div><p><img>
eabe8a9a
TS
61msgid "Try it out."
62msgstr ""
63
64#. type: Content of: <html><body><header><div><p>
eabe8a9a
TS
65msgid "Join us on microblogging services for day-to-day updates:"
66msgstr ""
67
68#. type: Content of: <html><body><section><div><div><div><p><a>
eabe8a9a
TS
69msgid "<a href=\"https://status.fsf.org/fsf\">"
70msgstr ""
71
72#. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
eabe8a9a
TS
73msgid "[GNU Social]"
74msgstr ""
75
76#. type: Content of: <html><body><section><div><div><div><p><a>
60715780 77msgid "&nbsp;GNU Social</a>&nbsp; |&nbsp; <a href=\"https://hostux.social/@fsf\">"
eabe8a9a
TS
78msgstr ""
79
80#. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
60715780 81msgid "[Mastodon]"
eabe8a9a
TS
82msgstr ""
83
84#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 85msgid ""
60715780 86"&nbsp;Mastodon</a>&nbsp; |&nbsp; <a "
eabe8a9a
TS
87"href=\"https://www.twitter.com/fsf\">Twitter</a>"
88msgstr ""
89
90#. type: Content of: <html><body><header><div><p>
eabe8a9a
TS
91msgid ""
92"<small><a href=\"https://www.fsf.org/twitter\">Read why GNU Social and "
60715780 93"Mastodon are better than Twitter.</a></small>"
eabe8a9a
TS
94msgstr ""
95
96#. type: Content of: <html><body><header><div><p>
eabe8a9a
TS
97msgid "&larr; Return to <a href=\"index.html\">Email Self-Defense</a>"
98msgstr ""
99
100#. type: Content of: <html><body><footer><div><div><h4><a>
eabe8a9a
TS
101msgid "<a href=\"https://u.fsf.org/ys\">"
102msgstr ""
103
104#. type: Attribute 'alt' of: <html><body><footer><div><div><h4><a><img>
eabe8a9a
TS
105msgid "Free Software Foundation"
106msgstr ""
107
108#. type: Content of: <html><body><footer><div><p>
eabe8a9a
TS
109msgid "</a>"
110msgstr ""
111
112#. type: Content of: <html><body><footer><div><div><p>
eabe8a9a 113msgid ""
e7253b03 114"Copyright &copy; 2014-2021 <a href=\"https://u.fsf.org/ys\">Free Software "
eabe8a9a
TS
115"Foundation</a>, Inc. <a "
116"href=\"https://my.fsf.org/donate/privacypolicy.html\">Privacy "
117"Policy</a>. Please support our work by <a "
118"href=\"https://u.fsf.org/yr\">joining us as an associate member.</a>"
119msgstr ""
120
121#. type: Content of: <html><body><footer><div><div><p>
eabe8a9a
TS
122msgid ""
123"The images on this page are under a <a "
124"href=\"https://creativecommons.org/licenses/by/4.0/\">Creative Commons "
125"Attribution 4.0 license (or later version)</a>, and the rest of it is under "
126"a <a href=\"https://creativecommons.org/licenses/by-sa/4.0\">Creative "
127"Commons Attribution-ShareAlike 4.0 license (or later version)</a>. Download "
128"the <a "
e7253b03 129"href=\"https://agpl.fsf.org/emailselfdefense.fsf.org/edward/CURRENT/edward.tar.gz\"> "
4aec1215 130"source code of Edward reply bot</a> by Andrew Engelbrecht "
8c6a812e 131"&lt;andrew@engelbrecht.io&gt; and Josh Drake &lt;zamnedix@gnu.org&gt;, "
eabe8a9a 132"available under the GNU Affero General Public License. <a "
e7253b03 133"href=\"https://www.gnu.org/licenses/license-list.html#OtherLicenses\">Why "
eabe8a9a
TS
134"these licenses?</a>"
135msgstr ""
136
137#. type: Content of: <html><body><footer><div><div><p>
eabe8a9a
TS
138msgid ""
139"Fonts used in the guide &amp; infographic: <a "
140"href=\"https://www.google.com/fonts/specimen/Dosis\">Dosis</a> by Pablo "
141"Impallari, <a "
e7253b03 142"href=\"https://www.google.com/fonts/specimen/Signika\">Signika</a> by Anna "
eabe8a9a 143"Giedry&#347;, <a "
e7253b03 144"href=\"https://www.google.com/fonts/specimen/Archivo+Narrow\">Archivo "
eabe8a9a
TS
145"Narrow</a> by Omnibus-Type, <a "
146"href=\"https://libreplanet.org/wiki/GPG_guide/Graphics_Howto#Pitfalls\">PXL-2000</a> "
147"by Florian Cramer."
148msgstr ""
149
150#. type: Content of: <html><body><footer><div><div><p>
eabe8a9a
TS
151msgid ""
152"Download the <a href=\"emailselfdefense_source.zip\">source package</a> for "
153"this guide, including fonts, image source files and the text of Edward's "
154"messages."
155msgstr ""
156
157#. type: Content of: <html><body><footer><div><div><p>
eabe8a9a
TS
158msgid ""
159"This site uses the Weblabels standard for labeling <a "
160"href=\"https://www.fsf.org/campaigns/freejs\">free JavaScript</a>. View the "
e7253b03 161"JavaScript <a href=\"https://weblabels.fsf.org/emailselfdefense.fsf.org/\" "
eabe8a9a
TS
162"rel=\"jslicense\">source code and license information</a>."
163msgstr ""
164
165#. type: Content of: <html><body><footer><div><p><a>
eabe8a9a
TS
166msgid ""
167"Infographic and guide design by <a rel=\"external\" "
e7253b03 168"href=\"https://jplusplus.org\"><strong>Journalism++</strong>"
eabe8a9a
TS
169msgstr ""
170
171#. type: Attribute 'alt' of: <html><body><footer><div><p><a><img>
eabe8a9a
TS
172msgid "Journalism++"
173msgstr ""
174
e7253b03
TG
175#. type: Content of: <html><body><header><div><h1>
176msgid "Email Self-Defense"
71b90906
TG
177msgstr ""
178
eabe8a9a 179#. type: Content of: <html><body><header><div><ul><li>
eabe8a9a 180msgid ""
8cd4252b
TG
181"<strong><a "
182"href=\"https://libreplanet.org/wiki/GPG_guide/Translation_Guide\"> "
183"Translate!</a></strong>"
eabe8a9a
TS
184msgstr ""
185
186#. type: Content of: <html><body><header><div><ul><li>
e7253b03 187msgid "<a href=\"index.html\" class=\"current\">Set up guide</a>"
eabe8a9a
TS
188msgstr ""
189
190#. type: Content of: <html><body><header><div><ul><li>
eabe8a9a
TS
191msgid "<a href=\"workshops.html\">Teach your friends</a>"
192msgstr ""
193
29139735
TG
194#. type: Content of: <html><body><header><div><ul><li>
195msgid ""
196"<a "
197"href=\"http://hhldo3tnt5solzj2bwfvh7xm4slk2forpjwjyemhcfrlob5gq75gioid.onion/en\" "
198"target=\"_blank\">This site's tor onion service</a>"
199msgstr ""
200
eabe8a9a 201#. type: Content of: <html><body><header><div><ul><li><a>
eabe8a9a 202msgid ""
e7253b03
TG
203"<a "
204"href=\"https://fsf.org/share?u=https://u.fsf.org/zb&amp;t=Email%20encryption%20for%20everyone%20via%20%40fsf\"> "
205"Share&nbsp;"
eabe8a9a
TS
206msgstr ""
207
208#. type: Content of: <html><body><header><div><ul><li><a>
eabe8a9a
TS
209msgid "&nbsp;"
210msgstr ""
211
212#. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
eabe8a9a
TS
213msgid "[Reddit]"
214msgstr ""
215
216#. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
eabe8a9a
TS
217msgid "[Hacker News]"
218msgstr ""
219
eabe8a9a 220#. type: Content of: <html><body><header><div><div><div><p>
eabe8a9a
TS
221msgid ""
222"We fight for computer users' rights, and promote the development of free (as "
223"in freedom) software. Resisting bulk surveillance is very important to us."
224msgstr ""
225
226#. type: Content of: <html><body><header><div><div><div><p>
eabe8a9a 227msgid ""
71b90906 228"<strong>Please donate to support Email Self-Defense. We need to keep "
be1ae08b 229"improving it, and making more materials, for the benefit of people around "
71b90906 230"the world taking the first step towards protecting their privacy.</strong>"
eabe8a9a
TS
231msgstr ""
232
e7253b03 233#. type: Content of: <html><body><section><div><div><div><p><a>
eabe8a9a
TS
234msgid ""
235"<a "
e7253b03 236"href=\"https://crm.fsf.org/civicrm/contribute/transact?reset=1&amp;id=14&amp;mtm_campaign=email_self_defense&amp;mtm_kwd=guide_donate\">"
eabe8a9a
TS
237msgstr ""
238
239#. type: Attribute 'alt' of: <html><body><header><div><div><p><a><img>
eabe8a9a
TS
240msgid "Donate"
241msgstr ""
242
7f65cb9f
TG
243#. type: Content of: <html><body><header><div><div><div><h5>
244msgid "Sign up"
245msgstr ""
246
247#. type: Content of: <html><body><header><div><div><div><form><p>
248msgid "Enter your email address to receive our monthly newsletter, the"
249msgstr ""
250
eceb2f13 251#. type: Content of: <html><body><header><div><div><div><form><p>
7f65cb9f
TG
252msgid ""
253"<a href=\"https://www.fsf.org/free-software-supporter/\">Free Software "
254"Supporter</a>"
255msgstr ""
256
257#. type: Content of: <html><body><header><div><div><div><form><p>
258msgid ""
259"<input id=\"frmEmail\" type=\"text\" name=\"email-Primary\" size=\"18\" "
260"maxlength=\"80\" />"
261msgstr ""
262
263#. type: Content of: <html><body><header><div><div><div><form><p>
264msgid "<input type=\"submit\" name=\"_qf_Edit_next\" value=\"Subscribe me\" />"
265msgstr ""
266
267#. type: Content of: <html><body><header><div><div><div><form><div>
268msgid ""
269"<input name=\"postURL\" type=\"hidden\" value=\"\" /> <input type=\"hidden\" "
270"name=\"group[25]\" value=\"1\" /> <input name=\"cancelURL\" type=\"hidden\" "
eceb2f13 271"value=\"https://my.fsf.org/civicrm/profile?reset=1&amp;gid=31\" /> <input "
7f65cb9f
TG
272"name=\"_qf_default\" type=\"hidden\" value=\"Edit:cancel\" />"
273msgstr ""
274
974f8f55 275#. type: Content of: <html><body><header><div><div><p><a>
eabe8a9a
TS
276msgid "<a id=\"infographic\" href=\"infographic.html\">"
277msgstr ""
278
e7253b03 279#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><a><img>
eabe8a9a
TS
280msgid "View &amp; share our infographic &rarr;"
281msgstr ""
282
283#. type: Content of: <html><body><header><div><div><p>
eabe8a9a 284msgid ""
71b90906 285"</a> Bulk surveillance violates our fundamental rights and makes free speech "
eabe8a9a
TS
286"risky. This guide will teach you a basic surveillance self-defense skill: "
287"email encryption. Once you've finished, you'll be able to send and receive "
d3d12736
TG
288"emails that are scrambled to make sure a surveillance agent or thief "
289"intercepting your email can't read them. All you need is a computer with an "
290"Internet connection, an email account, and about forty minutes."
eabe8a9a
TS
291msgstr ""
292
293#. type: Content of: <html><body><header><div><div><p>
eabe8a9a
TS
294msgid ""
295"Even if you have nothing to hide, using encryption helps protect the privacy "
296"of people you communicate with, and makes life difficult for bulk "
297"surveillance systems. If you do have something important to hide, you're in "
298"good company; these are the same tools that whistleblowers use to protect "
e7253b03 299"their identities while shining light on human rights abuses, corruption, and "
eabe8a9a
TS
300"other crimes."
