pl: New translated segments
[enc.git] / esd-temp.pot
CommitLineData
db1d71be
TG
1# SOME DESCRIPTIVE TITLE
2# Copyright (C) YEAR Free Software Foundation, Inc.
3# This file is distributed under the same license as the PACKAGE package.
eabe8a9a
TS
4# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
5#
6#, fuzzy
7msgid ""
8msgstr ""
db1d71be 9"Project-Id-Version: PACKAGE VERSION\n"
d71144f9 10"POT-Creation-Date: 2022-12-16 11:42+0100\n"
eabe8a9a
TS
11"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
12"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
13"Language-Team: LANGUAGE <LL@li.org>\n"
14"Language: \n"
15"MIME-Version: 1.0\n"
16"Content-Type: text/plain; charset=UTF-8\n"
17"Content-Transfer-Encoding: 8bit\n"
18
71b90906
TG
19#. type: Attribute 'lang' of: <html>
20msgid "en"
21msgstr ""
22
a8687551
TS
23#. type: Attribute 'content' of: <html><head><meta>
24msgid "text/html; charset=utf-8"
25msgstr ""
26
eabe8a9a 27#. type: Content of: <html><head><title>
eabe8a9a
TS
28msgid "Email Self-Defense - a guide to fighting surveillance with GnuPG encryption"
29msgstr ""
30
a8687551 31#. type: Attribute 'content' of: <html><head><meta>
8cd4252b
TG
32msgid ""
33"GnuPG, GPG, openpgp, surveillance, privacy, email, security, GnuPG2, "
34"encryption"
a8687551
TS
35msgstr ""
36
37#. type: Attribute 'content' of: <html><head><meta>
38msgid ""
39"Email surveillance violates our fundamental rights and makes free speech "
40"risky. This guide will teach you email self-defense in 40 minutes with "
41"GnuPG."
42msgstr ""
43
44#. type: Attribute 'content' of: <html><head><meta>
45msgid "width=device-width, initial-scale=1"
46msgstr ""
47
eabe8a9a 48#. type: Content of: <html><body><header><div><p>
eabe8a9a
TS
49msgid ""
50"<strong>Please check your email for a confirmation link now. Thanks for "
51"joining our list!</strong>"
52msgstr ""
53
54#. type: Content of: <html><body><header><div><p>
eabe8a9a
TS
55msgid ""
56"If you don't receive the confirmation link, send us an email at info@fsf.org "
57"to be added manually."
58msgstr ""
59
e7253b03 60#. type: Attribute 'alt' of: <html><body><header><div><p><img>
eabe8a9a
TS
61msgid "Try it out."
62msgstr ""
63
64#. type: Content of: <html><body><header><div><p>
eabe8a9a
TS
65msgid "Join us on microblogging services for day-to-day updates:"
66msgstr ""
67
68#. type: Content of: <html><body><section><div><div><div><p><a>
eabe8a9a
TS
69msgid "<a href=\"https://status.fsf.org/fsf\">"
70msgstr ""
71
72#. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
eabe8a9a
TS
73msgid "[GNU Social]"
74msgstr ""
75
76#. type: Content of: <html><body><section><div><div><div><p><a>
60715780 77msgid "&nbsp;GNU Social</a>&nbsp; |&nbsp; <a href=\"https://hostux.social/@fsf\">"
eabe8a9a
TS
78msgstr ""
79
80#. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
60715780 81msgid "[Mastodon]"
eabe8a9a
TS
82msgstr ""
83
84#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 85msgid ""
60715780 86"&nbsp;Mastodon</a>&nbsp; |&nbsp; <a "
eabe8a9a
TS
87"href=\"https://www.twitter.com/fsf\">Twitter</a>"
88msgstr ""
89
90#. type: Content of: <html><body><header><div><p>
eabe8a9a
TS
91msgid ""
92"<small><a href=\"https://www.fsf.org/twitter\">Read why GNU Social and "
60715780 93"Mastodon are better than Twitter.</a></small>"
eabe8a9a
TS
94msgstr ""
95
96#. type: Content of: <html><body><header><div><p>
eabe8a9a
TS
97msgid "&larr; Return to <a href=\"index.html\">Email Self-Defense</a>"
98msgstr ""
99
100#. type: Content of: <html><body><footer><div><div><h4><a>
eabe8a9a
TS
101msgid "<a href=\"https://u.fsf.org/ys\">"
102msgstr ""
103
104#. type: Attribute 'alt' of: <html><body><footer><div><div><h4><a><img>
eabe8a9a
TS
105msgid "Free Software Foundation"
106msgstr ""
107
108#. type: Content of: <html><body><footer><div><p>
eabe8a9a
TS
109msgid "</a>"
110msgstr ""
111
112#. type: Content of: <html><body><footer><div><div><p>
eabe8a9a 113msgid ""
e7253b03 114"Copyright &copy; 2014-2021 <a href=\"https://u.fsf.org/ys\">Free Software "
eabe8a9a
TS
115"Foundation</a>, Inc. <a "
116"href=\"https://my.fsf.org/donate/privacypolicy.html\">Privacy "
117"Policy</a>. Please support our work by <a "
118"href=\"https://u.fsf.org/yr\">joining us as an associate member.</a>"
119msgstr ""
120
121#. type: Content of: <html><body><footer><div><div><p>
eabe8a9a
TS
122msgid ""
123"The images on this page are under a <a "
124"href=\"https://creativecommons.org/licenses/by/4.0/\">Creative Commons "
125"Attribution 4.0 license (or later version)</a>, and the rest of it is under "
126"a <a href=\"https://creativecommons.org/licenses/by-sa/4.0\">Creative "
127"Commons Attribution-ShareAlike 4.0 license (or later version)</a>. Download "
128"the <a "
e7253b03 129"href=\"https://agpl.fsf.org/emailselfdefense.fsf.org/edward/CURRENT/edward.tar.gz\"> "
4aec1215 130"source code of Edward reply bot</a> by Andrew Engelbrecht "
8c6a812e 131"&lt;andrew@engelbrecht.io&gt; and Josh Drake &lt;zamnedix@gnu.org&gt;, "
eabe8a9a 132"available under the GNU Affero General Public License. <a "
e7253b03 133"href=\"https://www.gnu.org/licenses/license-list.html#OtherLicenses\">Why "
eabe8a9a
TS
134"these licenses?</a>"
135msgstr ""
136
137#. type: Content of: <html><body><footer><div><div><p>
eabe8a9a
TS
138msgid ""
139"Fonts used in the guide &amp; infographic: <a "
140"href=\"https://www.google.com/fonts/specimen/Dosis\">Dosis</a> by Pablo "
141"Impallari, <a "
e7253b03 142"href=\"https://www.google.com/fonts/specimen/Signika\">Signika</a> by Anna "
eabe8a9a 143"Giedry&#347;, <a "
e7253b03 144"href=\"https://www.google.com/fonts/specimen/Archivo+Narrow\">Archivo "
eabe8a9a
TS
145"Narrow</a> by Omnibus-Type, <a "
146"href=\"https://libreplanet.org/wiki/GPG_guide/Graphics_Howto#Pitfalls\">PXL-2000</a> "
147"by Florian Cramer."
148msgstr ""
149
150#. type: Content of: <html><body><footer><div><div><p>
eabe8a9a
TS
151msgid ""
152"Download the <a href=\"emailselfdefense_source.zip\">source package</a> for "
153"this guide, including fonts, image source files and the text of Edward's "
154"messages."
155msgstr ""
156
157#. type: Content of: <html><body><footer><div><div><p>
eabe8a9a
TS
158msgid ""
159"This site uses the Weblabels standard for labeling <a "
160"href=\"https://www.fsf.org/campaigns/freejs\">free JavaScript</a>. View the "
e7253b03 161"JavaScript <a href=\"https://weblabels.fsf.org/emailselfdefense.fsf.org/\" "
eabe8a9a
TS
162"rel=\"jslicense\">source code and license information</a>."
163msgstr ""
164
165#. type: Content of: <html><body><footer><div><p><a>
eabe8a9a
TS
166msgid ""
167"Infographic and guide design by <a rel=\"external\" "
e7253b03 168"href=\"https://jplusplus.org\"><strong>Journalism++</strong>"
eabe8a9a
TS
169msgstr ""
170
171#. type: Attribute 'alt' of: <html><body><footer><div><p><a><img>
eabe8a9a
TS
172msgid "Journalism++"
173msgstr ""
174
e7253b03
TG
175#. type: Content of: <html><body><header><div><h1>
176msgid "Email Self-Defense"
71b90906
TG
177msgstr ""
178
eabe8a9a 179#. type: Content of: <html><body><header><div><ul><li>
eabe8a9a 180msgid ""
8cd4252b
TG
181"<strong><a "
182"href=\"https://libreplanet.org/wiki/GPG_guide/Translation_Guide\"> "
183"Translate!</a></strong>"
eabe8a9a
TS
184msgstr ""
185
186#. type: Content of: <html><body><header><div><ul><li>
e7253b03 187msgid "<a href=\"index.html\" class=\"current\">Set up guide</a>"
eabe8a9a
TS
188msgstr ""
189
190#. type: Content of: <html><body><header><div><ul><li>
eabe8a9a
TS
191msgid "<a href=\"workshops.html\">Teach your friends</a>"
192msgstr ""
193
29139735
TG
194#. type: Content of: <html><body><header><div><ul><li>
195msgid ""
196"<a "
197"href=\"http://hhldo3tnt5solzj2bwfvh7xm4slk2forpjwjyemhcfrlob5gq75gioid.onion/en\" "
198"target=\"_blank\">This site's tor onion service</a>"
199msgstr ""
200
eabe8a9a 201#. type: Content of: <html><body><header><div><ul><li><a>
eabe8a9a 202msgid ""
e7253b03
TG
203"<a "
204"href=\"https://fsf.org/share?u=https://u.fsf.org/zb&amp;t=Email%20encryption%20for%20everyone%20via%20%40fsf\"> "
205"Share&nbsp;"
eabe8a9a
TS
206msgstr ""
207
208#. type: Content of: <html><body><header><div><ul><li><a>
eabe8a9a
TS
209msgid "&nbsp;"
210msgstr ""
211
212#. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
eabe8a9a
TS
213msgid "[Reddit]"
214msgstr ""
215
216#. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
eabe8a9a
TS
217msgid "[Hacker News]"
218msgstr ""
219
eabe8a9a 220#. type: Content of: <html><body><header><div><div><div><p>
eabe8a9a
TS
221msgid ""
222"We fight for computer users' rights, and promote the development of free (as "
223"in freedom) software. Resisting bulk surveillance is very important to us."
