1 # SOME DESCRIPTIVE TITLE
2 # Copyright (C) YEAR Free Software Foundation, Inc.
3 # This file is distributed under the same license as the PACKAGE package.
4 # FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
9 "Project-Id-Version: PACKAGE VERSION\n"
10 "POT-Creation-Date: 2021-07-23 18:11+0200\n"
11 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
12 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
13 "Language-Team: LANGUAGE <LL@li.org>\n"
16 "Content-Type: text/plain; charset=UTF-8\n"
17 "Content-Transfer-Encoding: 8bit\n"
19 #. type: Attribute 'lang' of: <html>
23 #. type: Attribute 'content' of: <html><head><meta>
24 msgid "text/html; charset=utf-8"
27 #. type: Content of: <html><head><title>
28 msgid "Email Self-Defense - a guide to fighting surveillance with GnuPG encryption"
31 #. type: Attribute 'content' of: <html><head><meta>
32 msgid "GnuPG, GPG, openpgp, encryption, surveillance, privacy, email, Enigmail"
35 #. type: Attribute 'content' of: <html><head><meta>
37 "Email surveillance violates our fundamental rights and makes free speech "
38 "risky. This guide will teach you email self-defense in 40 minutes with "
42 #. type: Attribute 'content' of: <html><head><meta>
43 msgid "width=device-width, initial-scale=1"
46 #. type: Content of: <html><body><div><p>
48 "Due to Enigmail's PGP functionality being migrated into Icedove and "
49 "Thunderbird, steps 2 and 3 of the guide are currently out of date."
52 #. type: Content of: <html><body><div><p>
53 msgid "Thank you for your patience while we're working on a new round of updates."
56 #. type: Content of: <html><body><header><div><p>
58 "<strong>Please check your email for a confirmation link now. Thanks for "
59 "joining our list!</strong>"
62 #. type: Content of: <html><body><header><div><p>
64 "If you don't receive the confirmation link, send us an email at info@fsf.org "
65 "to be added manually."
68 #. type: Attribute 'alt' of: <html><body><header><div><p><img>
72 #. type: Content of: <html><body><header><div><p>
73 msgid "Join us on microblogging services for day-to-day updates:"
76 #. type: Content of: <html><body><section><div><div><div><p><a>
77 msgid "<a href=\"https://status.fsf.org/fsf\">"
80 #. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
84 #. type: Content of: <html><body><section><div><div><div><p><a>
85 msgid " GNU Social</a> | <a href=\"https://hostux.social/@fsf\">"
88 #. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
92 #. type: Content of: <html><body><section><div><div><div><p>
94 " Mastodon</a> | <a "
95 "href=\"https://www.twitter.com/fsf\">Twitter</a>"
98 #. type: Content of: <html><body><header><div><p>
100 "<small><a href=\"https://www.fsf.org/twitter\">Read why GNU Social and "
101 "Mastodon are better than Twitter.</a></small>"
104 #. type: Content of: <html><body><header><div><p>
105 msgid "← Return to <a href=\"index.html\">Email Self-Defense</a>"
108 #. type: Content of: <html><body><footer><div><div><h4><a>
109 msgid "<a href=\"https://u.fsf.org/ys\">"
112 #. type: Attribute 'alt' of: <html><body><footer><div><div><h4><a><img>
113 msgid "Free Software Foundation"
116 #. type: Content of: <html><body><footer><div><p>
120 #. type: Content of: <html><body><footer><div><div><p>
122 "Copyright © 2014-2021 <a href=\"https://u.fsf.org/ys\">Free Software "
123 "Foundation</a>, Inc. <a "
124 "href=\"https://my.fsf.org/donate/privacypolicy.html\">Privacy "
125 "Policy</a>. Please support our work by <a "
126 "href=\"https://u.fsf.org/yr\">joining us as an associate member.</a>"
129 #. type: Content of: <html><body><footer><div><div><p>
131 "The images on this page are under a <a "
132 "href=\"https://creativecommons.org/licenses/by/4.0/\">Creative Commons "
133 "Attribution 4.0 license (or later version)</a>, and the rest of it is under "
134 "a <a href=\"https://creativecommons.org/licenses/by-sa/4.0\">Creative "
135 "Commons Attribution-ShareAlike 4.0 license (or later version)</a>. Download "
137 "href=\"https://agpl.fsf.org/emailselfdefense.fsf.org/edward/CURRENT/edward.tar.gz\"> "
138 "source code of Edward reply bot</a> by Andrew Engelbrecht "
139 "<andrew@engelbrecht.io> and Josh Drake <zamnedix@gnu.org>, "
140 "available under the GNU Affero General Public License. <a "
141 "href=\"https://www.gnu.org/licenses/license-list.html#OtherLicenses\">Why "
142 "these licenses?</a>"
145 #. type: Content of: <html><body><footer><div><div><p>
147 "Fonts used in the guide & infographic: <a "
148 "href=\"https://www.google.com/fonts/specimen/Dosis\">Dosis</a> by Pablo "
150 "href=\"https://www.google.com/fonts/specimen/Signika\">Signika</a> by Anna "
152 "href=\"https://www.google.com/fonts/specimen/Archivo+Narrow\">Archivo "
153 "Narrow</a> by Omnibus-Type, <a "
154 "href=\"https://libreplanet.org/wiki/GPG_guide/Graphics_Howto#Pitfalls\">PXL-2000</a> "
158 #. type: Content of: <html><body><footer><div><div><p>
160 "Download the <a href=\"emailselfdefense_source.zip\">source package</a> for "
161 "this guide, including fonts, image source files and the text of Edward's "
165 #. type: Content of: <html><body><footer><div><div><p>
167 "This site uses the Weblabels standard for labeling <a "
168 "href=\"https://www.fsf.org/campaigns/freejs\">free JavaScript</a>. View the "
169 "JavaScript <a href=\"https://weblabels.fsf.org/emailselfdefense.fsf.org/\" "
170 "rel=\"jslicense\">source code and license information</a>."