301msgstr ""
302
303#. type: Content of: <html><body><header><div><div><p>
eabe8a9a
TS
304msgid ""
305"In addition to using encryption, standing up to surveillance requires "
306"fighting politically for a <a "
e7253b03 307"href=\"https://gnu.org/philosophy/surveillance-vs-democracy.html\">reduction "
eabe8a9a
TS
308"in the amount of data collected on us</a>, but the essential first step is "
309"to protect yourself and make surveillance of your communication as difficult "
310"as possible. This guide helps you do that. It is designed for beginners, but "
311"if you already know the basics of GnuPG or are an experienced free software "
312"user, you'll enjoy the advanced tips and the <a "
313"href=\"workshops.html\">guide to teaching your friends</a>."
314msgstr ""
315
316#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
317msgid "<em>#1</em> Get the pieces"
318msgstr ""
319
320#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
321msgid ""
322"This guide relies on software which is <a "
323"href=\"https://www.gnu.org/philosophy/free-sw.html\">freely licensed</a>; "
324"it's completely transparent and anyone can copy it or make their own "
325"version. This makes it safer from surveillance than proprietary software "
e7253b03 326"(like Windows or macOS). Learn more about free software at <a "
eabe8a9a
TS
327"href=\"https://u.fsf.org/ys\">fsf.org</a>."
328msgstr ""
329
330#. type: Content of: <html><body><section><div><div><p>
eabe8a9a 331msgid ""
e7253b03
TG
332"Most GNU/Linux operating systems come with GnuPG installed on them, so if "
333"you're running one of these systems, you don't have to download it. If "
db1d71be 334"you're running macOS or Windows, steps to download GnuPG are below. Before "
e7253b03
TG
335"configuring your encryption setup with this guide, though, you'll need a "
336"desktop email program installed on your computer. Many GNU/Linux "
337"distributions have one installed already, such as Icedove, which may be "
338"under the alternate name \"Thunderbird.\" Programs like these are another "
339"way to access the same email accounts you can access in a browser (like "
340"Gmail), but provide extra features."
eabe8a9a
TS
341msgstr ""
342
eabe8a9a 343#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
eabe8a9a
TS
344msgid "Step 1.A: Install Wizard"
345msgstr ""
346
347#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
348msgid "<em>Step 1.a</em> Set up your email program with your email account"
349msgstr ""
350
351#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 352msgid ""
71b90906 353"Open your email program and follow the wizard (step-by-step walkthrough) "
e7253b03
TG
354"that sets it up with your email account. This usually starts from \"Account "
355"Settings\" &rarr; \"Add Mail Account\". You should get the email server "
356"settings from your systems administrator or the help section of your email "
357"account."
eabe8a9a
TS
358msgstr ""
359
360#. type: Content of: <html><body><section><div><div><div><div><h4>
eabe8a9a
TS
361msgid "Troubleshooting"
362msgstr ""
363
364#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
365msgid "The wizard doesn't launch"
366msgstr ""
367
368#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
369msgid ""
370"You can launch the wizard yourself, but the menu option for doing so is "
371"named differently in each email program. The button to launch it will be in "
372"the program's main menu, under \"New\" or something similar, titled "
373"something like \"Add account\" or \"New/Existing email account.\""
374msgstr ""
375
376#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
377msgid "The wizard can't find my account or isn't downloading my mail"
378msgstr ""
379
380#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
381msgid ""
382"Before searching the Web, we recommend you start by asking other people who "
383"use your email system, to figure out the correct settings."
384msgstr ""
385
e7253b03
TG
386#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
387msgid "I can't find the menu"
388msgstr ""
389
390#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
391msgid ""
392"In many new email programs, the main menu is represented by an image of "
393"three stacked horizontal bars."
394msgstr ""
395
eabe8a9a 396#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
397msgid "Don't see a solution to your problem?"
398msgstr ""
399
400#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
401msgid ""
402"Please let us know on the <a "
403"href=\"https://libreplanet.org/wiki/GPG_guide/Public_Review\">feedback "
404"page</a>."
405msgstr ""
406
e7253b03 407#. type: Content of: <html><body><section><div><div><div><h3>
b2c34a2a 408msgid "<em>Step 1.b</em> Install GnuPG"
eabe8a9a
TS
409msgstr ""
410
e7253b03
TG
411#. type: Content of: <html><body><section><div><div><div><p>
412msgid ""
413"If you are using a GNU/Linux machine, you should already have GnuPG "
b2c34a2a 414"installed, and you can skip to <a href=\"#section2\">Section 2</a>."
eabe8a9a
TS
415msgstr ""
416
e7253b03
TG
417#. type: Content of: <html><body><section><div><div><div><p>
418msgid ""
419"If you are using a macOS or Windows machine, however, you need to first "
420"install the GnuPG program. Select your operating system below and follow the "
b2c34a2a
TG
421"instructions. For the rest of this guide, the steps are the same for all "
422"operating systems."
eabe8a9a
TS
423msgstr ""
424
e7253b03 425#. type: Content of: <html><body><section><div><div><div><div><h4>
8cd4252b 426msgid "macOS"
eabe8a9a
TS
427msgstr ""
428
e7253b03
TG
429#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
430msgid "Use a third-party package manager to install GnuPG"
eabe8a9a
TS
431msgstr ""
432
b2c34a2a 433#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
eabe8a9a 434msgid ""
b2c34a2a
TG
435"The default macOS package manager makes it difficult to install GnuPG and "
436"other pieces of free software (like Emacs, GIMP, or Inkscape). To make "
437"things easier, we recommend setting up the third-party package manager "
438"\"Homebrew\" to install GnuPG. For this, we will use a program called "
674646df 439"\"Terminal,\" which is pre-installed on macOS."
eabe8a9a
TS
440msgstr ""
441
b2c34a2a 442#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8c163d47 443msgid ""
b2c34a2a
TG
444"# Copy the first command on the home page of <a "
445"href=\"https://brew.sh/\">Homebrew</a> by clicking on the clipboard icon, "
446"and paste it in Terminal. Click \"Enter\" and wait for the installation to "
447"finalize."
2fd4a6dc
TG
448msgstr ""
449
b2c34a2a
TG
450#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
451msgid "# Then install GnuPG by entering the following code in Terminal:"
eabe8a9a
TS
452msgstr ""
453
b2c34a2a
TG
454#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
455msgid "<code>brew install gnupg gnupg2</code>"
e7253b03
TG
456msgstr ""
457
458#. type: Content of: <html><body><section><div><div><div><div><h4>
459msgid "Windows"
eabe8a9a
TS
460msgstr ""
461
462#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 463msgid "Get GnuPG by downloading GPG4Win"
eabe8a9a
TS
464msgstr ""
465
2094a53c 466#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
eabe8a9a 467msgid ""
2094a53c 468"<a href=\"https://www.gpg4win.org/\">GPG4Win</a> is an email and file "
e7253b03
TG
469"encryption software package that includes GnuPG. Download and install the "
470"latest version, choosing default options whenever asked. After it's "
471"installed, you can close any windows that it creates."
472msgstr ""
473
e7253b03
TG
474#. type: Content of: <html><body><section><div><div><div><h3>
475msgid "GnuPG, OpenPGP, what?"
476msgstr ""
477
478#. type: Content of: <html><body><section><div><div><div><p>
479msgid ""
480"In general, the terms GnuPG, GPG, GNU Privacy Guard, OpenPGP and PGP are "
481"used interchangeably. Technically, OpenPGP (Pretty Good Privacy) is the "
482"encryption standard, and GNU Privacy Guard (often shortened to GPG or GnuPG) "
483"is the program that implements the standard. Most email programs provide an "
484"interface for GnuPG. There is also a newer version of GnuPG, called GnuPG2."
eabe8a9a
TS
485msgstr ""
486
487#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
488msgid "<em>#2</em> Make your keys"
489msgstr ""
490
e7253b03
TG
491#. type: Attribute 'alt' of: <html><body><section><div><div><p><img>
492msgid "A robot with a head shaped like a key holding a private and a public key"
493msgstr ""
494
eabe8a9a 495#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
496msgid ""
497"To use the GnuPG system, you'll need a public key and a private key (known "
498"together as a keypair). Each is a long string of randomly generated numbers "
499"and letters that are unique to you. Your public and private keys are linked "
500"together by a special mathematical function."
501msgstr ""
502
503#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
504msgid ""
505"Your public key isn't like a physical key, because it's stored in the open "
506"in an online directory called a keyserver. People download it and use it, "
507"along with GnuPG, to encrypt emails they send to you. You can think of the "
508"keyserver as a phonebook; people who want to send you encrypted email can "
509"look up your public key."
510msgstr ""
511
512#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
513msgid ""
514"Your private key is more like a physical key, because you keep it to "
515"yourself (on your computer). You use GnuPG and your private key together to "
8cd4252b
TG
516"descramble encrypted emails other people send to you. <strong>You should "
517"never share your private key with anyone, under any circumstances.</strong>"
eabe8a9a
TS
518msgstr ""
519
520#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
521msgid ""
522"In addition to encryption and decryption, you can also use these keys to "
523"sign messages and check the authenticity of other people's signatures. We'll "
524"discuss this more in the next section."