224msgstr ""
225
226#. type: Content of: <html><body><header><div><div><div><p>
eabe8a9a 227msgid ""
71b90906 228"<strong>Please donate to support Email Self-Defense. We need to keep "
be1ae08b 229"improving it, and making more materials, for the benefit of people around "
71b90906 230"the world taking the first step towards protecting their privacy.</strong>"
eabe8a9a
TS
231msgstr ""
232
e7253b03 233#. type: Content of: <html><body><section><div><div><div><p><a>
eabe8a9a
TS
234msgid ""
235"<a "
e7253b03 236"href=\"https://crm.fsf.org/civicrm/contribute/transact?reset=1&amp;id=14&amp;mtm_campaign=email_self_defense&amp;mtm_kwd=guide_donate\">"
eabe8a9a
TS
237msgstr ""
238
239#. type: Attribute 'alt' of: <html><body><header><div><div><p><a><img>
eabe8a9a
TS
240msgid "Donate"
241msgstr ""
242
7f65cb9f
TG
243#. type: Content of: <html><body><header><div><div><div><h5>
244msgid "Sign up"
245msgstr ""
246
247#. type: Content of: <html><body><header><div><div><div><form><p>
248msgid "Enter your email address to receive our monthly newsletter, the"
249msgstr ""
250
eceb2f13 251#. type: Content of: <html><body><header><div><div><div><form><p>
7f65cb9f
TG
252msgid ""
253"<a href=\"https://www.fsf.org/free-software-supporter/\">Free Software "
254"Supporter</a>"
255msgstr ""
256
257#. type: Content of: <html><body><header><div><div><div><form><p>
258msgid ""
259"<input id=\"frmEmail\" type=\"text\" name=\"email-Primary\" size=\"18\" "
260"maxlength=\"80\" />"
261msgstr ""
262
263#. type: Content of: <html><body><header><div><div><div><form><p>
264msgid "<input type=\"submit\" name=\"_qf_Edit_next\" value=\"Subscribe me\" />"
265msgstr ""
266
267#. type: Content of: <html><body><header><div><div><div><form><div>
268msgid ""
269"<input name=\"postURL\" type=\"hidden\" value=\"\" /> <input type=\"hidden\" "
270"name=\"group[25]\" value=\"1\" /> <input name=\"cancelURL\" type=\"hidden\" "
eceb2f13 271"value=\"https://my.fsf.org/civicrm/profile?reset=1&amp;gid=31\" /> <input "
7f65cb9f
TG
272"name=\"_qf_default\" type=\"hidden\" value=\"Edit:cancel\" />"
273msgstr ""
274
974f8f55 275#. type: Content of: <html><body><header><div><div><p><a>
eabe8a9a
TS
276msgid "<a id=\"infographic\" href=\"infographic.html\">"
277msgstr ""
278
e7253b03 279#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><a><img>
eabe8a9a
TS
280msgid "View &amp; share our infographic &rarr;"
281msgstr ""
282
283#. type: Content of: <html><body><header><div><div><p>
eabe8a9a 284msgid ""
71b90906 285"</a> Bulk surveillance violates our fundamental rights and makes free speech "
eabe8a9a
TS
286"risky. This guide will teach you a basic surveillance self-defense skill: "
287"email encryption. Once you've finished, you'll be able to send and receive "
d3d12736
TG
288"emails that are scrambled to make sure a surveillance agent or thief "
289"intercepting your email can't read them. All you need is a computer with an "
290"Internet connection, an email account, and about forty minutes."
eabe8a9a
TS
291msgstr ""
292
293#. type: Content of: <html><body><header><div><div><p>
eabe8a9a
TS
294msgid ""
295"Even if you have nothing to hide, using encryption helps protect the privacy "
296"of people you communicate with, and makes life difficult for bulk "
297"surveillance systems. If you do have something important to hide, you're in "
298"good company; these are the same tools that whistleblowers use to protect "
e7253b03 299"their identities while shining light on human rights abuses, corruption, and "
eabe8a9a
TS
300"other crimes."
301msgstr ""
302
303#. type: Content of: <html><body><header><div><div><p>
eabe8a9a
TS
304msgid ""
305"In addition to using encryption, standing up to surveillance requires "
306"fighting politically for a <a "
e7253b03 307"href=\"https://gnu.org/philosophy/surveillance-vs-democracy.html\">reduction "
eabe8a9a
TS
308"in the amount of data collected on us</a>, but the essential first step is "
309"to protect yourself and make surveillance of your communication as difficult "
310"as possible. This guide helps you do that. It is designed for beginners, but "
311"if you already know the basics of GnuPG or are an experienced free software "
312"user, you'll enjoy the advanced tips and the <a "
313"href=\"workshops.html\">guide to teaching your friends</a>."
314msgstr ""
315
316#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
317msgid "<em>#1</em> Get the pieces"
318msgstr ""
319
320#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
321msgid ""
322"This guide relies on software which is <a "
323"href=\"https://www.gnu.org/philosophy/free-sw.html\">freely licensed</a>; "
324"it's completely transparent and anyone can copy it or make their own "
325"version. This makes it safer from surveillance than proprietary software "
e7253b03 326"(like Windows or macOS). Learn more about free software at <a "
eabe8a9a
TS
327"href=\"https://u.fsf.org/ys\">fsf.org</a>."
328msgstr ""
329
330#. type: Content of: <html><body><section><div><div><p>
eabe8a9a 331msgid ""
e7253b03
TG
332"Most GNU/Linux operating systems come with GnuPG installed on them, so if "
333"you're running one of these systems, you don't have to download it. If "
db1d71be 334"you're running macOS or Windows, steps to download GnuPG are below. Before "
e7253b03
TG
335"configuring your encryption setup with this guide, though, you'll need a "
336"desktop email program installed on your computer. Many GNU/Linux "
337"distributions have one installed already, such as Icedove, which may be "
338"under the alternate name \"Thunderbird.\" Programs like these are another "
339"way to access the same email accounts you can access in a browser (like "
340"Gmail), but provide extra features."
eabe8a9a
TS
341msgstr ""
342
eabe8a9a 343#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
eabe8a9a
TS
344msgid "Step 1.A: Install Wizard"
345msgstr ""
346
347#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
348msgid "<em>Step 1.a</em> Set up your email program with your email account"
349msgstr ""
350
351#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 352msgid ""
71b90906 353"Open your email program and follow the wizard (step-by-step walkthrough) "
e7253b03
TG
354"that sets it up with your email account. This usually starts from \"Account "
355"Settings\" &rarr; \"Add Mail Account\". You should get the email server "
356"settings from your systems administrator or the help section of your email "
357"account."
eabe8a9a
TS
358msgstr ""
359
360#. type: Content of: <html><body><section><div><div><div><div><h4>
eabe8a9a
TS
361msgid "Troubleshooting"
362msgstr ""
363
364#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
365msgid "The wizard doesn't launch"
366msgstr ""
367
368#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
369msgid ""
370"You can launch the wizard yourself, but the menu option for doing so is "
371"named differently in each email program. The button to launch it will be in "
372"the program's main menu, under \"New\" or something similar, titled "
373"something like \"Add account\" or \"New/Existing email account.\""
374msgstr ""
375
376#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
377msgid "The wizard can't find my account or isn't downloading my mail"
378msgstr ""
379
380#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
381msgid ""
382"Before searching the Web, we recommend you start by asking other people who "
383"use your email system, to figure out the correct settings."
384msgstr ""
385
e7253b03
TG
386#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
387msgid "I can't find the menu"
388msgstr ""
389
390#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
391msgid ""
392"In many new email programs, the main menu is represented by an image of "
393"three stacked horizontal bars."
394msgstr ""
395
eabe8a9a 396#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
397msgid "Don't see a solution to your problem?"
398msgstr ""
399
400#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
401msgid ""
402"Please let us know on the <a "
403"href=\"https://libreplanet.org/wiki/GPG_guide/Public_Review\">feedback "
404"page</a>."
405msgstr ""
406
e7253b03 407#. type: Content of: <html><body><section><div><div><div><h3>
b2c34a2a 408msgid "<em>Step 1.b</em> Install GnuPG"
eabe8a9a
TS
409msgstr ""
410
e7253b03
TG
411#. type: Content of: <html><body><section><div><div><div><p>
412msgid ""
413"If you are using a GNU/Linux machine, you should already have GnuPG "
b2c34a2a 414"installed, and you can skip to <a href=\"#section2\">Section 2</a>."
eabe8a9a
TS
415msgstr ""
416
e7253b03
TG
417#. type: Content of: <html><body><section><div><div><div><p>
418msgid ""
419"If you are using a macOS or Windows machine, however, you need to first "
420"install the GnuPG program. Select your operating system below and follow the "
b2c34a2a
TG
421"instructions. For the rest of this guide, the steps are the same for all "
422"operating systems."
eabe8a9a
TS
423msgstr ""
424
e7253b03 425#. type: Content of: <html><body><section><div><div><div><div><h4>
8cd4252b 426msgid "macOS"
eabe8a9a
TS
427msgstr ""
428
e7253b03
TG
429#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
430msgid "Use a third-party package manager to install GnuPG"
eabe8a9a
TS
431msgstr ""
432
b2c34a2a 433#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
eabe8a9a 434msgid ""
b2c34a2a
TG
435"The default macOS package manager makes it difficult to install GnuPG and "
436"other pieces of free software (like Emacs, GIMP, or Inkscape). To make "
437"things easier, we recommend setting up the third-party package manager "
438"\"Homebrew\" to install GnuPG. For this, we will use a program called "
674646df 439"\"Terminal,\" which is pre-installed on macOS."
eabe8a9a
TS
440msgstr ""
441
b2c34a2a 442#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8c163d47 443msgid ""
b2c34a2a
TG
444"# Copy the first command on the home page of <a "
445"href=\"https://brew.sh/\">Homebrew</a> by clicking on the clipboard icon, "
446"and paste it in Terminal. Click \"Enter\" and wait for the installation to "
447"finalize."
2fd4a6dc
TG
448msgstr ""
449
b2c34a2a
TG
450#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
451msgid "# Then install GnuPG by entering the following code in Terminal:"
eabe8a9a
TS
452msgstr ""
453
b2c34a2a
TG
454#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
455msgid "<code>brew install gnupg gnupg2</code>"
e7253b03
TG
456msgstr ""
457
458#. type: Content of: <html><body><section><div><div><div><div><h4>
459msgid "Windows"
eabe8a9a
TS
460msgstr ""
461
462#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 463msgid "Get GnuPG by downloading GPG4Win"
eabe8a9a
TS
464msgstr ""
465
2094a53c 466#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
eabe8a9a 467msgid ""
2094a53c 468"<a href=\"https://www.gpg4win.org/\">GPG4Win</a> is an email and file "
e7253b03
TG
469"encryption software package that includes GnuPG. Download and install the "
470"latest version, choosing default options whenever asked. After it's "
471"installed, you can close any windows that it creates."
472msgstr ""
473
e7253b03
TG
474#. type: Content of: <html><body><section><div><div><div><h3>
475msgid "GnuPG, OpenPGP, what?"
476msgstr ""
477
478#. type: Content of: <html><body><section><div><div><div><p>
479msgid ""
480"In general, the terms GnuPG, GPG, GNU Privacy Guard, OpenPGP and PGP are "
481"used interchangeably. Technically, OpenPGP (Pretty Good Privacy) is the "
482"encryption standard, and GNU Privacy Guard (often shortened to GPG or GnuPG) "
483"is the program that implements the standard. Most email programs provide an "
484"interface for GnuPG. There is also a newer version of GnuPG, called GnuPG2."
eabe8a9a
TS
485msgstr ""
486
487#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
488msgid "<em>#2</em> Make your keys"
489msgstr ""
490
e7253b03
TG
491#. type: Attribute 'alt' of: <html><body><section><div><div><p><img>
492msgid "A robot with a head shaped like a key holding a private and a public key"
493msgstr ""
494
eabe8a9a 495#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
496msgid ""
497"To use the GnuPG system, you'll need a public key and a private key (known "
498"together as a keypair). Each is a long string of randomly generated numbers "
499"and letters that are unique to you. Your public and private keys are linked "
500"together by a special mathematical function."