525msgstr ""
526
527#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
e7253b03
TG
528msgid "Step 2.A: Make your Keypair"
529msgstr ""
530
531#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
532msgid "Step 2.A: Set your passphrase"
eabe8a9a
TS
533msgstr ""
534
535#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
536msgid "<em>Step 2.a</em> Make a keypair"
537msgstr ""
538
8cd4252b 539#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03
TG
540msgid "Make your keypair"
541msgstr ""
542
eabe8a9a 543#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 544msgid ""
b2c34a2a
TG
545"We will use the command line in a terminal to create a keypair using the "
546"GnuPG program."
eabe8a9a
TS
547msgstr ""
548
e7253b03 549#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 550msgid ""
b2c34a2a
TG
551"Whether on GNU/Linux, macOS or Windows, you can launch your terminal "
552"(\"Terminal\" in macOS, \"PowerShell\" in Windows) from the Applications "
553"menu (some GNU/Linux systems respond to the <kbd>Ctrl + Alt + T</kbd> "
554"shortcut)."
eabe8a9a
TS
555msgstr ""
556
e7253b03 557#. type: Content of: <html><body><section><div><div><div><p>
b2c34a2a 558msgid "# Enter <code>gpg --full-generate-key</code> to start the process."
eabe8a9a
TS
559msgstr ""
560
e7253b03 561#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 562msgid ""
e7253b03 563"# To answer what kind of key you would like to create, select the default "
8cd4252b 564"option: <samp>1&nbsp;RSA&nbsp;and&nbsp;RSA</samp>."
eabe8a9a
TS
565msgstr ""
566
e7253b03 567#. type: Content of: <html><body><section><div><div><div><p>
8cd4252b 568msgid "# Enter the following keysize: <code>4096</code> for a strong key."
e7253b03
TG
569msgstr ""
570
571#. type: Content of: <html><body><section><div><div><div><p>
b2c34a2a 572msgid "# Choose the expiration date; we suggest <code>2y</code> (2 years)."
e7253b03
TG
573msgstr ""
574
575#. type: Content of: <html><body><section><div><div><div><p>
576msgid "Follow the prompts to continue setting up with your personal details."
577msgstr ""
578
39ad5485
TG
579#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
580msgid ""
581"Depending on your version of GPG, you may need to use <code>--gen-key</code> "
1c3b81e7 582"instead of <code>--full-generate-key</code>&#65279;."
39ad5485
TG
583msgstr ""
584
8cd4252b 585#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03
TG
586msgid "Set your passphrase"
587msgstr ""
588
589#. type: Content of: <html><body><section><div><div><div><p>
590msgid ""
591"On the screen titled \"Passphrase,\" pick a strong password! You can do it "
eabe8a9a
TS
592"manually, or you can use the Diceware method. Doing it manually is faster "
593"but not as secure. Using Diceware takes longer and requires dice, but "
4aec1215
TG
594"creates a password that is much harder for attackers to figure out. To use "
595"it, read the section \"Make a secure passphrase with Diceware\" in <a "
596"href=\"https://theintercept.com/2015/03/26/passphrases-can-memorize-attackers-cant-guess/\"> "
597"this article</a> by Micah Lee."
eabe8a9a
TS
598msgstr ""
599
600#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 601msgid ""
e7253b03 602"If you'd like to pick a passphrase manually, come up with something you can "
eabe8a9a
TS
603"remember which is at least twelve characters long, and includes at least one "
604"lower case and upper case letter and at least one number or punctuation "
605"symbol. Never pick a password you've used elsewhere. Don't use any "
606"recognizable patterns, such as birthdays, telephone numbers, pets' names, "
607"song lyrics, quotes from books, and so on."
608msgstr ""
609
eabe8a9a 610#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 611msgid "GnuPG is not installed"
eabe8a9a
TS
612msgstr ""
613
614#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a 615msgid ""
b2c34a2a
TG
616"You can check if this is the case with the command <code>gpg "
617"--version</code>&#65279;. If GnuPG is not installed, it will bring up the "
618"following result on most GNU/Linux operating systems, or something like it: "
619"<samp>Command 'gpg' not found, but can be installed with: sudo apt install "
620"gnupg</samp>. Follow that command and install the program."
eabe8a9a
TS
621msgstr ""
622
f950b092
TG
623#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
624msgid "<i>gpg --full-generate-key</i> command not working"
625msgstr ""
626
627#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
628msgid ""
629"Some distributions use a different version of GPG. When you receive an error "
630"code that is something along the lines of: <samp>gpg: Invalid option "
631"\"--full-generate-key\"</samp>, you can try the following commands:"
632msgstr ""
633
634#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
635msgid "<code>sudo apt update</code>"
636msgstr ""
637
638#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
639msgid "<code>sudo apt install gnupg2</code>"
640msgstr ""
641
642#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
643msgid "<code>gpg2 --full-generate-key</code>"
644msgstr ""
645
646#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
647msgid ""
648"If this resolved the issue, you need to continue to use the gpg2 identifier "
649"instead of gpg throughout the following steps of the guide."
650msgstr ""
651
eabe8a9a 652#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 653msgid "I took too long to create my passphrase"
eabe8a9a
TS
654msgstr ""
655
656#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a 657msgid ""
e7253b03
TG
658"That's okay. It's important to think about your passphrase. When you're "
659"ready, just follow the steps from the beginning again to create your key."
eabe8a9a
TS
660msgstr ""
661
662#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 663msgid "How can I see my key?"
eabe8a9a
TS
664msgstr ""
665
666#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a 667msgid ""
b2c34a2a
TG
668"Use the following command to see all keys: <code>gpg "
669"--list-keys</code>&#65279;. Yours should be listed in there, and later, so "
670"will Edward's (<a href=\"#section3\">Section 3</a>)."
671msgstr ""
672
673#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
674msgid ""
675"If you want to see only your key, you can use <code>gpg --list-key "
676"[your@email]</code>&#65279;."
677msgstr ""
678
679#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
680msgid ""
681"You can also use <code>gpg --list-secret-key</code> to see your own private "
682"key."
eabe8a9a
TS
683msgstr ""
684
685#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 686msgid "More resources"
eabe8a9a
TS
687msgstr ""
688
689#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a 690msgid ""
e7253b03 691"For more information about this process, you can also refer to <a "
eabe8a9a
TS
692"href=\"https://www.gnupg.org/gph/en/manual/c14.html#AEN25\">The GNU Privacy "
693"Handbook</a>. Make sure you stick with \"RSA and RSA\" (the default), "
694"because it's newer and more secure than the algorithms the documentation "
b2c34a2a
TG
695"recommends. Also make sure your key is at least 4096&nbsp;bits if you want "
696"to be secure."
e7253b03
TG
697msgstr ""
698
699#. type: Content of: <html><body><section><div><div><div><div><h4>
700msgid "Advanced"
eabe8a9a
TS
701msgstr ""
702
703#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
704msgid "Advanced key pairs"
705msgstr ""
706
707#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
708msgid ""
709"When GnuPG creates a new keypair, it compartmentalizes the encryption "
710"function from the signing function through <a "
711"href=\"https://wiki.debian.org/Subkeys\">subkeys</a>. If you use subkeys "
e7253b03
TG
712"carefully, you can keep your GnuPG identity more secure and recover from a "
713"compromised key much more quickly. <a "
eabe8a9a 714"href=\"https://alexcabal.com/creating-the-perfect-gpg-keypair/\">Alex "
e7253b03 715"Cabal</a> and <a href=\"https://keyring.debian.org/creating-key.html\">the "
eabe8a9a
TS
716"Debian wiki</a> provide good guides for setting up a secure subkey "
717"configuration."
718msgstr ""
719
e7253b03
TG
720#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
721msgid "Step 2.B: Send to server and generate a certificate"
722msgstr ""
723
eabe8a9a 724#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03
TG
725msgid "<em>Step 2.b</em> Some important steps following creation"
726msgstr ""
727
8cd4252b 728#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03 729msgid "Upload your key to a keyserver"
eabe8a9a
TS
730msgstr ""
731
732#. type: Content of: <html><body><section><div><div><div><p>
e7253b03
TG
733msgid ""
734"We will upload your key to a keyserver, so if someone wants to send you an "
735"encrypted message, they can download your public key from the "
736"Internet. There are multiple keyservers that you can select from the menu "
39ad5485
TG
737"when you upload, but they are mostly all copies of each other. Any server "
738"will work, but it's good to remember which one you uploaded your key to "
739"originally. Also keep in mind, sometimes takes a few hours for them to match "
e7253b03 740"each other when a new key is uploaded."
eabe8a9a
TS
741msgstr ""
742
743#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 744msgid ""
8cd4252b
TG
745"# Copy your keyID: <code>gpg --list-key [your@email]</code> will list your "
746"public (\"pub\") key information, including your keyID, which is a unique "
747"list of numbers and letters. Copy this keyID, so you can use it in the "
748"following command."
eabe8a9a
TS
749msgstr ""
750
751#. type: Content of: <html><body><section><div><div><div><p>
8cd4252b 752msgid "# Upload your key to a server: <code>gpg --send-key [keyID]</code>"
eabe8a9a
TS
753msgstr ""
754
8cd4252b 755#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03
TG
756msgid "Export your key to a file"
757msgstr ""
758
759#. type: Content of: <html><body><section><div><div><div><p>
760msgid ""
761"Use the following command to export your secret key so you can import it "
762"into your email client at the next <a href=\"#section3\">step</a>. To avoid "
763"getting your key compromised, store this in a safe place, and make sure that "
764"if it is transferred, it is done so in a trusted way. Exporting your keys "
765"can be done with the following commands:"
766msgstr ""
767
8cd4252b
TG
768#. type: Content of: <html><body><section><div><div><div><p><code>
769msgid "<code> $ gpg --export-secret-keys -a [keyID] > my_secret_key.asc"
e7253b03
TG
770msgstr ""
771
2094a53c 772#. type: Content of: <html><body><section><div><div><div><p>
8cd4252b 773msgid "$ gpg --export -a [keyID] > my_public_key.asc </code>"
e7253b03
TG
774msgstr ""
775
8cd4252b 776#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03
TG
777msgid "Generate a revocation certificate"
778msgstr ""
779
780#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 781msgid ""
e7253b03
TG
782"Just in case you lose your key, or it gets compromised, you want to generate "
783"a certificate and choose to save it in a safe place on your computer for now "
b2c34a2a 784"(please refer to <a href=\"#step-6c\">Step 6.C</a> for how to best store "
e7253b03
TG
785"your revocation cerficate safely). This step is essential for your email "
786"self-defense, as you'll learn more about in <a href=\"#section5\">Section "
787"5</a>."