501msgstr ""
502
503#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
504msgid ""
505"Your public key isn't like a physical key, because it's stored in the open "
506"in an online directory called a keyserver. People download it and use it, "
507"along with GnuPG, to encrypt emails they send to you. You can think of the "
508"keyserver as a phonebook; people who want to send you encrypted email can "
509"look up your public key."
510msgstr ""
511
512#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
513msgid ""
514"Your private key is more like a physical key, because you keep it to "
515"yourself (on your computer). You use GnuPG and your private key together to "
8cd4252b
TG
516"descramble encrypted emails other people send to you. <strong>You should "
517"never share your private key with anyone, under any circumstances.</strong>"
eabe8a9a
TS
518msgstr ""
519
520#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
521msgid ""
522"In addition to encryption and decryption, you can also use these keys to "
523"sign messages and check the authenticity of other people's signatures. We'll "
524"discuss this more in the next section."
525msgstr ""
526
527#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
e7253b03
TG
528msgid "Step 2.A: Make your Keypair"
529msgstr ""
530
531#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
532msgid "Step 2.A: Set your passphrase"
eabe8a9a
TS
533msgstr ""
534
535#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
536msgid "<em>Step 2.a</em> Make a keypair"
537msgstr ""
538
8cd4252b 539#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03
TG
540msgid "Make your keypair"
541msgstr ""
542
eabe8a9a 543#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 544msgid ""
b2c34a2a
TG
545"We will use the command line in a terminal to create a keypair using the "
546"GnuPG program."
eabe8a9a
TS
547msgstr ""
548
e7253b03 549#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 550msgid ""
b2c34a2a
TG
551"Whether on GNU/Linux, macOS or Windows, you can launch your terminal "
552"(\"Terminal\" in macOS, \"PowerShell\" in Windows) from the Applications "
553"menu (some GNU/Linux systems respond to the <kbd>Ctrl + Alt + T</kbd> "
554"shortcut)."
eabe8a9a
TS
555msgstr ""
556
e7253b03 557#. type: Content of: <html><body><section><div><div><div><p>
b2c34a2a 558msgid "# Enter <code>gpg --full-generate-key</code> to start the process."
eabe8a9a
TS
559msgstr ""
560
e7253b03 561#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 562msgid ""
e7253b03 563"# To answer what kind of key you would like to create, select the default "
8cd4252b 564"option: <samp>1&nbsp;RSA&nbsp;and&nbsp;RSA</samp>."
eabe8a9a
TS
565msgstr ""
566
e7253b03 567#. type: Content of: <html><body><section><div><div><div><p>
8cd4252b 568msgid "# Enter the following keysize: <code>4096</code> for a strong key."
e7253b03
TG
569msgstr ""
570
571#. type: Content of: <html><body><section><div><div><div><p>
b2c34a2a 572msgid "# Choose the expiration date; we suggest <code>2y</code> (2 years)."
e7253b03
TG
573msgstr ""
574
575#. type: Content of: <html><body><section><div><div><div><p>
576msgid "Follow the prompts to continue setting up with your personal details."
577msgstr ""
578
39ad5485
TG
579#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
580msgid ""
581"Depending on your version of GPG, you may need to use <code>--gen-key</code> "
1c3b81e7 582"instead of <code>--full-generate-key</code>&#65279;."
39ad5485
TG
583msgstr ""
584
8cd4252b 585#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03
TG
586msgid "Set your passphrase"
587msgstr ""
588
589#. type: Content of: <html><body><section><div><div><div><p>
590msgid ""
9a1f3824 591"On the screen titled \"Passphrase,\" pick a strong passphrase! You can do it "
eabe8a9a
TS
592"manually, or you can use the Diceware method. Doing it manually is faster "
593"but not as secure. Using Diceware takes longer and requires dice, but "
9a1f3824 594"creates a passphrase that is much harder for attackers to figure out. To use "
4aec1215
TG
595"it, read the section \"Make a secure passphrase with Diceware\" in <a "
596"href=\"https://theintercept.com/2015/03/26/passphrases-can-memorize-attackers-cant-guess/\"> "
597"this article</a> by Micah Lee."
eabe8a9a
TS
598msgstr ""
599
600#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 601msgid ""
e7253b03 602"If you'd like to pick a passphrase manually, come up with something you can "
eabe8a9a
TS
603"remember which is at least twelve characters long, and includes at least one "
604"lower case and upper case letter and at least one number or punctuation "
9a1f3824 605"symbol. Never pick a passphrase you've used elsewhere. Don't use any "
eabe8a9a
TS
606"recognizable patterns, such as birthdays, telephone numbers, pets' names, "
607"song lyrics, quotes from books, and so on."
608msgstr ""
609
eabe8a9a 610#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 611msgid "GnuPG is not installed"
eabe8a9a
TS
612msgstr ""
613
614#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a 615msgid ""
b2c34a2a
TG
616"You can check if this is the case with the command <code>gpg "
617"--version</code>&#65279;. If GnuPG is not installed, it will bring up the "
618"following result on most GNU/Linux operating systems, or something like it: "
619"<samp>Command 'gpg' not found, but can be installed with: sudo apt install "
620"gnupg</samp>. Follow that command and install the program."
eabe8a9a
TS
621msgstr ""
622
f950b092
TG
623#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
624msgid "<i>gpg --full-generate-key</i> command not working"
625msgstr ""
626
627#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
628msgid ""
629"Some distributions use a different version of GPG. When you receive an error "
630"code that is something along the lines of: <samp>gpg: Invalid option "
631"\"--full-generate-key\"</samp>, you can try the following commands:"
632msgstr ""
633
634#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
635msgid "<code>sudo apt update</code>"
636msgstr ""
637
638#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
639msgid "<code>sudo apt install gnupg2</code>"
640msgstr ""
641
642#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
643msgid "<code>gpg2 --full-generate-key</code>"
644msgstr ""
645
646#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
647msgid ""
648"If this resolved the issue, you need to continue to use the gpg2 identifier "
649"instead of gpg throughout the following steps of the guide."
650msgstr ""
651
eabe8a9a 652#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 653msgid "I took too long to create my passphrase"
eabe8a9a
TS
654msgstr ""
655
656#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a 657msgid ""
e7253b03
TG
658"That's okay. It's important to think about your passphrase. When you're "
659"ready, just follow the steps from the beginning again to create your key."
eabe8a9a
TS
660msgstr ""
661
662#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 663msgid "How can I see my key?"
eabe8a9a
TS
664msgstr ""
665
666#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a 667msgid ""
b2c34a2a
TG
668"Use the following command to see all keys: <code>gpg "
669"--list-keys</code>&#65279;. Yours should be listed in there, and later, so "
670"will Edward's (<a href=\"#section3\">Section 3</a>)."
671msgstr ""
672
673#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
674msgid ""
675"If you want to see only your key, you can use <code>gpg --list-key "
676"[your@email]</code>&#65279;."
677msgstr ""
678
679#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
680msgid ""
681"You can also use <code>gpg --list-secret-key</code> to see your own private "
682"key."
eabe8a9a
TS
683msgstr ""
684
685#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 686msgid "More resources"
eabe8a9a
TS
687msgstr ""
688
689#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a 690msgid ""
e7253b03 691"For more information about this process, you can also refer to <a "
eabe8a9a
TS
692"href=\"https://www.gnupg.org/gph/en/manual/c14.html#AEN25\">The GNU Privacy "
693"Handbook</a>. Make sure you stick with \"RSA and RSA\" (the default), "
694"because it's newer and more secure than the algorithms the documentation "
b2c34a2a
TG
695"recommends. Also make sure your key is at least 4096&nbsp;bits if you want "
696"to be secure."
e7253b03
TG
697msgstr ""
698
699#. type: Content of: <html><body><section><div><div><div><div><h4>
700msgid "Advanced"
eabe8a9a
TS
701msgstr ""
702
703#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
704msgid "Advanced key pairs"
705msgstr ""
706
707#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
708msgid ""
709"When GnuPG creates a new keypair, it compartmentalizes the encryption "
710"function from the signing function through <a "
711"href=\"https://wiki.debian.org/Subkeys\">subkeys</a>. If you use subkeys "
e7253b03
TG
712"carefully, you can keep your GnuPG identity more secure and recover from a "
713"compromised key much more quickly. <a "
eabe8a9a 714"href=\"https://alexcabal.com/creating-the-perfect-gpg-keypair/\">Alex "
e7253b03 715"Cabal</a> and <a href=\"https://keyring.debian.org/creating-key.html\">the "
eabe8a9a
TS
716"Debian wiki</a> provide good guides for setting up a secure subkey "
717"configuration."
718msgstr ""
719
e7253b03
TG
720#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
721msgid "Step 2.B: Send to server and generate a certificate"
722msgstr ""
723
eabe8a9a 724#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03
TG
725msgid "<em>Step 2.b</em> Some important steps following creation"
726msgstr ""
727
8cd4252b 728#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03 729msgid "Upload your key to a keyserver"
eabe8a9a
TS
730msgstr ""
731
732#. type: Content of: <html><body><section><div><div><div><p>
e7253b03
TG
733msgid ""
734"We will upload your key to a keyserver, so if someone wants to send you an "
735"encrypted message, they can download your public key from the "
736"Internet. There are multiple keyservers that you can select from the menu "
39ad5485
TG
737"when you upload, but they are mostly all copies of each other. Any server "
738"will work, but it's good to remember which one you uploaded your key to "
739"originally. Also keep in mind, sometimes takes a few hours for them to match "
e7253b03 740"each other when a new key is uploaded."
eabe8a9a
TS
741msgstr ""
742
743#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 744msgid ""
8cd4252b
TG
745"# Copy your keyID: <code>gpg --list-key [your@email]</code> will list your "
746"public (\"pub\") key information, including your keyID, which is a unique "
747"list of numbers and letters. Copy this keyID, so you can use it in the "
748"following command."
eabe8a9a
TS
749msgstr ""
750
751#. type: Content of: <html><body><section><div><div><div><p>
8cd4252b 752msgid "# Upload your key to a server: <code>gpg --send-key [keyID]</code>"
eabe8a9a
TS
753msgstr ""
754
8cd4252b 755#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03
TG
756msgid "Export your key to a file"
757msgstr ""
758
759#. type: Content of: <html><body><section><div><div><div><p>
760msgid ""
761"Use the following command to export your secret key so you can import it "
762"into your email client at the next <a href=\"#section3\">step</a>. To avoid "
763"getting your key compromised, store this in a safe place, and make sure that "
764"if it is transferred, it is done so in a trusted way. Exporting your keys "
765"can be done with the following commands:"
766msgstr ""
767
8cd4252b
TG
768#. type: Content of: <html><body><section><div><div><div><p><code>
769msgid "<code> $ gpg --export-secret-keys -a [keyID] > my_secret_key.asc"
e7253b03
TG
770msgstr ""
771
2094a53c 772#. type: Content of: <html><body><section><div><div><div><p>
8cd4252b 773msgid "$ gpg --export -a [keyID] > my_public_key.asc </code>"
e7253b03
TG
774msgstr ""
775
8cd4252b 776#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03
TG
777msgid "Generate a revocation certificate"
778msgstr ""
779
780#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 781msgid ""
e7253b03
TG
782"Just in case you lose your key, or it gets compromised, you want to generate "
783"a certificate and choose to save it in a safe place on your computer for now "
b2c34a2a 784"(please refer to <a href=\"#step-6c\">Step 6.C</a> for how to best store "
e7253b03
TG
785"your revocation cerficate safely). This step is essential for your email "
786"self-defense, as you'll learn more about in <a href=\"#section5\">Section "
787"5</a>."