788msgstr ""
789
790#. type: Content of: <html><body><section><div><div><div><p>
791msgid ""
8cd4252b
TG
792"# Generate a revocation certificate: <code>gpg --gen-revoke --output "
793"revoke.asc [keyID]</code>"
e7253b03
TG
794msgstr ""
795
796#. type: Content of: <html><body><section><div><div><div><p>
797msgid ""
798"# It will prompt you to give a reason for revocation, we recommend to use "
8cd4252b 799"<samp>1&nbsp;=&nbsp;key has been compromised</samp>."
e7253b03
TG
800msgstr ""
801
802#. type: Content of: <html><body><section><div><div><div><p>
803msgid ""
b2c34a2a
TG
804"# You don't have to fill in a reason, but you can; then press \"Enter\" for "
805"an empty line, and confirm your selection."
eabe8a9a
TS
806msgstr ""
807
f950b092
TG
808#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
809msgid "Sending my key to the keyserver is not working"
810msgstr ""
811
812#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
813msgid ""
814"Instead of using the general command to upload your key to the keyserver, "
815"you can use a more specific command and add the keyserver to your command "
f68b2d75 816"<code>gpg --keyserver keys.openpgp.org --send-key [keyID]</code>&#65279;."
f950b092
TG
817msgstr ""
818
eabe8a9a 819#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 820msgid "My key doesn't seem to be working or I get a \"permission denied.\""
eabe8a9a
TS
821msgstr ""
822
2094a53c 823#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
e7253b03
TG
824msgid ""
825"Like every other file or folder, gpg keys are subject to permissions. If "
826"these are not set correctly, your system may not be accepting your keys. You "
827"can follow the next steps to check, and update to the right permissions."
828msgstr ""
829
2094a53c 830#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8cd4252b 831msgid "# Check your permissions: <code>ls -l ~/.gnupg/*</code>"
e7253b03
TG
832msgstr ""
833
2094a53c 834#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
e7253b03 835msgid ""
db1d71be
TG
836"# Set permissions to read, write, execute for only yourself, no "
837"others. These are the recommended permissions for your folder."
e7253b03
TG
838msgstr ""
839
2094a53c 840#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8cd4252b 841msgid "You can use the code: <code>chmod 700 ~/.gnupg</code>"
e7253b03
TG
842msgstr ""
843
2094a53c 844#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
e7253b03 845msgid ""
db1d71be
TG
846"# Set permissions to read and write for yourself only, no others. These are "
847"the recommended permissions for the keys inside your folder."
e7253b03
TG
848msgstr ""
849
2094a53c 850#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8cd4252b 851msgid "You can use the code: <code>chmod 600 ~/.gnupg/*</code>"
e7253b03
TG
852msgstr ""
853
854#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
855msgid ""
856"If you have (for any reason) created your own folders inside ~/.gnupg, you "
857"must also additionally apply execute permissions to that folder. Folders "
858"require execution privileges to be opened. For more information on "
859"permissions, you can check out <a "
860"href=\"https://helpdeskgeek.com/linux-tips/understanding-linux-permissions-chmod-usage/\">this "
861"detailed information guide</a>."
eabe8a9a
TS
862msgstr ""
863
864#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 865msgid "More about keyservers"
eabe8a9a
TS
866msgstr ""
867
868#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a 869msgid ""
e7253b03
TG
870"You can find some more keyserver information<a "
871"href=\"https://www.gnupg.org/gph/en/manual/x457.html\"> in this "
872"manual</a>. <a href=\"https://sks-keyservers.net/overview-of-pools.php\">The "
873"sks Web site</a> maintains a list of highly interconnected keyservers. You "
874"can also <a "
875"href=\"https://www.gnupg.org/gph/en/manual/x56.html#AEN64\">directly export "
876"your key</a> as a file on your computer."
eabe8a9a
TS
877msgstr ""
878
879#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 880msgid "Transferring your keys"
eabe8a9a
TS
881msgstr ""
882
2094a53c 883#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
eabe8a9a 884msgid ""
e7253b03
TG
885"Use the following commands to transfer your keys. To avoid getting your key "
886"compromised, store it in a safe place, and make sure that if it is "
887"transferred, it is done so in a trusted way. Importing and exporting a key "
888"can be done with the following commands:"
889msgstr ""
890
8cd4252b
TG
891#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p><code>
892msgid "<code> $ gpg --export-secret-keys -a [keyID] > my_private_key.asc"
e7253b03
TG
893msgstr ""
894
8cd4252b 895#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p><code>
2094a53c 896msgid "$ gpg --export -a [keyID] > my_public_key.asc"
e7253b03
TG
897msgstr ""
898
8cd4252b 899#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p><code>
e7253b03
TG
900msgid "$ gpg --import my_private_key.asc"
901msgstr ""
902
2094a53c 903#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8cd4252b 904msgid "$ gpg --import my_public_key.asc </code>"
e7253b03
TG
905msgstr ""
906
907#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
908msgid ""
909"Ensure that the keyID printed is the correct one, and if so, then go ahead "
910"and add ultimate trust for it:"
911msgstr ""
912
2094a53c 913#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8cd4252b 914msgid "<code> $ gpg --edit-key [your@email] </code>"
e7253b03
TG
915msgstr ""
916
2094a53c 917#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
e7253b03 918msgid ""
b2c34a2a
TG
919"Because this is your key, you should choose "
920"<code>ultimate</code>&#65279;. You shouldn't trust anyone else's key "
921"ultimately."
e7253b03
TG
922msgstr ""
923
924#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
925msgid ""
b2c34a2a 926"Refer to <a href=\"#step-2b\">Troubleshooting in Step 2.B</a> for more "
e7253b03
TG
927"information on permissions. When transferring keys, your permissions may get "
928"mixed, and errors may be prompted. These are easily avoided when your "
929"folders and files have the right permissions"
930msgstr ""
931
932#. type: Content of: <html><body><section><div><div><h2>
933msgid "<em>#3</em> Set up email encryption"
934msgstr ""
935
936#. type: Content of: <html><body><section><div><div><p>
937msgid ""
938"The Icedove (or Thunderbird) email program has PGP functionality integrated, "
939"which makes it pretty easy to work with. We'll take you through the steps of "
940"integrating and using your key in these email clients."
941msgstr ""
942
943#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
944msgid "Step 3.A: Email Menu"
945msgstr ""
946
947#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
948msgid "Step 3.A: Import From File"
949msgstr ""
950
951#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
952msgid "Step 3.A: Success"
953msgstr ""
954
955#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
956msgid "Step 3.A: Troubleshoot"
eabe8a9a
TS
957msgstr ""
958
959#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03
TG
960msgid "<em>Step 3.a</em> Set up your email with encryption"
961msgstr ""
962
2094a53c 963#. type: Content of: <html><body><section><div><div><div><p>
e7253b03
TG
964msgid ""
965"Once you have set up your email with encryption, you can start contributing "
966"to encrypted traffic on the Internet. First we'll get your email client to "
967"import your secret key, and we will also learn how to get other people's "
968"public keys from servers so you can send and receive encrypted email."
eabe8a9a
TS
969msgstr ""
970
971#. type: Content of: <html><body><section><div><div><div><p>
252b506d 972msgid "# Open your email client and use \"Tools\" &rarr; <i>OpenPGP Key Manager</i>"
e7253b03
TG
973msgstr ""
974
975#. type: Content of: <html><body><section><div><div><div><p>
8cd4252b 976msgid "# Under \"File\" &rarr; <i>Import Secret Key(s) From File</i>"
e7253b03
TG
977msgstr ""
978
979#. type: Content of: <html><body><section><div><div><div><p>
980msgid ""
252b506d 981"# Select the file you saved under the name [my_secret_key.asc] in <a "
b2c34a2a 982"href=\"#step-2b\">Step 2.B</a> when you exported your key"
e7253b03
TG
983msgstr ""
984
985#. type: Content of: <html><body><section><div><div><div><p>
986msgid "# Unlock with your passphrase"
987msgstr ""
988
989#. type: Content of: <html><body><section><div><div><div><p>
990msgid ""
991"# You will receive a \"OpenPGP keys successfully imported\" window to "
992"confirm success"
993msgstr ""
994
995#. type: Content of: <html><body><section><div><div><div><p>
996msgid ""
252b506d
TG
997"# Go to \"Account settings\" &rarr; \"End-To-End Encryption,\" and make sure "
998"your key is imported and select <i>Treat this key as a Personal Key</i>."
e7253b03
TG
999msgstr ""
1000
1001#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
1002msgid "I'm not sure the import worked correctly"
1003msgstr ""
1004
1005#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1006msgid ""
8cd4252b
TG
1007"Look for \"Account settings\" &rarr; \"End-To-End Encryption.\" Here you can "
1008"see if your personal key associated with this email is found. If it is not, "
252b506d
TG
1009"you can try again via the <i>Add key</i> option. Make sure you have the "
1010"correct, active, secret key file."
eabe8a9a
TS
1011msgstr ""
1012
1013#. type: Content of: <html><body><section><div><div><h2>
e7253b03
TG
1014msgid "<em>#4</em> Try it out!"
1015msgstr ""
1016
1017#. type: Attribute 'alt' of: <html><body><section><div><div><p><img>
1018msgid "Illustration of a person in a house with a cat connected to a server"
eabe8a9a
TS
1019msgstr ""
1020
1021#. type: Content of: <html><body><section><div><div><p>
eabe8a9a 1022msgid ""
e7253b03
TG
1023"Now you'll try a test correspondence with an FSF computer program named "
1024"Edward, who knows how to use encryption. Except where noted, these are the "
1025"same steps you'd follow when corresponding with a real, live person."
1026msgstr ""
1027
1028#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1029msgid "Step 4.A Send key to Edward."
eabe8a9a
TS
1030msgstr ""
1031
1032#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1033msgid "<em>Step 4.a</em> Send Edward your public key"
eabe8a9a
TS
1034msgstr ""
1035
1036#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1037msgid ""
1038"This is a special step that you won't have to do when corresponding with "
e7253b03
TG
1039"real people. In your email program's menu, go to \"Tools\" &rarr; \"OpenPGP "
1040"Key Manager.\" You should see your key in the list that pops up. Right click "
8cd4252b
TG
1041"on your key and select <i>Send Public Keys by Email</i>. This will create a "
1042"new draft message, as if you had just hit the \"Write\" button, but in the "
1043"attachment you will find your public keyfile."
eabe8a9a
TS
1044msgstr ""
1045
1046#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1047msgid ""
1048"Address the message to <a "
1049"href=\"mailto:edward-en@fsf.org\">edward-en@fsf.org</a>. Put at least one "
1050"word (whatever you want) in the subject and body of the email. Don't send "
1051"yet."
1052msgstr ""
1053
1054#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1055msgid ""
e7253b03
TG
1056"We want Edward to be able to open the email with your keyfile, so we want "
1057"this first special message to be unencrypted. Make sure encryption is turned "
8cd4252b
TG
1058"off by using the dropdown menu \"Security\" and select <i>Do Not "
1059"Encrypt</i>. Once encryption is off, hit Send."
eabe8a9a
TS
1060msgstr ""
1061
1062#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1063msgid ""
1064"It may take two or three minutes for Edward to respond. In the meantime, you "
e7253b03
TG
1065"might want to skip ahead and check out the <a href=\"#section6\">Use it "
1066"Well</a> section of this guide. Once you have received a response, head to "
1067"the next step. From here on, you'll be doing just the same thing as when "
eabe8a9a
TS
1068"corresponding with a real person."