788msgstr ""
789
790#. type: Content of: <html><body><section><div><div><div><p>
791msgid ""
8cd4252b
TG
792"# Generate a revocation certificate: <code>gpg --gen-revoke --output "
793"revoke.asc [keyID]</code>"
e7253b03
TG
794msgstr ""
795
796#. type: Content of: <html><body><section><div><div><div><p>
797msgid ""
798"# It will prompt you to give a reason for revocation, we recommend to use "
8cd4252b 799"<samp>1&nbsp;=&nbsp;key has been compromised</samp>."
e7253b03
TG
800msgstr ""
801
802#. type: Content of: <html><body><section><div><div><div><p>
803msgid ""
b2c34a2a
TG
804"# You don't have to fill in a reason, but you can; then press \"Enter\" for "
805"an empty line, and confirm your selection."
eabe8a9a
TS
806msgstr ""
807
f950b092
TG
808#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
809msgid "Sending my key to the keyserver is not working"
810msgstr ""
811
812#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
813msgid ""
814"Instead of using the general command to upload your key to the keyserver, "
815"you can use a more specific command and add the keyserver to your command "
f68b2d75 816"<code>gpg --keyserver keys.openpgp.org --send-key [keyID]</code>&#65279;."
f950b092
TG
817msgstr ""
818
eabe8a9a 819#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 820msgid "My key doesn't seem to be working or I get a \"permission denied.\""
eabe8a9a
TS
821msgstr ""
822
2094a53c 823#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
e7253b03
TG
824msgid ""
825"Like every other file or folder, gpg keys are subject to permissions. If "
826"these are not set correctly, your system may not be accepting your keys. You "
827"can follow the next steps to check, and update to the right permissions."
828msgstr ""
829
2094a53c 830#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8cd4252b 831msgid "# Check your permissions: <code>ls -l ~/.gnupg/*</code>"
e7253b03
TG
832msgstr ""
833
2094a53c 834#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
e7253b03 835msgid ""
db1d71be
TG
836"# Set permissions to read, write, execute for only yourself, no "
837"others. These are the recommended permissions for your folder."
e7253b03
TG
838msgstr ""
839
2094a53c 840#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
9a1f3824 841msgid "You can use the command: <code>chmod 700 ~/.gnupg</code>"
e7253b03
TG
842msgstr ""
843
2094a53c 844#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
e7253b03 845msgid ""
db1d71be
TG
846"# Set permissions to read and write for yourself only, no others. These are "
847"the recommended permissions for the keys inside your folder."
e7253b03
TG
848msgstr ""
849
2094a53c 850#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8cd4252b 851msgid "You can use the code: <code>chmod 600 ~/.gnupg/*</code>"
e7253b03
TG
852msgstr ""
853
854#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
855msgid ""
856"If you have (for any reason) created your own folders inside ~/.gnupg, you "
857"must also additionally apply execute permissions to that folder. Folders "
858"require execution privileges to be opened. For more information on "
859"permissions, you can check out <a "
860"href=\"https://helpdeskgeek.com/linux-tips/understanding-linux-permissions-chmod-usage/\">this "
861"detailed information guide</a>."
eabe8a9a
TS
862msgstr ""
863
864#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 865msgid "More about keyservers"
eabe8a9a
TS
866msgstr ""
867
868#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a 869msgid ""
9a1f3824
TG
870"You can find some more keyserver information <a "
871"href=\"https://www.gnupg.org/gph/en/manual/x457.html\">in this "
872"manual</a>. <a href=\"https://keys.mailvelope.com\">The Mailvelope Key "
873"Server</a> allows automatic public key lookup. You can also <a "
e7253b03
TG
874"href=\"https://www.gnupg.org/gph/en/manual/x56.html#AEN64\">directly export "
875"your key</a> as a file on your computer."
eabe8a9a
TS
876msgstr ""
877
878#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03 879msgid "Transferring your keys"
eabe8a9a
TS
880msgstr ""
881
2094a53c 882#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
eabe8a9a 883msgid ""
e7253b03
TG
884"Use the following commands to transfer your keys. To avoid getting your key "
885"compromised, store it in a safe place, and make sure that if it is "
886"transferred, it is done so in a trusted way. Importing and exporting a key "
887"can be done with the following commands:"
888msgstr ""
889
8cd4252b
TG
890#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p><code>
891msgid "<code> $ gpg --export-secret-keys -a [keyID] > my_private_key.asc"
e7253b03
TG
892msgstr ""
893
8cd4252b 894#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p><code>
2094a53c 895msgid "$ gpg --export -a [keyID] > my_public_key.asc"
e7253b03
TG
896msgstr ""
897
8cd4252b 898#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p><code>
e7253b03
TG
899msgid "$ gpg --import my_private_key.asc"
900msgstr ""
901
2094a53c 902#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8cd4252b 903msgid "$ gpg --import my_public_key.asc </code>"
e7253b03
TG
904msgstr ""
905
906#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
907msgid ""
908"Ensure that the keyID printed is the correct one, and if so, then go ahead "
909"and add ultimate trust for it:"
910msgstr ""
911
2094a53c 912#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
8cd4252b 913msgid "<code> $ gpg --edit-key [your@email] </code>"
e7253b03
TG
914msgstr ""
915
2094a53c 916#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
e7253b03 917msgid ""
b2c34a2a
TG
918"Because this is your key, you should choose "
919"<code>ultimate</code>&#65279;. You shouldn't trust anyone else's key "
920"ultimately."
e7253b03
TG
921msgstr ""
922
923#. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
924msgid ""
b2c34a2a 925"Refer to <a href=\"#step-2b\">Troubleshooting in Step 2.B</a> for more "
e7253b03
TG
926"information on permissions. When transferring keys, your permissions may get "
927"mixed, and errors may be prompted. These are easily avoided when your "
928"folders and files have the right permissions"
929msgstr ""
930
931#. type: Content of: <html><body><section><div><div><h2>
932msgid "<em>#3</em> Set up email encryption"
933msgstr ""
934
935#. type: Content of: <html><body><section><div><div><p>
936msgid ""
937"The Icedove (or Thunderbird) email program has PGP functionality integrated, "
938"which makes it pretty easy to work with. We'll take you through the steps of "
939"integrating and using your key in these email clients."
940msgstr ""
941
942#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
943msgid "Step 3.A: Email Menu"
944msgstr ""
945
946#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
947msgid "Step 3.A: Import From File"
948msgstr ""
949
950#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
951msgid "Step 3.A: Success"
952msgstr ""
953
954#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
955msgid "Step 3.A: Troubleshoot"
eabe8a9a
TS
956msgstr ""
957
958#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03
TG
959msgid "<em>Step 3.a</em> Set up your email with encryption"
960msgstr ""
961
2094a53c 962#. type: Content of: <html><body><section><div><div><div><p>
e7253b03
TG
963msgid ""
964"Once you have set up your email with encryption, you can start contributing "
965"to encrypted traffic on the Internet. First we'll get your email client to "
966"import your secret key, and we will also learn how to get other people's "
967"public keys from servers so you can send and receive encrypted email."
eabe8a9a
TS
968msgstr ""
969
970#. type: Content of: <html><body><section><div><div><div><p>
252b506d 971msgid "# Open your email client and use \"Tools\" &rarr; <i>OpenPGP Key Manager</i>"
e7253b03
TG
972msgstr ""
973
974#. type: Content of: <html><body><section><div><div><div><p>
8cd4252b 975msgid "# Under \"File\" &rarr; <i>Import Secret Key(s) From File</i>"
e7253b03
TG
976msgstr ""
977
978#. type: Content of: <html><body><section><div><div><div><p>
979msgid ""
252b506d 980"# Select the file you saved under the name [my_secret_key.asc] in <a "
b2c34a2a 981"href=\"#step-2b\">Step 2.B</a> when you exported your key"
e7253b03
TG
982msgstr ""
983
984#. type: Content of: <html><body><section><div><div><div><p>
985msgid "# Unlock with your passphrase"
986msgstr ""
987
988#. type: Content of: <html><body><section><div><div><div><p>
989msgid ""
990"# You will receive a \"OpenPGP keys successfully imported\" window to "
991"confirm success"
992msgstr ""
993
994#. type: Content of: <html><body><section><div><div><div><p>
995msgid ""
252b506d
TG
996"# Go to \"Account settings\" &rarr; \"End-To-End Encryption,\" and make sure "
997"your key is imported and select <i>Treat this key as a Personal Key</i>."
e7253b03
TG
998msgstr ""
999
1000#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
1001msgid "I'm not sure the import worked correctly"
1002msgstr ""
1003
1004#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1005msgid ""
8cd4252b
TG
1006"Look for \"Account settings\" &rarr; \"End-To-End Encryption.\" Here you can "
1007"see if your personal key associated with this email is found. If it is not, "
252b506d
TG
1008"you can try again via the <i>Add key</i> option. Make sure you have the "
1009"correct, active, secret key file."
eabe8a9a
TS
1010msgstr ""
1011
1012#. type: Content of: <html><body><section><div><div><h2>
e7253b03
TG
1013msgid "<em>#4</em> Try it out!"
1014msgstr ""
1015
1016#. type: Attribute 'alt' of: <html><body><section><div><div><p><img>
1017msgid "Illustration of a person in a house with a cat connected to a server"
eabe8a9a
TS
1018msgstr ""
1019
1020#. type: Content of: <html><body><section><div><div><p>
eabe8a9a 1021msgid ""
e7253b03
TG
1022"Now you'll try a test correspondence with an FSF computer program named "
1023"Edward, who knows how to use encryption. Except where noted, these are the "
1024"same steps you'd follow when corresponding with a real, live person."
1025msgstr ""
1026
1027#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1028msgid "Step 4.A Send key to Edward."
eabe8a9a
TS
1029msgstr ""
1030
1031#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1032msgid "<em>Step 4.a</em> Send Edward your public key"
eabe8a9a
TS
1033msgstr ""
1034
1035#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1036msgid ""
1037"This is a special step that you won't have to do when corresponding with "
e7253b03
TG
1038"real people. In your email program's menu, go to \"Tools\" &rarr; \"OpenPGP "
1039"Key Manager.\" You should see your key in the list that pops up. Right click "
8cd4252b
TG
1040"on your key and select <i>Send Public Keys by Email</i>. This will create a "
1041"new draft message, as if you had just hit the \"Write\" button, but in the "
1042"attachment you will find your public keyfile."
eabe8a9a
TS
1043msgstr ""
1044
1045#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1046msgid ""
1047"Address the message to <a "
1048"href=\"mailto:edward-en@fsf.org\">edward-en@fsf.org</a>. Put at least one "
1049"word (whatever you want) in the subject and body of the email. Don't send "
1050"yet."