1069msgstr ""
1070
1071#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1072msgid ""
e7253b03
TG
1073"When you open Edward's reply, GnuPG may prompt you for your passphrase "
1074"before using your private key to decrypt it."
1075msgstr ""
1076
1077#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1078msgid "Step 4.B Option 1. Verify key"
1079msgstr ""
1080
1081#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1082msgid "Step 4.B Option 2. Import key"
eabe8a9a
TS
1083msgstr ""
1084
1085#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03
TG
1086msgid "<em>Step 4.b</em> Send a test encrypted email"
1087msgstr ""
1088
8cd4252b 1089#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03 1090msgid "Get Edward's key"
eabe8a9a
TS
1091msgstr ""
1092
1093#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1094msgid ""
e7253b03
TG
1095"To encrypt an email to Edward, you need its public key, so now you'll have "
1096"to download it from a keyserver. You can do this in two different ways:"
eabe8a9a
TS
1097msgstr ""
1098
1099#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1100msgid ""
e7253b03
TG
1101"<strong>Option 1.</strong> In the email answer you received from Edward as a "
1102"response to your first email, Edward's public key was included. On the right "
1103"of the email, just above the writing area, you will find an \"OpenPGP\" "
1104"button that has a lock and a little wheel next to it. Click that, and select "
252b506d
TG
1105"<i>Discover</i> next to the text: \"This message was signed with a key that "
1106"you don't yet have.\" A popup with Edward's key details will follow."
eabe8a9a
TS
1107msgstr ""
1108
1109#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1110msgid ""
252b506d
TG
1111"<strong>Option 2.</strong> Open your OpenPGP Key manager, and under "
1112"\"Keyserver\" choose <i>Discover Keys Online</i>. Here, fill in Edward's "
1113"email address, and import Edward's key."
eabe8a9a
TS
1114msgstr ""
1115
1116#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1117msgid ""
8cd4252b
TG
1118"The option <i>Accepted (unverified)</i> will add this key to your key "
1119"manager, and now it can be used to send encrypted emails and to verify "
1120"digital signatures from Edward."
eabe8a9a
TS
1121msgstr ""
1122
1123#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1124msgid ""
e7253b03
TG
1125"In the popup window confirming if you want to import Edward's key, you'll "
1126"see many different emails that are all associated with its key. This is "
1127"correct; you can safely import the key."
eabe8a9a
TS
1128msgstr ""
1129
1130#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1131msgid ""
e7253b03
TG
1132"Since you encrypted this email with Edward's public key, Edward's private "
1133"key is required to decrypt it. Edward is the only one with its private key, "
1134"so no one except Edward can decrypt it."
1135msgstr ""
1136
8cd4252b 1137#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03 1138msgid "Send Edward an encrypted email"
eabe8a9a
TS
1139msgstr ""
1140
1141#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1142msgid ""
e7253b03
TG
1143"Write a new email in your email program, addressed to <a "
1144"href=\"mailto:edward-en@fsf.org\">edward-en@fsf.org</a>. Make the subject "
1145"\"Encryption test\" or something similar and write something in the body."
1146msgstr ""
1147
1148#. type: Content of: <html><body><section><div><div><div><p>
1149msgid ""
1150"This time, make sure encryption is turned on by using the dropdown menu "
8cd4252b
TG
1151"\"Security\" and select <i>Require Encryption</i>. Once encryption is on, "
1152"hit Send."
eabe8a9a
TS
1153msgstr ""
1154
1155#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03
TG
1156msgid "\"Recipients not valid, not trusted or not found\""
1157msgstr ""
1158
1159#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1160msgid ""
8cd4252b
TG
1161"You could get the above error message, or something along these lines: "
1162"\"Unable to send this message with end-to-end encryption, because there are "
1163"problems with the keys of the following recipients: ...\" In these cases, "
1164"you may be trying to send an encrypted email to someone when you do not have "
e7253b03 1165"their public key yet. Make sure you follow the steps above to import the key "
f950b092
TG
1166"to your key manager. Open the OpenPGP Key Manager to make sure the recipient "
1167"is listed there."
e7253b03
TG
1168msgstr ""
1169
1170#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
1171msgid "Unable to send message"
1172msgstr ""
1173
1174#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1175msgid ""
1176"You could get the following message when trying to send your encrypted "
1177"email: \"Unable to send this message with end-to-end encryption, because "
1178"there are problems with the keys of the following recipients: "
1179"edward-en@fsf.org.\" This usually means you imported the key with the "
1180"\"unaccepted (unverified) option.\" Go to the \"key properties\" of this key "
1181"by right clicking on the key in the OpenPGP Key Manager, and select the "
8cd4252b
TG
1182"option <i>Yes, but I have not verified that this is the correct key</i> in "
1183"the \"Acceptance\" option at the bottom of this window. Resend the email."
e7253b03
TG
1184msgstr ""
1185
1186#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
1187msgid "I can't find Edward's key"
eabe8a9a
TS
1188msgstr ""
1189
1190#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
1191msgid ""
1192"Close the pop-ups that have appeared since you clicked Send. Make sure you "
f950b092
TG
1193"are connected to the Internet and try again. If that doesn't work, you can "
1194"download the key manually from <a "
1195"href=\"https://keys.openpgp.org/search?q=edward-en%40fsf.org\">the "
1196"keyserver</a>, and import it by using the <i>Import Public Key(s) from "
1197"File</i> option in the OpenPGP Key Manager."
eabe8a9a
TS
1198msgstr ""
1199
1200#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
1201msgid "Unscrambled messages in the Sent folder"
1202msgstr ""
1203
1204#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
1205msgid ""
1206"Even though you can't decrypt messages encrypted to someone else's key, your "
1207"email program will automatically save a copy encrypted to your public key, "
1208"which you'll be able to view from the Sent folder like a normal email. This "
1209"is normal, and it doesn't mean that your email was not sent encrypted."
1210msgstr ""
1211
eabe8a9a 1212#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
1213msgid "Encrypt messages from the command line"
1214msgstr ""
1215
1216#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
1217msgid ""
1218"You can also encrypt and decrypt messages and files from the <a "
1219"href=\"https://www.gnupg.org/gph/en/manual/x110.html\">command line</a>, if "
1220"that's your preference. The option --armor makes the encrypted output appear "
1221"in the regular character set."
1222msgstr ""
1223
1224#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1225msgid "<em>Important:</em> Security tips"
1226msgstr ""
1227
1228#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1229msgid ""
1230"Even if you encrypt your email, the subject line is not encrypted, so don't "
1231"put private information there. The sending and receiving addresses aren't "
1232"encrypted either, so a surveillance system can still figure out who you're "
1233"communicating with. Also, surveillance agents will know that you're using "
1234"GnuPG, even if they can't figure out what you're saying. When you send "
e7253b03
TG
1235"attachments, you can choose to encrypt them or not, independent of the "
1236"actual email."
eabe8a9a
TS
1237msgstr ""
1238
8c163d47
TG
1239#. type: Content of: <html><body><section><div><div><div><p>
1240msgid ""
1241"For greater security against potential attacks, you can turn off "
1242"HTML. Instead, you can render the message body as plain text. In order to do "
8cd4252b
TG
1243"this in Icedove or Thunderbird, go to \"View\" &rarr; \"Message Body As\" "
1244"&rarr; <i>Plain Text</i>."
e7253b03
TG
1245msgstr ""
1246
1247#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1248msgid "Step 4.C Edward's response"
8c163d47
TG
1249msgstr ""
1250
eabe8a9a 1251#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1252msgid "<em>Step 4.c</em> Receive a response"
eabe8a9a
TS
1253msgstr ""
1254
1255#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1256msgid ""
e7253b03 1257"When Edward receives your email, it will use its private key to decrypt it, "
9ecb61bd 1258"then reply to you."
eabe8a9a
TS
1259msgstr ""
1260
1261#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1262msgid ""
1263"It may take two or three minutes for Edward to respond. In the meantime, you "
e7253b03 1264"might want to skip ahead and check out the <a href=\"#section6\">Use it "
eabe8a9a
TS
1265"Well</a> section of this guide."
1266msgstr ""
1267
e7253b03
TG
1268#. type: Content of: <html><body><section><div><div><div><p>
1269msgid ""
1270"Edward will send you an encrypted email back saying your email was received "
eb9903b9
TG
1271"and decrypted. Your email client will automatically decrypt Edward's "
1272"message."
e7253b03
TG
1273msgstr ""
1274
1275#. type: Content of: <html><body><section><div><div><div><p>
1276msgid ""
1277"The OpenPGP button in the email will show a little green checkmark over the "
098ebaeb 1278"lock symbol to show the message is encrypted, and a little orange warning "
e7253b03
TG
1279"sign which means that you have accepted the key, but not verified it. When "
1280"you have not yet accepted the key, you will see a little question mark "
1281"there. Clicking the prompts in this button will lead you to key properties "
1282"as well."
1283msgstr ""
1284
eabe8a9a 1285#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1286msgid "<em>Step 4.d</em> Send a signed test email"
eabe8a9a
TS
1287msgstr ""
1288
1289#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1290msgid ""
1291"GnuPG includes a way for you to sign messages and files, verifying that they "
1292"came from you and that they weren't tampered with along the way. These "
1293"signatures are stronger than their pen-and-paper cousins -- they're "
1294"impossible to forge, because they're impossible to create without your "
1295"private key (another reason to keep your private key safe)."
1296msgstr ""
1297
1298#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1299msgid ""
1300"You can sign messages to anyone, so it's a great way to make people aware "
1301"that you use GnuPG and that they can communicate with you securely. If they "
1302"don't have GnuPG, they will be able to read your message and see your "
1303"signature. If they do have GnuPG, they'll also be able to verify that your "
1304"signature is authentic."
1305msgstr ""
1306
1307#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1308msgid ""
e7253b03
TG
1309"To sign an email to Edward, compose any message to the email address and "
1310"click the pencil icon next to the lock icon so that it turns gold. If you "
1311"sign a message, GnuPG may ask you for your password before it sends the "
1312"message, because it needs to unlock your private key for signing."
eabe8a9a
TS
1313msgstr ""
1314
1315#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1316msgid ""
e7253b03 1317"In \"Account Settings\" &rarr; \"End-To-End-Encryption\" you can opt to "
8cd4252b 1318"<i>add digital signature by default</i>."
eabe8a9a
TS
1319msgstr ""
1320
1321#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1322msgid "<em>Step 4.e</em> Receive a response"
eabe8a9a
TS
1323msgstr ""
1324
1325#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1326msgid ""
1327"When Edward receives your email, he will use your public key (which you sent "
9ecb61bd 1328"him in <a href=\"#step-3a\">Step 3.A</a>) to verify the message you sent has "
e7253b03 1329"not been tampered with and to encrypt a reply to you."
eabe8a9a
TS
1330msgstr ""
1331
1332#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1333msgid ""
1334"Edward's reply will arrive encrypted, because he prefers to use encryption "
1335"whenever possible. If everything goes according to plan, it should say "
1336"\"Your signature was verified.\" If your test signed email was also "
1337"encrypted, he will mention that first."
1338msgstr ""
1339
9ecb61bd
TG
1340#. type: Content of: <html><body><section><div><div><div><p>
1341msgid ""
e7253b03
TG
1342"When you receive Edward's email and open it, your email client will "
1343"automatically detect that it is encrypted with your public key, and then it "
1344"will use your private key to decrypt it."
9ecb61bd
TG
1345msgstr ""
1346
e7253b03
TG
1347#. type: Content of: <html><body><section><div><div><h2>
1348msgid "<em>#5</em> Learn about the Web of Trust"
9ecb61bd
TG
1349msgstr ""
1350
e7253b03
TG
1351#. type: Attribute 'alt' of: <html><body><section><div><div><p><img>
1352msgid "Illustration of keys all interconnected with a web of lines"
eabe8a9a
TS
1353msgstr ""
1354
1355#. type: Content of: <html><body><section><div><div><p>
eabe8a9a 1356msgid ""
e7253b03 1357"Email encryption is a powerful technology, but it has a weakness: it "
eabe8a9a
TS
1358"requires a way to verify that a person's public key is actually "
1359"theirs. Otherwise, there would be no way to stop an attacker from making an "
e7253b03 1360"email address with your friend's name, creating keys to go with it, and "
eabe8a9a
TS
1361"impersonating your friend. That's why the free software programmers that "
1362"developed email encryption created keysigning and the Web of Trust."
1363msgstr ""
1364
1365#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1366msgid ""
1367"When you sign someone's key, you are publicly saying that you've verified "
1368"that it belongs to them and not someone else."
1369msgstr ""
1370
1371#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1372msgid ""
1373"Signing keys and signing messages use the same type of mathematical "
1374"operation, but they carry very different implications. It's a good practice "
1375"to generally sign your email, but if you casually sign people's keys, you "
8cd4252b 1376"may accidentally end up vouching for the identity of an imposter."
eabe8a9a
TS
1377msgstr ""
1378
1379#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1380msgid ""
1381"People who use your public key can see who has signed it. Once you've used "
1382"GnuPG for a long time, your key may have hundreds of signatures. You can "
1383"consider a key to be more trustworthy if it has many signatures from people "
1384"that you trust. The Web of Trust is a constellation of GnuPG users, "
1385"connected to each other by chains of trust expressed through signatures."
1386msgstr ""
1387
1388#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
e7253b03 1389msgid "Section 5: trusting a key"
eabe8a9a
TS
1390msgstr ""
1391
1392#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1393msgid "<em>Step 5.a</em> Sign a key"
eabe8a9a
TS
1394msgstr ""
1395
1396#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1397msgid ""
8cd4252b
TG
1398"In your email program's menu, go to OpenPGP Key Manager and select <i>Key "
1399"properties</i> by right clicking on Edward's key."
eabe8a9a
TS
1400msgstr ""
1401
1402#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1403msgid ""
8cd4252b
TG
1404"Under \"Your Acceptance,\" you can select <i>Yes, I've verified in person "
1405"this key has the correct fingerprint\"</i>."
eabe8a9a
TS
1406msgstr ""
1407
1408#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1409msgid ""
1410"You've just effectively said \"I trust that Edward's public key actually "
1411"belongs to Edward.\" This doesn't mean much because Edward isn't a real "
e7253b03
TG
1412"person, but it's good practice, and for real people it is important. You can "
1413"read more about signing a person's key in the <a "
1414"href=\"#check-ids-before-signing\">check IDs before signing</a> section."
eabe8a9a
TS
1415msgstr ""
1416
1417#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1418msgid "Identifying keys: Fingerprints and IDs"
1419msgstr ""
1420
1421#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1422msgid ""
1423"People's public keys are usually identified by their key fingerprint, which "
1424"is a string of digits like F357AA1A5B1FA42CFD9FE52A9FF2194CC09A61E8 (for "
1425"Edward's key). You can see the fingerprint for your public key, and other "
e7253b03
TG
1426"public keys saved on your computer, by going to OpenPGP Key Management in "
1427"your email program's menu, then right clicking on the key and choosing Key "
1428"Properties. It's good practice to share your fingerprint wherever you share "
1429"your email address, so that people can double-check that they have the "
1430"correct public key when they download yours from a keyserver."
eabe8a9a
TS
1431msgstr ""
1432
1433#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1434msgid ""
e7253b03
TG
1435"You may also see public keys referred to by a shorter keyID. This keyID is "
1436"visible directly from the Key Management window. These eight character "
1437"keyIDs were previously used for identification, which used to be safe, but "
1438"is no longer reliable. You need to check the full fingerprint as part of "
2fd4a6dc
TG
1439"verifying you have the correct key for the person you are trying to "
1440"contact. Spoofing, in which someone intentionally generates a key with a "
1441"fingerprint whose final eight characters are the same as another, is "
1442"unfortunately common."
eabe8a9a
TS
1443msgstr ""
1444
1445#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1446msgid "<em>Important:</em> What to consider when signing keys"
1447msgstr ""
1448
1449#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1450msgid ""
1451"Before signing a person's key, you need to be confident that it actually "
1452"belongs to them, and that they are who they say they are. Ideally, this "
1453"confidence comes from having interactions and conversations with them over "
1454"time, and witnessing interactions between them and others. Whenever signing "
1455"a key, ask to see the full public key fingerprint, and not just the shorter "
e7253b03 1456"keyID. If you feel it's important to sign the key of someone you've just "
eabe8a9a 1457"met, also ask them to show you their government identification, and make "
e7253b03 1458"sure the name on the ID matches the name on the public key."
eabe8a9a
TS
1459msgstr ""
1460
1461#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
1462msgid "Master the Web of Trust"
1463msgstr ""
1464
1465#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
1466msgid ""
1467"Unfortunately, trust does not spread between users the way <a "
e7253b03
TG
1468"href=\"https://fennetic.net/irc/finney.org/~hal/web_of_trust.html\">many "
1469"people think</a>. One of the best ways to strengthen the GnuPG community is "
1470"to deeply <a "
eabe8a9a
TS
1471"href=\"https://www.gnupg.org/gph/en/manual/x334.html\">understand</a> the "
1472"Web of Trust and to carefully sign as many people's keys as circumstances "
1473"permit."
1474msgstr ""
1475
eabe8a9a 1476#. type: Content of: <html><body><section><div><div><h2>
e7253b03 1477msgid "<em>#6</em> Use it well"
eabe8a9a
TS
1478msgstr ""
1479
1480#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1481msgid ""
1482"Everyone uses GnuPG a little differently, but it's important to follow some "
1483"basic practices to keep your email secure. Not following them, you risk the "
1484"privacy of the people you communicate with, as well as your own, and damage "
1485"the Web of Trust."
1486msgstr ""
1487
1488#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
e7253b03 1489msgid "Section 6: Use it Well (1)"
eabe8a9a
TS
1490msgstr ""
1491
1492#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1493msgid "When should I encrypt? When should I sign?"
1494msgstr ""
1495
1496#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1497msgid ""
1498"The more you can encrypt your messages, the better. If you only encrypt "
1499"emails occasionally, each encrypted message could raise a red flag for "
1500"surveillance systems. If all or most of your email is encrypted, people "
1501"doing surveillance won't know where to start. That's not to say that only "
1502"encrypting some of your email isn't helpful -- it's a great start and it "
1503"makes bulk surveillance more difficult."
1504msgstr ""
1505
1506#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1507msgid ""
1508"Unless you don't want to reveal your own identity (which requires other "
1509"protective measures), there's no reason not to sign every message, whether "
1510"or not you are encrypting. In addition to allowing those with GnuPG to "
1511"verify that the message came from you, signing is a non-intrusive way to "
1512"remind everyone that you use GnuPG and show support for secure "
1513"communication. If you often send signed messages to people that aren't "
1514"familiar with GnuPG, it's nice to also include a link to this guide in your "
1515"standard email signature (the text kind, not the cryptographic kind)."
1516msgstr ""
1517
1518#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
e7253b03 1519msgid "Section 6: Use it Well (2)"
eabe8a9a
TS
1520msgstr ""
1521
1522#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1523msgid "Be wary of invalid keys"
1524msgstr ""
1525
1526#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1527msgid ""
1528"GnuPG makes email safer, but it's still important to watch out for invalid "
1529"keys, which might have fallen into the wrong hands. Email encrypted with "
1530"invalid keys might be readable by surveillance programs."
1531msgstr ""
1532
1533#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1534msgid ""
1535"In your email program, go back to the first encrypted email that Edward sent "
e7253b03
TG
1536"you. Because Edward encrypted it with your public key, it will have a green "
1537"checkmark a at the top \"OpenPGP\" button."
eabe8a9a
TS
1538msgstr ""
1539
1540#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1541msgid ""
8cd4252b
TG
1542"<strong>When using GnuPG, make a habit of glancing at that button. The "
1543"program will warn you there if you get an email signed with a key that can't "
1544"be trusted.</strong>"
eabe8a9a
TS
1545msgstr ""
1546
1547#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1548msgid "Copy your revocation certificate to somewhere safe"
1549msgstr ""
1550
1551#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1552msgid ""
1553"Remember when you created your keys and saved the revocation certificate "
e7253b03
TG
1554"that GnuPG made? It's time to copy that certificate onto the safest storage "
1555"that you have -- a flash drive, disk, or hard drive stored in a safe place "
1556"in your home could work, not on a device you carry with you regularly. The "
1557"safest way we know is actually to print the revocation certificate and store "
1558"it in a safe place."
eabe8a9a
TS
1559msgstr ""
1560
1561#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1562msgid ""
1563"If your private key ever gets lost or stolen, you'll need this certificate "
1564"file to let people know that you are no longer using that keypair."
1565msgstr ""
1566
1567#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1568msgid "<em>IMPORTANT:</em> ACT SWIFTLY if someone gets your private key"
eabe8a9a
TS
1569msgstr ""
1570
1571#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1572msgid ""
e7253b03 1573"If you lose your private key or someone else gets a hold of it (say, by "
eabe8a9a
TS
1574"stealing or cracking your computer), it's important to revoke it immediately "
1575"before someone else uses it to read your encrypted email or forge your "
1576"signature. This guide doesn't cover how to revoke a key, but you can follow "
1577"these <a "
71b90906 1578"href=\"https://www.hackdiary.com/2004/01/18/revoking-a-gpg-key/\">instructions</a>. "
eabe8a9a
TS
1579"After you're done revoking, make a new key and send an email to everyone "
1580"with whom you usually use your key to make sure they know, including a copy "
1581"of your new key."