1051msgstr ""
1052
1053#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1054msgid ""
e7253b03
TG
1055"We want Edward to be able to open the email with your keyfile, so we want "
1056"this first special message to be unencrypted. Make sure encryption is turned "
8cd4252b
TG
1057"off by using the dropdown menu \"Security\" and select <i>Do Not "
1058"Encrypt</i>. Once encryption is off, hit Send."
eabe8a9a
TS
1059msgstr ""
1060
1061#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1062msgid ""
1063"It may take two or three minutes for Edward to respond. In the meantime, you "
e7253b03
TG
1064"might want to skip ahead and check out the <a href=\"#section6\">Use it "
1065"Well</a> section of this guide. Once you have received a response, head to "
1066"the next step. From here on, you'll be doing just the same thing as when "
eabe8a9a
TS
1067"corresponding with a real person."
1068msgstr ""
1069
1070#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1071msgid ""
e7253b03
TG
1072"When you open Edward's reply, GnuPG may prompt you for your passphrase "
1073"before using your private key to decrypt it."
1074msgstr ""
1075
1076#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1077msgid "Step 4.B Option 1. Verify key"
1078msgstr ""
1079
1080#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1081msgid "Step 4.B Option 2. Import key"
eabe8a9a
TS
1082msgstr ""
1083
1084#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03
TG
1085msgid "<em>Step 4.b</em> Send a test encrypted email"
1086msgstr ""
1087
8cd4252b 1088#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03 1089msgid "Get Edward's key"
eabe8a9a
TS
1090msgstr ""
1091
1092#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1093msgid ""
e7253b03
TG
1094"To encrypt an email to Edward, you need its public key, so now you'll have "
1095"to download it from a keyserver. You can do this in two different ways:"
eabe8a9a
TS
1096msgstr ""
1097
1098#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1099msgid ""
e7253b03
TG
1100"<strong>Option 1.</strong> In the email answer you received from Edward as a "
1101"response to your first email, Edward's public key was included. On the right "
1102"of the email, just above the writing area, you will find an \"OpenPGP\" "
1103"button that has a lock and a little wheel next to it. Click that, and select "
252b506d
TG
1104"<i>Discover</i> next to the text: \"This message was signed with a key that "
1105"you don't yet have.\" A popup with Edward's key details will follow."
eabe8a9a
TS
1106msgstr ""
1107
1108#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1109msgid ""
252b506d
TG
1110"<strong>Option 2.</strong> Open your OpenPGP Key manager, and under "
1111"\"Keyserver\" choose <i>Discover Keys Online</i>. Here, fill in Edward's "
1112"email address, and import Edward's key."
eabe8a9a
TS
1113msgstr ""
1114
1115#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1116msgid ""
8cd4252b
TG
1117"The option <i>Accepted (unverified)</i> will add this key to your key "
1118"manager, and now it can be used to send encrypted emails and to verify "
1119"digital signatures from Edward."
eabe8a9a
TS
1120msgstr ""
1121
1122#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1123msgid ""
e7253b03
TG
1124"In the popup window confirming if you want to import Edward's key, you'll "
1125"see many different emails that are all associated with its key. This is "
1126"correct; you can safely import the key."
eabe8a9a
TS
1127msgstr ""
1128
1129#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1130msgid ""
e7253b03
TG
1131"Since you encrypted this email with Edward's public key, Edward's private "
1132"key is required to decrypt it. Edward is the only one with its private key, "
1133"so no one except Edward can decrypt it."
1134msgstr ""
1135
8cd4252b 1136#. type: Content of: <html><body><section><div><div><div><h4>
e7253b03 1137msgid "Send Edward an encrypted email"
eabe8a9a
TS
1138msgstr ""
1139
1140#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1141msgid ""
e7253b03
TG
1142"Write a new email in your email program, addressed to <a "
1143"href=\"mailto:edward-en@fsf.org\">edward-en@fsf.org</a>. Make the subject "
1144"\"Encryption test\" or something similar and write something in the body."
1145msgstr ""
1146
1147#. type: Content of: <html><body><section><div><div><div><p>
1148msgid ""
1149"This time, make sure encryption is turned on by using the dropdown menu "
8cd4252b
TG
1150"\"Security\" and select <i>Require Encryption</i>. Once encryption is on, "
1151"hit Send."
eabe8a9a
TS
1152msgstr ""
1153
1154#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
e7253b03
TG
1155msgid "\"Recipients not valid, not trusted or not found\""
1156msgstr ""
1157
1158#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1159msgid ""
8cd4252b
TG
1160"You could get the above error message, or something along these lines: "
1161"\"Unable to send this message with end-to-end encryption, because there are "
1162"problems with the keys of the following recipients: ...\" In these cases, "
1163"you may be trying to send an encrypted email to someone when you do not have "
e7253b03 1164"their public key yet. Make sure you follow the steps above to import the key "
f950b092
TG
1165"to your key manager. Open the OpenPGP Key Manager to make sure the recipient "
1166"is listed there."
e7253b03
TG
1167msgstr ""
1168
1169#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
1170msgid "Unable to send message"
1171msgstr ""
1172
1173#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1174msgid ""
1175"You could get the following message when trying to send your encrypted "
1176"email: \"Unable to send this message with end-to-end encryption, because "
1177"there are problems with the keys of the following recipients: "
9a1f3824
TG
1178"edward-en@fsf.org.\" This usually means you imported the key with the \"Not "
1179"accepted (undecided)\" option. Go to the \"key properties\" of this key by "
1180"right clicking on the key in the OpenPGP Key Manager, and select the option "
1181"<i>Yes, but I have not verified that this is the correct key</i> in the "
1182"\"Acceptance\" option at the bottom of this window. Resend the email."
e7253b03
TG
1183msgstr ""
1184
1185#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
1186msgid "I can't find Edward's key"
eabe8a9a
TS
1187msgstr ""
1188
1189#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
1190msgid ""
1191"Close the pop-ups that have appeared since you clicked Send. Make sure you "
f950b092
TG
1192"are connected to the Internet and try again. If that doesn't work, you can "
1193"download the key manually from <a "
1194"href=\"https://keys.openpgp.org/search?q=edward-en%40fsf.org\">the "
1195"keyserver</a>, and import it by using the <i>Import Public Key(s) from "
1196"File</i> option in the OpenPGP Key Manager."
eabe8a9a
TS
1197msgstr ""
1198
1199#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
1200msgid "Unscrambled messages in the Sent folder"
1201msgstr ""
1202
1203#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
1204msgid ""
1205"Even though you can't decrypt messages encrypted to someone else's key, your "
1206"email program will automatically save a copy encrypted to your public key, "
1207"which you'll be able to view from the Sent folder like a normal email. This "
1208"is normal, and it doesn't mean that your email was not sent encrypted."
1209msgstr ""
1210
eabe8a9a 1211#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
1212msgid "Encrypt messages from the command line"
1213msgstr ""
1214
1215#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
1216msgid ""
1217"You can also encrypt and decrypt messages and files from the <a "
1218"href=\"https://www.gnupg.org/gph/en/manual/x110.html\">command line</a>, if "
1219"that's your preference. The option --armor makes the encrypted output appear "
1220"in the regular character set."
1221msgstr ""
1222
1223#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1224msgid "<em>Important:</em> Security tips"
1225msgstr ""
1226
1227#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1228msgid ""
1229"Even if you encrypt your email, the subject line is not encrypted, so don't "
1230"put private information there. The sending and receiving addresses aren't "
1231"encrypted either, so a surveillance system can still figure out who you're "
1232"communicating with. Also, surveillance agents will know that you're using "
1233"GnuPG, even if they can't figure out what you're saying. When you send "
e7253b03
TG
1234"attachments, you can choose to encrypt them or not, independent of the "
1235"actual email."
eabe8a9a
TS
1236msgstr ""
1237
8c163d47
TG
1238#. type: Content of: <html><body><section><div><div><div><p>
1239msgid ""
1240"For greater security against potential attacks, you can turn off "
1241"HTML. Instead, you can render the message body as plain text. In order to do "
8cd4252b
TG
1242"this in Icedove or Thunderbird, go to \"View\" &rarr; \"Message Body As\" "
1243"&rarr; <i>Plain Text</i>."
e7253b03
TG
1244msgstr ""
1245
1246#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1247msgid "Step 4.C Edward's response"
8c163d47
TG
1248msgstr ""
1249
eabe8a9a 1250#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1251msgid "<em>Step 4.c</em> Receive a response"
eabe8a9a
TS
1252msgstr ""
1253
1254#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1255msgid ""
e7253b03 1256"When Edward receives your email, it will use its private key to decrypt it, "
9ecb61bd 1257"then reply to you."
eabe8a9a
TS
1258msgstr ""
1259
1260#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1261msgid ""
1262"It may take two or three minutes for Edward to respond. In the meantime, you "
e7253b03 1263"might want to skip ahead and check out the <a href=\"#section6\">Use it "
eabe8a9a
TS
1264"Well</a> section of this guide."
1265msgstr ""
1266
e7253b03
TG
1267#. type: Content of: <html><body><section><div><div><div><p>
1268msgid ""
1269"Edward will send you an encrypted email back saying your email was received "
eb9903b9
TG
1270"and decrypted. Your email client will automatically decrypt Edward's "
1271"message."
e7253b03
TG
1272msgstr ""
1273
1274#. type: Content of: <html><body><section><div><div><div><p>
1275msgid ""
1276"The OpenPGP button in the email will show a little green checkmark over the "
098ebaeb 1277"lock symbol to show the message is encrypted, and a little orange warning "
e7253b03
TG
1278"sign which means that you have accepted the key, but not verified it. When "
1279"you have not yet accepted the key, you will see a little question mark "
1280"there. Clicking the prompts in this button will lead you to key properties "
1281"as well."
1282msgstr ""
1283
eabe8a9a 1284#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1285msgid "<em>Step 4.d</em> Send a signed test email"
eabe8a9a
TS
1286msgstr ""
1287
1288#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1289msgid ""
1290"GnuPG includes a way for you to sign messages and files, verifying that they "
1291"came from you and that they weren't tampered with along the way. These "
1292"signatures are stronger than their pen-and-paper cousins -- they're "
1293"impossible to forge, because they're impossible to create without your "
1294"private key (another reason to keep your private key safe)."
1295msgstr ""
1296
1297#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1298msgid ""
1299"You can sign messages to anyone, so it's a great way to make people aware "
1300"that you use GnuPG and that they can communicate with you securely. If they "
1301"don't have GnuPG, they will be able to read your message and see your "
1302"signature. If they do have GnuPG, they'll also be able to verify that your "
1303"signature is authentic."