1582msgstr ""
1583
71b90906 1584#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1585msgid "Webmail and GnuPG"
1586msgstr ""
1587
71b90906 1588#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1589msgid ""
1590"When you use a web browser to access your email, you're using webmail, an "
1591"email program stored on a distant website. Unlike webmail, your desktop "
1592"email program runs on your own computer. Although webmail can't decrypt "
1593"encrypted email, it will still display it in its encrypted form. If you "
1594"primarily use webmail, you'll know to open your email client when you "
1595"receive a scrambled email."
1596msgstr ""
1597
eabe8a9a 1598#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1599msgid "Make your public key part of your online identity"
eabe8a9a
TS
1600msgstr ""
1601
1602#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1603msgid ""
e7253b03
TG
1604"First add your public key fingerprint to your email signature, then compose "
1605"an email to at least five of your friends, telling them you just set up "
1606"GnuPG and mentioning your public key fingerprint. Link to this guide and ask "
1607"them to join you. Don't forget that there's also an awesome <a "
1608"href=\"infographic.html\">infographic to share.</a>"
eabe8a9a
TS
1609msgstr ""
1610
2fd4a6dc
TG
1611#. type: Content of: <html><body><section><div><div><div><p>
1612msgid ""
e7253b03
TG
1613"Start writing your public key fingerprint anywhere someone would see your "
1614"email address: your social media profiles, blog, Website, or business "
1615"card. (At the Free Software Foundation, we put ours on our <a "
1616"href=\"https://fsf.org/about/staff\">staff page</a>.) We need to get our "
1617"culture to the point that we feel like something is missing when we see an "
1618"email address without a public key fingerprint."
2fd4a6dc
TG
1619msgstr ""
1620
e7253b03
TG
1621#. type: Content of: <html><body><section><div><div><h2>
1622msgid "<a href=\"next_steps.html\">Great job! Check out the next steps.</a>"
eabe8a9a
TS
1623msgstr ""
1624
e7253b03
TG
1625#. type: Content of: <html><body><header><div><p>
1626msgid "&larr; Read the <a href=\"index.html\">full guide</a>"
eabe8a9a
TS
1627msgstr ""
1628
e7253b03
TG
1629#. type: Content of: <html><body><header><div><h3><a>
1630msgid ""
1631"<a "
1632"href=\"https://fsf.org/share?u=https://u.fsf.org/zc&amp;t=How%20public-key%20encryption%20works.%20Infographic%20via%20%40fsf\">"
eabe8a9a
TS
1633msgstr ""
1634
e7253b03
TG
1635#. type: Content of: <html><body><header><div><h3>
1636msgid "&nbsp; Share our infographic </a> with the hashtag #EmailSelfDefense"
2fd4a6dc
TG
1637msgstr ""
1638
e7253b03
TG
1639#. type: Attribute 'alt' of: <html><body><header><div><p><img>
1640msgid "View &amp; share our infographic"
1641msgstr ""
1642
eabe8a9a 1643#. type: Content of: <html><body><header><div><h1>
eabe8a9a
TS
1644msgid "Great job!"
1645msgstr ""
1646
1647#. type: Content of: <html><body><section><div><div><h2>
e7253b03 1648msgid "<em>#7</em> Next steps"
eabe8a9a
TS
1649msgstr ""
1650
1651#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1652msgid ""
1653"You've now completed the basics of email encryption with GnuPG, taking "
1654"action against bulk surveillance. These next steps will help make the most "
1655"of the work you've done."
1656msgstr ""
1657
e7253b03
TG
1658#. type: Content of: <html><body><section><div><div><div><p>
1659msgid "&larr; <a href=\"index.html\">Return to the guide</a>"
1660msgstr ""
1661
eabe8a9a 1662#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1663msgid "Join the movement"
1664msgstr ""
1665
1666#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1667msgid ""
1668"You've just taken a huge step towards protecting your privacy online. But "
1669"each of us acting alone isn't enough. To topple bulk surveillance, we need "
1670"to build a movement for the autonomy and freedom of all computer users. Join "
1671"the Free Software Foundation's community to meet like-minded people and work "
1672"together for change."
1673msgstr ""
1674
1675#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1676msgid ""
1677"<small>Read <a href=\"https://www.fsf.org/twitter\">why GNU Social and "
60715780 1678"Mastodon are better than Twitter</a>, and <a "
e7253b03 1679"href=\"https://www.fsf.org/facebook\">why we don't use Facebook</a>.</small>"
eabe8a9a
TS
1680msgstr ""
1681
1682#. type: Content of: <html><body><section><div><div><div><div><p>
eabe8a9a
TS
1683msgid "Low-volume mailing list"
1684msgstr ""
1685
1686#. type: Content of: <html><body><section><div><div><div><div><form>
eabe8a9a 1687msgid ""
4aec1215
TG
1688"<input type=\"text\" value=\"Type your email...\" name=\"email-Primary\" "
1689"id=\"frmEmail\" /> <input type=\"submit\" value=\"Add me\" "
1690"name=\"_qf_Edit_next\" /> <input type=\"hidden\" "
eabe8a9a
TS
1691"value=\"https://emailselfdefense.fsf.org/en/confirmation.html\" "
1692"name=\"postURL\" /> <input type=\"hidden\" value=\"1\" name=\"group[25]\" /> "
1693"<input type=\"hidden\" "
1694"value=\"https://my.fsf.org/civicrm/profile?reset=1&amp;gid=391\" "
1695"name=\"cancelURL\" /> <input type=\"hidden\" value=\"Edit:cancel\" "
1696"name=\"_qf_default\" />"
1697msgstr ""
1698
1699#. type: Content of: <html><body><section><div><div><div><div><p>
eabe8a9a
TS
1700msgid ""
1701"<small>Read our <a "
1702"href=\"https://my.fsf.org/donate/privacypolicy.html\">privacy "
1703"policy</a>.</small>"
1704msgstr ""
1705
1706#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1707msgid "Bring Email Self-Defense to new people"
1708msgstr ""
1709
1710#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1711msgid ""
1712"Understanding and setting up email encryption is a daunting task for "
1713"many. To welcome them, make it easy to find your public key and offer to "
1714"help with encryption. Here are some suggestions:"
1715msgstr ""
1716
1717#. type: Content of: <html><body><section><div><div><div><ul><li>
eabe8a9a 1718msgid ""
e7253b03 1719"# Lead an Email Self-Defense workshop for your friends and community, using "
eabe8a9a
TS
1720"our <a href=\"workshops.html\">teaching guide</a>."
1721msgstr ""
1722
1723#. type: Content of: <html><body><section><div><div><div><ul><li>
eabe8a9a 1724msgid ""
e7253b03
TG
1725"# Use <a "
1726"href=\"https://fsf.org/share?u=https://u.fsf.org/zb&amp;t=Encrypt%20with%20me%20using%20Email%20Self-Defense%20%40fsf\"> "
1727"our sharing page</a> to compose a message to a few friends and ask them to "
1728"join you in using encrypted email. Remember to include your GnuPG public key "
1729"fingerprint so they can easily download your key."
eabe8a9a
TS
1730msgstr ""
1731
1732#. type: Content of: <html><body><section><div><div><div><ul><li>
eabe8a9a 1733msgid ""
e7253b03 1734"# Add your public key fingerprint anywhere that you normally display your "
eabe8a9a 1735"email address. Some good places are: your email signature (the text kind, "
e7253b03 1736"not the cryptographic kind), social media profiles, blogs, Web sites, or "
eabe8a9a
TS
1737"business cards. At the Free Software Foundation, we put ours on our <a "
1738"href=\"https://fsf.org/about/staff\">staff page</a>."
1739msgstr ""
1740
1741#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1742msgid "Protect more of your digital life"
1743msgstr ""
1744
1745#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1746msgid ""
1747"Learn surveillance-resistant technologies for instant messages, hard drive "
1748"storage, online sharing, and more at <a "
1749"href=\"https://directory.fsf.org/wiki/Collection:Privacy_pack\"> the Free "
1750"Software Directory's Privacy Pack</a> and <a "
1751"href=\"https://prism-break.org\">prism-break.org</a>."
1752msgstr ""
1753
1754#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1755msgid ""
8cd4252b 1756"If you are using Windows, macOS or any other proprietary operating system, "
eabe8a9a
TS
1757"we recommend you switch to a free software operating system like "
1758"GNU/Linux. This will make it much harder for attackers to enter your "
1759"computer through hidden back doors. Check out the Free Software Foundation's "
e7253b03 1760"<a href=\"https://www.gnu.org/distros/free-distros.html\">endorsed versions "
eabe8a9a
TS
1761"of GNU/Linux.</a>"
1762msgstr ""
1763
1764#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1765msgid "Optional: Add more email protection with Tor"
1766msgstr ""
1767
1768#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1769msgid ""
1770"<a href=\"https://www.torproject.org/about/overview.html.en\">The Onion "
1771"Router (Tor) network</a> wraps Internet communication in multiple layers of "
1772"encryption and bounces it around the world several times. When used "
1773"properly, Tor confuses surveillance field agents and the global surveillance "
1774"apparatus alike. Using it simultaneously with GnuPG's encryption will give "
1775"you the best results."
1776msgstr ""
1777
1778#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1779msgid ""
1780"To have your email program send and receive email over Tor, install the <a "
1781"href=\"https://addons.mozilla.org/en-us/thunderbird/addon/torbirdy/\">Torbirdy "
e7253b03 1782"plugin</a> by searching for it through Add-ons."
eabe8a9a
TS
1783msgstr ""
1784
1785#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1786msgid ""
1787"Before beginning to check your email over Tor, make sure you understand <a "
4aec1215
TG
1788"href=\"https://www.torproject.org/docs/faq.html.en#WhatProtectionsDoesTorProvide\"> "
1789"the security tradeoffs involved</a>. This <a "
eabe8a9a
TS
1790"href=\"https://www.eff.org/pages/tor-and-https\">infographic</a> from our "
1791"friends at the Electronic Frontier Foundation demonstrates how Tor keeps you "
1792"secure."
1793msgstr ""
1794
1795#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
e7253b03 1796msgid "Section 7: Next Steps"
eabe8a9a
TS
1797msgstr ""
1798
1799#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1800msgid "Make Email Self-Defense tools even better"
1801msgstr ""
1802
1803#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1804msgid ""
1805"<a href=\"https://libreplanet.org/wiki/GPG_guide/Public_Review\">Leave "
1806"feedback and suggest improvements to this guide</a>. We welcome "
1807"translations, but we ask that you contact us at <a "
1808"href=\"mailto:campaigns@fsf.org\">campaigns@fsf.org</a> before you start, so "
1809"that we can connect you with other translators working in your language."
1810msgstr ""
1811
1812#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1813msgid ""
1814"If you like programming, you can contribute code to <a "
e7253b03 1815"href=\"https://www.gnupg.org/\">GnuPG</a>."
eabe8a9a
TS
1816msgstr ""
1817
1818#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1819msgid ""
1820"To go the extra mile, support the Free Software Foundation so we can keep "
1821"improving Email Self-Defense, and make more tools like it."
1822msgstr ""
1823
1824#. type: Content of: <html><body><header><div><ul><li>
e7253b03 1825msgid "<a href=\"index.html\">Set up guide</a>"
2fd4a6dc
TG
1826msgstr ""
1827
eabe8a9a 1828#. type: Content of: <html><body><header><div><ul><li>
eabe8a9a
TS
1829msgid "<a href=\"workshops.html\" class=\"current\">Teach your friends</a>"
1830msgstr ""
1831
1832#. type: Content of: <html><body><header><div><div><div><p>
eabe8a9a
TS
1833msgid ""
1834"We want to translate this guide into more languages, and make a version for "
1835"encryption on mobile devices. Please donate, and help people around the "
1836"world take the first step towards protecting their privacy with free "
1837"software."
1838msgstr ""
1839
e7253b03
TG
1840#. type: Content of: <html><body><header><div><div><p><a>
1841msgid ""
1842"<a "
1843"href=\"https://crm.fsf.org/civicrm/contribute/transact?reset=1&amp;id=14&amp;pk_campaign=email_self_defense&amp;pk_kwd=guide_donate\">"
1844msgstr ""
1845
eabe8a9a 1846#. type: Attribute 'alt' of: <html><body><header><div><div><p><a><img>
eabe8a9a
TS
1847msgid "View &amp; share our infographic →"
1848msgstr ""
1849
1850#. type: Content of: <html><body><header><div><div><p>
eabe8a9a
TS
1851msgid ""
1852"</a> Understanding and setting up email encryption sounds like a daunting "
1853"task to many people. That's why helping your friends with GnuPG plays such "
1854"an important role in helping spread encryption. Even if only one person "
1855"shows up, that's still one more person using encryption who wasn't "
1856"before. You have the power to help your friends keep their digital love "
1857"letters private, and teach them about the importance of free software. If "
1858"you use GnuPG to send and receive encrypted email, you're a perfect "
1859"candidate for leading a workshop!"
1860msgstr ""
1861
1862#. type: Attribute 'alt' of: <html><body><section><div><div><p><img>
eabe8a9a
TS
1863msgid "A small workshop among friends"
1864msgstr ""
1865
1866#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
1867msgid "<em>#1</em> Get your friends or community interested"
1868msgstr ""
1869
1870#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1871msgid ""
1872"If you hear friends grumbling about their lack of privacy, ask them if "
1873"they're interested in attending a workshop on Email Self-Defense. If your "
1874"friends don't grumble about privacy, they may need some convincing. You "
1875"might even hear the classic \"if you've got nothing to hide, you've got "
1876"nothing to fear\" argument against using encryption."
1877msgstr ""
1878
1879#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1880msgid ""
1881"Here are some talking points you can use to help explain why it's worth it "
1882"to learn GnuPG. Mix and match whichever you think will make sense to your "
1883"community:"
1884msgstr ""
1885
1886#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1887msgid "Strength in numbers"
1888msgstr ""
1889
1890#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1891msgid ""
1892"Each person who chooses to resist mass surveillance with encryption makes it "
1893"easier for others to resist as well. People normalizing the use of strong "
1894"encryption has multiple powerful effects: it means those who need privacy "
1895"the most, like potential whistle-blowers and activists, are more likely to "
1896"learn about encryption. More people using encryption for more things also "
1897"makes it harder for surveillance systems to single out those that can't "
1898"afford to be found, and shows solidarity with those people."
1899msgstr ""
1900
1901#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1902msgid "People you respect may already be using encryption"
1903msgstr ""
1904
1905#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1906msgid ""
1907"Many journalists, whistleblowers, activists, and researchers use GnuPG, so "
1908"your friends might unknowingly have heard of a few people who use it "
1909"already. You can search for \"BEGIN PUBLIC KEY BLOCK\" + keyword to help "
1910"make a list of people and organizations who use GnuPG whom your community "
1911"will likely recognize."
1912msgstr ""
1913
1914#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1915msgid "Respect your friends' privacy"
1916msgstr ""
1917
1918#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1919msgid ""
1920"There's no objective way to judge what constitutes privacy-sensitive "
1921"correspondence. As such, it's better not to presume that just because you "
1922"find an email you sent to a friend innocuous, your friend (or a surveillance "
1923"agent, for that matter!) feels the same way. Show your friends respect by "
1924"encrypting your correspondence with them."
1925msgstr ""
1926
1927#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1928msgid "Privacy technology is normal in the physical world"
1929msgstr ""
1930
1931#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1932msgid ""
1933"In the physical realm, we take window blinds, envelopes, and closed doors "
1934"for granted as ways of protecting our privacy. Why should the digital realm "
1935"be any different?"
1936msgstr ""
1937
1938#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1939msgid "We shouldn't have to trust our email providers with our privacy"
1940msgstr ""
1941
1942#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1943msgid ""
1944"Some email providers are very trustworthy, but many have incentives not to "
1945"protect your privacy and security. To be empowered digital citizens, we need "
1946"to build our own security from the bottom up."
1947msgstr ""
1948
1949#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
1950msgid "<em>#2</em> Plan The Workshop"
1951msgstr ""
1952
1953#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1954msgid ""
1955"Once you've got at least one interested friend, pick a date and start "
1956"planning out the workshop. Tell participants to bring their computer and ID "
1957"(for signing each other's keys). If you'd like to make it easy for the "
e7253b03
TG
1958"participants to use <a "
1959"href=\"https://theintercept.com/2015/03/26/passphrases-can-memorize-attackers-cant-guess/\">Diceware</a> "
1960"for choosing passwords, get a pack of dice beforehand. Make sure the "
1961"location you select has an easily accessible Internet connection, and make "
1962"backup plans in case the connection stops working on the day of the "
1963"workshop. Libraries, coffee shops, and community centers make great "
1964"locations. Try to get all the participants to set up an email client based "
1965"on Thunderbird before the event. Direct them to their email provider's IT "
1966"department or help page if they run into errors."
eabe8a9a
TS
1967msgstr ""
1968
1969#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1970msgid ""
1971"Estimate that the workshop will take at least forty minutes plus ten minutes "
1972"for each participant. Plan extra time for questions and technical glitches."
1973msgstr ""
1974
1975#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1976msgid ""
1977"The success of the workshop requires understanding and catering to the "
1978"unique backgrounds and needs of each group of participants. Workshops should "
1979"stay small, so that each participant receives more individualized "
1980"instruction. If more than a handful of people want to participate, keep the "
1981"facilitator to participant ratio high by recruiting more facilitators, or by "
1982"facilitating multiple workshops. Small workshops among friends work great!"
1983msgstr ""
1984
1985#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
1986msgid "<em>#3</em> Follow the guide as a group"
1987msgstr ""
1988
1989#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1990msgid ""
1991"Work through the Email Self-Defense guide a step at a time as a group. Talk "
1992"about the steps in detail, but make sure not to overload the participants "
1993"with minutia. Pitch the bulk of your instructions to the least tech-savvy "
1994"participants. Make sure all the participants complete each step before the "
1995"group moves on to the next one. Consider facilitating secondary workshops "
1996"afterwards for people that had trouble grasping the concepts, or those that "
1997"grasped them quickly and want to learn more."
1998msgstr ""
1999
2000#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2001msgid ""
2002"In <a href=\"index.html#section2\">Section 2</a> of the guide, make sure the "
2003"participants upload their keys to the same keyserver so that they can "
2004"immediately download each other's keys later (sometimes there is a delay in "
2005"synchronization between keyservers). During <a "
2006"href=\"index.html#section3\">Section 3</a>, give the participants the option "
2007"to send test messages to each other instead of or as well as "
2008"Edward. Similarly, in <a href=\"index.html#section4\">Section 4</a>, "
2009"encourage the participants to sign each other's keys. At the end, make sure "
2010"to remind people to safely back up their revocation certificates."
2011msgstr ""
2012
2013#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
2014msgid "<em>#4</em> Explain the pitfalls"
2015msgstr ""
2016
2017#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2018msgid ""
2019"Remind participants that encryption works only when it's explicitly used; "
2020"they won't be able to send an encrypted email to someone who hasn't already "
2021"set up encryption. Also remind participants to double-check the encryption "
2022"icon before hitting send, and that subjects and timestamps are never "
2023"encrypted."
2024msgstr ""
2025
2026#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2027msgid ""
2028"Explain the <a "
2029"href=\"https://www.gnu.org/proprietary/proprietary.html\">dangers of running "
2030"a proprietary system</a> and advocate for free software, because without it, "
2031"we can't <a "
2032"href=\"https://www.fsf.org/bulletin/2013/fall/how-can-free-software-protect-us-from-surveillance\">meaningfully "
2033"resist invasions of our digital privacy and autonomy</a>."
2034msgstr ""
2035
2036#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
2037msgid "<em>#5</em> Share additional resources"
2038msgstr ""
2039
2040#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2041msgid ""
2042"GnuPG's advanced options are far too complex to teach in a single "
2043"workshop. If participants want to know more, point out the advanced "
2044"subsections in the guide and consider organizing another workshop. You can "
2045"also share <a "
e7253b03
TG
2046"href=\"https://www.gnupg.org/documentation/index.html\">GnuPG's</a> official "
2047"documentation and mailing lists, and the <a "
2048"href=\"https://libreplanet.org/wiki/GPG_guide/Public_Review\">Email "
2049"Self-Defense feedback</a> page. Many GNU/Linux distribution's Web sites also "
2050"contain a page explaining some of GnuPG's advanced features."
eabe8a9a
TS
2051msgstr ""
2052
2053#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
2054msgid "<em>#6</em> Follow up"
2055msgstr ""
2056
2057#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2058msgid ""
2059"Make sure everyone has shared email addresses and public key fingerprints "
2060"before they leave. Encourage the participants to continue to gain GnuPG "
2061"experience by emailing each other. Send them each an encrypted email one "
2062"week after the event, reminding them to try adding their public key ID to "
2063"places where they publicly list their email address."
2064msgstr ""
2065
2066#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2067msgid ""
2068"If you have any suggestions for improving this workshop guide, please let us "
2069"know at <a href=\"mailto:campaigns@fsf.org\">campaigns@fsf.org</a>."
2070msgstr ""