1304msgstr ""
1305
1306#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1307msgid ""
e7253b03
TG
1308"To sign an email to Edward, compose any message to the email address and "
1309"click the pencil icon next to the lock icon so that it turns gold. If you "
9a1f3824 1310"sign a message, GnuPG may ask you for your passphrase before it sends the "
e7253b03 1311"message, because it needs to unlock your private key for signing."
eabe8a9a
TS
1312msgstr ""
1313
1314#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1315msgid ""
e7253b03 1316"In \"Account Settings\" &rarr; \"End-To-End-Encryption\" you can opt to "
8cd4252b 1317"<i>add digital signature by default</i>."
eabe8a9a
TS
1318msgstr ""
1319
1320#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1321msgid "<em>Step 4.e</em> Receive a response"
eabe8a9a
TS
1322msgstr ""
1323
1324#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1325msgid ""
1326"When Edward receives your email, he will use your public key (which you sent "
9ecb61bd 1327"him in <a href=\"#step-3a\">Step 3.A</a>) to verify the message you sent has "
e7253b03 1328"not been tampered with and to encrypt a reply to you."
eabe8a9a
TS
1329msgstr ""
1330
1331#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1332msgid ""
1333"Edward's reply will arrive encrypted, because he prefers to use encryption "
1334"whenever possible. If everything goes according to plan, it should say "
1335"\"Your signature was verified.\" If your test signed email was also "
1336"encrypted, he will mention that first."
1337msgstr ""
1338
9ecb61bd
TG
1339#. type: Content of: <html><body><section><div><div><div><p>
1340msgid ""
e7253b03
TG
1341"When you receive Edward's email and open it, your email client will "
1342"automatically detect that it is encrypted with your public key, and then it "
1343"will use your private key to decrypt it."
9ecb61bd
TG
1344msgstr ""
1345
e7253b03
TG
1346#. type: Content of: <html><body><section><div><div><h2>
1347msgid "<em>#5</em> Learn about the Web of Trust"
9ecb61bd
TG
1348msgstr ""
1349
e7253b03
TG
1350#. type: Attribute 'alt' of: <html><body><section><div><div><p><img>
1351msgid "Illustration of keys all interconnected with a web of lines"
eabe8a9a
TS
1352msgstr ""
1353
1354#. type: Content of: <html><body><section><div><div><p>
eabe8a9a 1355msgid ""
e7253b03 1356"Email encryption is a powerful technology, but it has a weakness: it "
eabe8a9a
TS
1357"requires a way to verify that a person's public key is actually "
1358"theirs. Otherwise, there would be no way to stop an attacker from making an "
e7253b03 1359"email address with your friend's name, creating keys to go with it, and "
eabe8a9a
TS
1360"impersonating your friend. That's why the free software programmers that "
1361"developed email encryption created keysigning and the Web of Trust."
1362msgstr ""
1363
1364#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1365msgid ""
1366"When you sign someone's key, you are publicly saying that you've verified "
1367"that it belongs to them and not someone else."
1368msgstr ""
1369
1370#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1371msgid ""
1372"Signing keys and signing messages use the same type of mathematical "
1373"operation, but they carry very different implications. It's a good practice "
1374"to generally sign your email, but if you casually sign people's keys, you "
8cd4252b 1375"may accidentally end up vouching for the identity of an imposter."
eabe8a9a
TS
1376msgstr ""
1377
1378#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1379msgid ""
1380"People who use your public key can see who has signed it. Once you've used "
1381"GnuPG for a long time, your key may have hundreds of signatures. You can "
1382"consider a key to be more trustworthy if it has many signatures from people "
1383"that you trust. The Web of Trust is a constellation of GnuPG users, "
1384"connected to each other by chains of trust expressed through signatures."
1385msgstr ""
1386
1387#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
e7253b03 1388msgid "Section 5: trusting a key"
eabe8a9a
TS
1389msgstr ""
1390
1391#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1392msgid "<em>Step 5.a</em> Sign a key"
eabe8a9a
TS
1393msgstr ""
1394
1395#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1396msgid ""
8cd4252b
TG
1397"In your email program's menu, go to OpenPGP Key Manager and select <i>Key "
1398"properties</i> by right clicking on Edward's key."
eabe8a9a
TS
1399msgstr ""
1400
1401#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1402msgid ""
8cd4252b 1403"Under \"Your Acceptance,\" you can select <i>Yes, I've verified in person "
9a1f3824 1404"this key has the correct fingerprint</i>."
eabe8a9a
TS
1405msgstr ""
1406
1407#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1408msgid ""
1409"You've just effectively said \"I trust that Edward's public key actually "
1410"belongs to Edward.\" This doesn't mean much because Edward isn't a real "
e7253b03
TG
1411"person, but it's good practice, and for real people it is important. You can "
1412"read more about signing a person's key in the <a "
1413"href=\"#check-ids-before-signing\">check IDs before signing</a> section."
eabe8a9a
TS
1414msgstr ""
1415
1416#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1417msgid "Identifying keys: Fingerprints and IDs"
1418msgstr ""
1419
1420#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1421msgid ""
1422"People's public keys are usually identified by their key fingerprint, which "
1423"is a string of digits like F357AA1A5B1FA42CFD9FE52A9FF2194CC09A61E8 (for "
1424"Edward's key). You can see the fingerprint for your public key, and other "
e7253b03
TG
1425"public keys saved on your computer, by going to OpenPGP Key Management in "
1426"your email program's menu, then right clicking on the key and choosing Key "
1427"Properties. It's good practice to share your fingerprint wherever you share "
1428"your email address, so that people can double-check that they have the "
1429"correct public key when they download yours from a keyserver."
eabe8a9a
TS
1430msgstr ""
1431
1432#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1433msgid ""
e7253b03
TG
1434"You may also see public keys referred to by a shorter keyID. This keyID is "
1435"visible directly from the Key Management window. These eight character "
1436"keyIDs were previously used for identification, which used to be safe, but "
1437"is no longer reliable. You need to check the full fingerprint as part of "
2fd4a6dc
TG
1438"verifying you have the correct key for the person you are trying to "
1439"contact. Spoofing, in which someone intentionally generates a key with a "
1440"fingerprint whose final eight characters are the same as another, is "
1441"unfortunately common."
eabe8a9a
TS
1442msgstr ""
1443
1444#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1445msgid "<em>Important:</em> What to consider when signing keys"
1446msgstr ""
1447
1448#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1449msgid ""
1450"Before signing a person's key, you need to be confident that it actually "
1451"belongs to them, and that they are who they say they are. Ideally, this "
1452"confidence comes from having interactions and conversations with them over "
1453"time, and witnessing interactions between them and others. Whenever signing "
1454"a key, ask to see the full public key fingerprint, and not just the shorter "
e7253b03 1455"keyID. If you feel it's important to sign the key of someone you've just "
eabe8a9a 1456"met, also ask them to show you their government identification, and make "
e7253b03 1457"sure the name on the ID matches the name on the public key."
eabe8a9a
TS
1458msgstr ""
1459
1460#. type: Content of: <html><body><section><div><div><div><div><dl><dt>
eabe8a9a
TS
1461msgid "Master the Web of Trust"
1462msgstr ""
1463
1464#. type: Content of: <html><body><section><div><div><div><div><dl><dd>
eabe8a9a
TS
1465msgid ""
1466"Unfortunately, trust does not spread between users the way <a "
e7253b03
TG
1467"href=\"https://fennetic.net/irc/finney.org/~hal/web_of_trust.html\">many "
1468"people think</a>. One of the best ways to strengthen the GnuPG community is "
1469"to deeply <a "
eabe8a9a
TS
1470"href=\"https://www.gnupg.org/gph/en/manual/x334.html\">understand</a> the "
1471"Web of Trust and to carefully sign as many people's keys as circumstances "
1472"permit."
1473msgstr ""
1474
eabe8a9a 1475#. type: Content of: <html><body><section><div><div><h2>
e7253b03 1476msgid "<em>#6</em> Use it well"
eabe8a9a
TS
1477msgstr ""
1478
1479#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1480msgid ""
1481"Everyone uses GnuPG a little differently, but it's important to follow some "
1482"basic practices to keep your email secure. Not following them, you risk the "
1483"privacy of the people you communicate with, as well as your own, and damage "
1484"the Web of Trust."
1485msgstr ""
1486
1487#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
e7253b03 1488msgid "Section 6: Use it Well (1)"
eabe8a9a
TS
1489msgstr ""
1490
1491#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1492msgid "When should I encrypt? When should I sign?"
1493msgstr ""
1494
1495#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1496msgid ""
1497"The more you can encrypt your messages, the better. If you only encrypt "
1498"emails occasionally, each encrypted message could raise a red flag for "
1499"surveillance systems. If all or most of your email is encrypted, people "
1500"doing surveillance won't know where to start. That's not to say that only "
1501"encrypting some of your email isn't helpful -- it's a great start and it "
1502"makes bulk surveillance more difficult."
1503msgstr ""
1504
1505#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1506msgid ""
1507"Unless you don't want to reveal your own identity (which requires other "
1508"protective measures), there's no reason not to sign every message, whether "
1509"or not you are encrypting. In addition to allowing those with GnuPG to "
1510"verify that the message came from you, signing is a non-intrusive way to "
1511"remind everyone that you use GnuPG and show support for secure "
1512"communication. If you often send signed messages to people that aren't "
1513"familiar with GnuPG, it's nice to also include a link to this guide in your "
1514"standard email signature (the text kind, not the cryptographic kind)."
1515msgstr ""
1516
1517#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
e7253b03 1518msgid "Section 6: Use it Well (2)"
eabe8a9a
TS
1519msgstr ""
1520
1521#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1522msgid "Be wary of invalid keys"
1523msgstr ""
1524
1525#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1526msgid ""
1527"GnuPG makes email safer, but it's still important to watch out for invalid "
1528"keys, which might have fallen into the wrong hands. Email encrypted with "
1529"invalid keys might be readable by surveillance programs."
1530msgstr ""
1531
1532#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1533msgid ""
1534"In your email program, go back to the first encrypted email that Edward sent "
e7253b03 1535"you. Because Edward encrypted it with your public key, it will have a green "
d71144f9 1536"checkmark on the \"OpenPGP\" button."
eabe8a9a
TS
1537msgstr ""
1538
1539#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1540msgid ""
8cd4252b
TG
1541"<strong>When using GnuPG, make a habit of glancing at that button. The "
1542"program will warn you there if you get an email signed with a key that can't "
1543"be trusted.</strong>"
eabe8a9a
TS
1544msgstr ""
1545
1546#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1547msgid "Copy your revocation certificate to somewhere safe"
1548msgstr ""
1549
1550#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1551msgid ""
1552"Remember when you created your keys and saved the revocation certificate "
e7253b03
TG
1553"that GnuPG made? It's time to copy that certificate onto the safest storage "
1554"that you have -- a flash drive, disk, or hard drive stored in a safe place "
1555"in your home could work, not on a device you carry with you regularly. The "
1556"safest way we know is actually to print the revocation certificate and store "
1557"it in a safe place."
eabe8a9a
TS
1558msgstr ""
1559
1560#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1561msgid ""
1562"If your private key ever gets lost or stolen, you'll need this certificate "
1563"file to let people know that you are no longer using that keypair."
1564msgstr ""
1565
1566#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1567msgid "<em>IMPORTANT:</em> ACT SWIFTLY if someone gets your private key"
eabe8a9a
TS
1568msgstr ""
1569
1570#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1571msgid ""
e7253b03 1572"If you lose your private key or someone else gets a hold of it (say, by "
eabe8a9a
TS
1573"stealing or cracking your computer), it's important to revoke it immediately "
1574"before someone else uses it to read your encrypted email or forge your "
1575"signature. This guide doesn't cover how to revoke a key, but you can follow "
1576"these <a "
71b90906 1577"href=\"https://www.hackdiary.com/2004/01/18/revoking-a-gpg-key/\">instructions</a>. "
eabe8a9a
TS
1578"After you're done revoking, make a new key and send an email to everyone "
1579"with whom you usually use your key to make sure they know, including a copy "
1580"of your new key."
1581msgstr ""
1582
71b90906 1583#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1584msgid "Webmail and GnuPG"
1585msgstr ""
1586
71b90906 1587#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1588msgid ""
1589"When you use a web browser to access your email, you're using webmail, an "
1590"email program stored on a distant website. Unlike webmail, your desktop "
1591"email program runs on your own computer. Although webmail can't decrypt "
1592"encrypted email, it will still display it in its encrypted form. If you "
1593"primarily use webmail, you'll know to open your email client when you "
1594"receive a scrambled email."
1595msgstr ""
1596
eabe8a9a 1597#. type: Content of: <html><body><section><div><div><div><h3>
e7253b03 1598msgid "Make your public key part of your online identity"
eabe8a9a
TS
1599msgstr ""
1600
1601#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1602msgid ""
e7253b03
TG
1603"First add your public key fingerprint to your email signature, then compose "
1604"an email to at least five of your friends, telling them you just set up "
1605"GnuPG and mentioning your public key fingerprint. Link to this guide and ask "
1606"them to join you. Don't forget that there's also an awesome <a "
1607"href=\"infographic.html\">infographic to share.</a>"
eabe8a9a
TS
1608msgstr ""
1609
2fd4a6dc
TG
1610#. type: Content of: <html><body><section><div><div><div><p>
1611msgid ""
e7253b03
TG
1612"Start writing your public key fingerprint anywhere someone would see your "
1613"email address: your social media profiles, blog, Website, or business "
1614"card. (At the Free Software Foundation, we put ours on our <a "
1615"href=\"https://fsf.org/about/staff\">staff page</a>.) We need to get our "
1616"culture to the point that we feel like something is missing when we see an "
1617"email address without a public key fingerprint."
2fd4a6dc
TG
1618msgstr ""
1619
e7253b03
TG
1620#. type: Content of: <html><body><section><div><div><h2>
1621msgid "<a href=\"next_steps.html\">Great job! Check out the next steps.</a>"
eabe8a9a
TS
1622msgstr ""
1623
e7253b03
TG
1624#. type: Content of: <html><body><header><div><p>
1625msgid "&larr; Read the <a href=\"index.html\">full guide</a>"
eabe8a9a
TS
1626msgstr ""
1627
e7253b03
TG
1628#. type: Content of: <html><body><header><div><h3><a>
1629msgid ""
1630"<a "
1631"href=\"https://fsf.org/share?u=https://u.fsf.org/zc&amp;t=How%20public-key%20encryption%20works.%20Infographic%20via%20%40fsf\">"
eabe8a9a
TS
1632msgstr ""
1633
e7253b03
TG
1634#. type: Content of: <html><body><header><div><h3>
1635msgid "&nbsp; Share our infographic </a> with the hashtag #EmailSelfDefense"
2fd4a6dc
TG
1636msgstr ""
1637
e7253b03
TG
1638#. type: Attribute 'alt' of: <html><body><header><div><p><img>
1639msgid "View &amp; share our infographic"
1640msgstr ""
1641
eabe8a9a 1642#. type: Content of: <html><body><header><div><h1>
eabe8a9a
TS
1643msgid "Great job!"
1644msgstr ""
1645
1646#. type: Content of: <html><body><section><div><div><h2>
e7253b03 1647msgid "<em>#7</em> Next steps"
eabe8a9a
TS
1648msgstr ""
1649
1650#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1651msgid ""
1652"You've now completed the basics of email encryption with GnuPG, taking "
1653"action against bulk surveillance. These next steps will help make the most "
1654"of the work you've done."
1655msgstr ""
1656
e7253b03
TG
1657#. type: Content of: <html><body><section><div><div><div><p>
1658msgid "&larr; <a href=\"index.html\">Return to the guide</a>"
1659msgstr ""
1660
eabe8a9a 1661#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1662msgid "Join the movement"
1663msgstr ""
1664
1665#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1666msgid ""
1667"You've just taken a huge step towards protecting your privacy online. But "
1668"each of us acting alone isn't enough. To topple bulk surveillance, we need "
1669"to build a movement for the autonomy and freedom of all computer users. Join "
1670"the Free Software Foundation's community to meet like-minded people and work "
1671"together for change."
1672msgstr ""
1673
1674#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1675msgid ""
1676"<small>Read <a href=\"https://www.fsf.org/twitter\">why GNU Social and "
60715780 1677"Mastodon are better than Twitter</a>, and <a "
e7253b03 1678"href=\"https://www.fsf.org/facebook\">why we don't use Facebook</a>.</small>"
eabe8a9a
TS
1679msgstr ""
1680
1681#. type: Content of: <html><body><section><div><div><div><div><p>
eabe8a9a
TS
1682msgid "Low-volume mailing list"
1683msgstr ""
1684
1685#. type: Content of: <html><body><section><div><div><div><div><form>
eabe8a9a 1686msgid ""
9a1f3824
TG
1687"<input type=\"text\" placeholder=\"Type your email...\" "
1688"name=\"email-Primary\" id=\"frmEmail\" /> <input type=\"submit\" value=\"Add "
1689"me\" name=\"_qf_Edit_next\" /> <input type=\"hidden\" "
eabe8a9a
TS
1690"value=\"https://emailselfdefense.fsf.org/en/confirmation.html\" "
1691"name=\"postURL\" /> <input type=\"hidden\" value=\"1\" name=\"group[25]\" /> "
1692"<input type=\"hidden\" "
1693"value=\"https://my.fsf.org/civicrm/profile?reset=1&amp;gid=391\" "
1694"name=\"cancelURL\" /> <input type=\"hidden\" value=\"Edit:cancel\" "
1695"name=\"_qf_default\" />"
1696msgstr ""
1697
1698#. type: Content of: <html><body><section><div><div><div><div><p>
eabe8a9a
TS
1699msgid ""
1700"<small>Read our <a "
1701"href=\"https://my.fsf.org/donate/privacypolicy.html\">privacy "
1702"policy</a>.</small>"
1703msgstr ""
1704
1705#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1706msgid "Bring Email Self-Defense to new people"
1707msgstr ""
1708
1709#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1710msgid ""
1711"Understanding and setting up email encryption is a daunting task for "
1712"many. To welcome them, make it easy to find your public key and offer to "
1713"help with encryption. Here are some suggestions:"
1714msgstr ""
1715
1716#. type: Content of: <html><body><section><div><div><div><ul><li>
eabe8a9a 1717msgid ""
e7253b03 1718"# Lead an Email Self-Defense workshop for your friends and community, using "
eabe8a9a
TS
1719"our <a href=\"workshops.html\">teaching guide</a>."
1720msgstr ""
1721
1722#. type: Content of: <html><body><section><div><div><div><ul><li>
eabe8a9a 1723msgid ""
e7253b03
TG
1724"# Use <a "
1725"href=\"https://fsf.org/share?u=https://u.fsf.org/zb&amp;t=Encrypt%20with%20me%20using%20Email%20Self-Defense%20%40fsf\"> "
1726"our sharing page</a> to compose a message to a few friends and ask them to "
1727"join you in using encrypted email. Remember to include your GnuPG public key "
1728"fingerprint so they can easily download your key."
eabe8a9a
TS
1729msgstr ""
1730
1731#. type: Content of: <html><body><section><div><div><div><ul><li>
eabe8a9a 1732msgid ""
e7253b03 1733"# Add your public key fingerprint anywhere that you normally display your "
eabe8a9a 1734"email address. Some good places are: your email signature (the text kind, "
e7253b03 1735"not the cryptographic kind), social media profiles, blogs, Web sites, or "
eabe8a9a
TS
1736"business cards. At the Free Software Foundation, we put ours on our <a "
1737"href=\"https://fsf.org/about/staff\">staff page</a>."
1738msgstr ""
1739
1740#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1741msgid "Protect more of your digital life"
1742msgstr ""
1743
1744#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1745msgid ""
1746"Learn surveillance-resistant technologies for instant messages, hard drive "
1747"storage, online sharing, and more at <a "
1748"href=\"https://directory.fsf.org/wiki/Collection:Privacy_pack\"> the Free "
1749"Software Directory's Privacy Pack</a> and <a "
1750"href=\"https://prism-break.org\">prism-break.org</a>."
1751msgstr ""
1752
1753#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a 1754msgid ""
8cd4252b 1755"If you are using Windows, macOS or any other proprietary operating system, "
eabe8a9a
TS
1756"we recommend you switch to a free software operating system like "
1757"GNU/Linux. This will make it much harder for attackers to enter your "
1758"computer through hidden back doors. Check out the Free Software Foundation's "
e7253b03 1759"<a href=\"https://www.gnu.org/distros/free-distros.html\">endorsed versions "
eabe8a9a
TS
1760"of GNU/Linux.</a>"
1761msgstr ""
1762
1763#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1764msgid "Optional: Add more email protection with Tor"
1765msgstr ""
1766
1767#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1768msgid ""
1769"<a href=\"https://www.torproject.org/about/overview.html.en\">The Onion "
1770"Router (Tor) network</a> wraps Internet communication in multiple layers of "
1771"encryption and bounces it around the world several times. When used "
1772"properly, Tor confuses surveillance field agents and the global surveillance "
1773"apparatus alike. Using it simultaneously with GnuPG's encryption will give "
1774"you the best results."
1775msgstr ""
1776
1777#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1778msgid ""
1779"To have your email program send and receive email over Tor, install the <a "
1780"href=\"https://addons.mozilla.org/en-us/thunderbird/addon/torbirdy/\">Torbirdy "
e7253b03 1781"plugin</a> by searching for it through Add-ons."
eabe8a9a
TS
1782msgstr ""
1783
1784#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1785msgid ""
1786"Before beginning to check your email over Tor, make sure you understand <a "
4aec1215
TG
1787"href=\"https://www.torproject.org/docs/faq.html.en#WhatProtectionsDoesTorProvide\"> "
1788"the security tradeoffs involved</a>. This <a "
eabe8a9a
TS
1789"href=\"https://www.eff.org/pages/tor-and-https\">infographic</a> from our "
1790"friends at the Electronic Frontier Foundation demonstrates how Tor keeps you "
1791"secure."
1792msgstr ""
1793
1794#. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
e7253b03 1795msgid "Section 7: Next Steps"
eabe8a9a
TS
1796msgstr ""
1797
1798#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1799msgid "Make Email Self-Defense tools even better"
1800msgstr ""
1801
1802#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1803msgid ""
1804"<a href=\"https://libreplanet.org/wiki/GPG_guide/Public_Review\">Leave "
1805"feedback and suggest improvements to this guide</a>. We welcome "
1806"translations, but we ask that you contact us at <a "
1807"href=\"mailto:campaigns@fsf.org\">campaigns@fsf.org</a> before you start, so "
1808"that we can connect you with other translators working in your language."
1809msgstr ""
1810
1811#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1812msgid ""
1813"If you like programming, you can contribute code to <a "
e7253b03 1814"href=\"https://www.gnupg.org/\">GnuPG</a>."
eabe8a9a
TS
1815msgstr ""
1816
1817#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1818msgid ""
1819"To go the extra mile, support the Free Software Foundation so we can keep "
1820"improving Email Self-Defense, and make more tools like it."
1821msgstr ""
1822
1823#. type: Content of: <html><body><header><div><ul><li>
e7253b03 1824msgid "<a href=\"index.html\">Set up guide</a>"
2fd4a6dc
TG
1825msgstr ""
1826
eabe8a9a 1827#. type: Content of: <html><body><header><div><ul><li>
eabe8a9a
TS
1828msgid "<a href=\"workshops.html\" class=\"current\">Teach your friends</a>"
1829msgstr ""
1830
1831#. type: Content of: <html><body><header><div><div><div><p>
eabe8a9a
TS
1832msgid ""
1833"We want to translate this guide into more languages, and make a version for "
1834"encryption on mobile devices. Please donate, and help people around the "
1835"world take the first step towards protecting their privacy with free "
1836"software."
1837msgstr ""
1838
e7253b03
TG
1839#. type: Content of: <html><body><header><div><div><p><a>
1840msgid ""
1841"<a "
1842"href=\"https://crm.fsf.org/civicrm/contribute/transact?reset=1&amp;id=14&amp;pk_campaign=email_self_defense&amp;pk_kwd=guide_donate\">"
1843msgstr ""
1844
eabe8a9a 1845#. type: Attribute 'alt' of: <html><body><header><div><div><p><a><img>
eabe8a9a
TS
1846msgid "View &amp; share our infographic →"
1847msgstr ""
1848
1849#. type: Content of: <html><body><header><div><div><p>
eabe8a9a
TS
1850msgid ""
1851"</a> Understanding and setting up email encryption sounds like a daunting "
1852"task to many people. That's why helping your friends with GnuPG plays such "
1853"an important role in helping spread encryption. Even if only one person "
1854"shows up, that's still one more person using encryption who wasn't "
1855"before. You have the power to help your friends keep their digital love "
1856"letters private, and teach them about the importance of free software. If "
1857"you use GnuPG to send and receive encrypted email, you're a perfect "
1858"candidate for leading a workshop!"
1859msgstr ""
1860
1861#. type: Attribute 'alt' of: <html><body><section><div><div><p><img>
eabe8a9a
TS
1862msgid "A small workshop among friends"
1863msgstr ""
1864
1865#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
1866msgid "<em>#1</em> Get your friends or community interested"
1867msgstr ""
1868
1869#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1870msgid ""
1871"If you hear friends grumbling about their lack of privacy, ask them if "
1872"they're interested in attending a workshop on Email Self-Defense. If your "
1873"friends don't grumble about privacy, they may need some convincing. You "
1874"might even hear the classic \"if you've got nothing to hide, you've got "
1875"nothing to fear\" argument against using encryption."
1876msgstr ""
1877
1878#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1879msgid ""
1880"Here are some talking points you can use to help explain why it's worth it "
1881"to learn GnuPG. Mix and match whichever you think will make sense to your "
1882"community:"
1883msgstr ""
1884
1885#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1886msgid "Strength in numbers"
1887msgstr ""
1888
1889#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1890msgid ""
1891"Each person who chooses to resist mass surveillance with encryption makes it "
1892"easier for others to resist as well. People normalizing the use of strong "
1893"encryption has multiple powerful effects: it means those who need privacy "
1894"the most, like potential whistle-blowers and activists, are more likely to "
1895"learn about encryption. More people using encryption for more things also "
1896"makes it harder for surveillance systems to single out those that can't "
1897"afford to be found, and shows solidarity with those people."
1898msgstr ""
1899
1900#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1901msgid "People you respect may already be using encryption"
1902msgstr ""
1903
1904#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1905msgid ""
1906"Many journalists, whistleblowers, activists, and researchers use GnuPG, so "
1907"your friends might unknowingly have heard of a few people who use it "
1908"already. You can search for \"BEGIN PUBLIC KEY BLOCK\" + keyword to help "
1909"make a list of people and organizations who use GnuPG whom your community "
1910"will likely recognize."
1911msgstr ""
1912
1913#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1914msgid "Respect your friends' privacy"
1915msgstr ""
1916
1917#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1918msgid ""
1919"There's no objective way to judge what constitutes privacy-sensitive "
1920"correspondence. As such, it's better not to presume that just because you "
1921"find an email you sent to a friend innocuous, your friend (or a surveillance "
1922"agent, for that matter!) feels the same way. Show your friends respect by "
1923"encrypting your correspondence with them."
1924msgstr ""
1925
1926#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1927msgid "Privacy technology is normal in the physical world"
1928msgstr ""
1929
1930#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1931msgid ""
1932"In the physical realm, we take window blinds, envelopes, and closed doors "
1933"for granted as ways of protecting our privacy. Why should the digital realm "
1934"be any different?"
1935msgstr ""
1936
1937#. type: Content of: <html><body><section><div><div><div><h3>
eabe8a9a
TS
1938msgid "We shouldn't have to trust our email providers with our privacy"
1939msgstr ""
1940
1941#. type: Content of: <html><body><section><div><div><div><p>
eabe8a9a
TS
1942msgid ""
1943"Some email providers are very trustworthy, but many have incentives not to "
1944"protect your privacy and security. To be empowered digital citizens, we need "
1945"to build our own security from the bottom up."
1946msgstr ""
1947
1948#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
1949msgid "<em>#2</em> Plan The Workshop"
1950msgstr ""
1951
1952#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1953msgid ""
1954"Once you've got at least one interested friend, pick a date and start "
1955"planning out the workshop. Tell participants to bring their computer and ID "
1956"(for signing each other's keys). If you'd like to make it easy for the "
e7253b03
TG
1957"participants to use <a "
1958"href=\"https://theintercept.com/2015/03/26/passphrases-can-memorize-attackers-cant-guess/\">Diceware</a> "
d71144f9 1959"for choosing passphrases, get a pack of dice beforehand. Make sure the "
e7253b03
TG
1960"location you select has an easily accessible Internet connection, and make "
1961"backup plans in case the connection stops working on the day of the "
1962"workshop. Libraries, coffee shops, and community centers make great "
1963"locations. Try to get all the participants to set up an email client based "
1964"on Thunderbird before the event. Direct them to their email provider's IT "
1965"department or help page if they run into errors."
eabe8a9a
TS
1966msgstr ""
1967
1968#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1969msgid ""
1970"Estimate that the workshop will take at least forty minutes plus ten minutes "
1971"for each participant. Plan extra time for questions and technical glitches."
1972msgstr ""
1973
1974#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1975msgid ""
1976"The success of the workshop requires understanding and catering to the "
1977"unique backgrounds and needs of each group of participants. Workshops should "
1978"stay small, so that each participant receives more individualized "
1979"instruction. If more than a handful of people want to participate, keep the "
1980"facilitator to participant ratio high by recruiting more facilitators, or by "
1981"facilitating multiple workshops. Small workshops among friends work great!"
1982msgstr ""
1983
1984#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
1985msgid "<em>#3</em> Follow the guide as a group"
1986msgstr ""
1987
1988#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
1989msgid ""
1990"Work through the Email Self-Defense guide a step at a time as a group. Talk "
1991"about the steps in detail, but make sure not to overload the participants "
1992"with minutia. Pitch the bulk of your instructions to the least tech-savvy "
1993"participants. Make sure all the participants complete each step before the "
1994"group moves on to the next one. Consider facilitating secondary workshops "
1995"afterwards for people that had trouble grasping the concepts, or those that "
1996"grasped them quickly and want to learn more."
1997msgstr ""
1998
1999#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2000msgid ""
2001"In <a href=\"index.html#section2\">Section 2</a> of the guide, make sure the "
2002"participants upload their keys to the same keyserver so that they can "
2003"immediately download each other's keys later (sometimes there is a delay in "
2004"synchronization between keyservers). During <a "
2005"href=\"index.html#section3\">Section 3</a>, give the participants the option "
2006"to send test messages to each other instead of or as well as "
2007"Edward. Similarly, in <a href=\"index.html#section4\">Section 4</a>, "
2008"encourage the participants to sign each other's keys. At the end, make sure "
2009"to remind people to safely back up their revocation certificates."
2010msgstr ""
2011
2012#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
2013msgid "<em>#4</em> Explain the pitfalls"
2014msgstr ""
2015
2016#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2017msgid ""
2018"Remind participants that encryption works only when it's explicitly used; "
2019"they won't be able to send an encrypted email to someone who hasn't already "
2020"set up encryption. Also remind participants to double-check the encryption "
2021"icon before hitting send, and that subjects and timestamps are never "
2022"encrypted."
2023msgstr ""
2024
2025#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2026msgid ""
2027"Explain the <a "
2028"href=\"https://www.gnu.org/proprietary/proprietary.html\">dangers of running "
2029"a proprietary system</a> and advocate for free software, because without it, "
2030"we can't <a "
2031"href=\"https://www.fsf.org/bulletin/2013/fall/how-can-free-software-protect-us-from-surveillance\">meaningfully "
2032"resist invasions of our digital privacy and autonomy</a>."
2033msgstr ""
2034
2035#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
2036msgid "<em>#5</em> Share additional resources"
2037msgstr ""
2038
2039#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2040msgid ""
2041"GnuPG's advanced options are far too complex to teach in a single "
2042"workshop. If participants want to know more, point out the advanced "
2043"subsections in the guide and consider organizing another workshop. You can "
2044"also share <a "
e7253b03
TG
2045"href=\"https://www.gnupg.org/documentation/index.html\">GnuPG's</a> official "
2046"documentation and mailing lists, and the <a "
2047"href=\"https://libreplanet.org/wiki/GPG_guide/Public_Review\">Email "
2048"Self-Defense feedback</a> page. Many GNU/Linux distribution's Web sites also "
2049"contain a page explaining some of GnuPG's advanced features."
eabe8a9a
TS
2050msgstr ""
2051
2052#. type: Content of: <html><body><section><div><div><h2>
eabe8a9a
TS
2053msgid "<em>#6</em> Follow up"
2054msgstr ""
2055
2056#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2057msgid ""
2058"Make sure everyone has shared email addresses and public key fingerprints "
2059"before they leave. Encourage the participants to continue to gain GnuPG "
2060"experience by emailing each other. Send them each an encrypted email one "
2061"week after the event, reminding them to try adding their public key ID to "
2062"places where they publicly list their email address."
2063msgstr ""
2064
2065#. type: Content of: <html><body><section><div><div><p>
eabe8a9a
TS
2066msgid ""
2067"If you have any suggestions for improving this workshop guide, please let us "
2068"know at <a href=\"mailto:campaigns@fsf.org\">campaigns@fsf.org</a>."
2069msgstr ""