173 #. type: Content of: <html><body><footer><div><p><a>
175 "Infographic and guide design by <a rel=\"external\" "
176 "href=\"https://jplusplus.org\"><strong>Journalism++</strong>"
179 #. type: Attribute 'alt' of: <html><body><footer><div><p><a><img>
183 #. type: Attribute 'content' of: <html><head><meta>
184 msgid "GnuPG, GPG, openpgp, surveillance, privacy, email, security, GnuPG2"
187 #. type: Content of: <html><body><header><div><h1>
188 msgid "Email Self-Defense"
191 #. type: Content of: <html><body><header><div><ul><li>
193 "<a href=\"https://libreplanet.org/wiki/GPG_guide/Translation_Guide\"> "
194 "<strong><span style=\"color: #2F5FAA;\">Translate!</span></strong></a>"
197 #. type: Content of: <html><body><header><div><ul><li>
198 msgid "<a href=\"index.html\" class=\"current\">Set up guide</a>"
201 #. type: Content of: <html><body><header><div><ul><li>
202 msgid "<a href=\"workshops.html\">Teach your friends</a>"
205 #. type: Content of: <html><body><header><div><ul><li><a>
208 "href=\"https://fsf.org/share?u=https://u.fsf.org/zb&t=Email%20encryption%20for%20everyone%20via%20%40fsf\"> "
212 #. type: Content of: <html><body><header><div><ul><li><a>
216 #. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
220 #. type: Attribute 'alt' of: <html><body><header><div><ul><li><a><img>
221 msgid "[Hacker News]"
224 #. type: Content of: <html><body><header><div><div><div><p>
226 "We fight for computer users' rights, and promote the development of free (as "
227 "in freedom) software. Resisting bulk surveillance is very important to us."
230 #. type: Content of: <html><body><header><div><div><div><p>
232 "<strong>Please donate to support Email Self-Defense. We need to keep "
233 "improving it, and making more materials, for the benefit of people around "
234 "the world taking the first step towards protecting their privacy.</strong>"
237 #. type: Content of: <html><body><section><div><div><div><p><a>
240 "href=\"https://crm.fsf.org/civicrm/contribute/transact?reset=1&id=14&mtm_campaign=email_self_defense&mtm_kwd=guide_donate\">"
243 #. type: Attribute 'alt' of: <html><body><header><div><div><p><a><img>
247 #. type: Content of: <html><body><header><div><div><p><a>
248 msgid "<a id=\"infographic\" href=\"infographic.html\">"
251 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><a><img>
252 msgid "View & share our infographic →"
255 #. type: Content of: <html><body><header><div><div><p>
257 "</a> Bulk surveillance violates our fundamental rights and makes free speech "
258 "risky. This guide will teach you a basic surveillance self-defense skill: "
259 "email encryption. Once you've finished, you'll be able to send and receive "
260 "emails that are scrambled to make sure a surveillance agent or thief "
261 "intercepting your email can't read them. All you need is a computer with an "
262 "Internet connection, an email account, and about forty minutes."
265 #. type: Content of: <html><body><header><div><div><p>
267 "Even if you have nothing to hide, using encryption helps protect the privacy "
268 "of people you communicate with, and makes life difficult for bulk "
269 "surveillance systems. If you do have something important to hide, you're in "
270 "good company; these are the same tools that whistleblowers use to protect "
271 "their identities while shining light on human rights abuses, corruption, and "
275 #. type: Content of: <html><body><header><div><div><p>
277 "In addition to using encryption, standing up to surveillance requires "
278 "fighting politically for a <a "
279 "href=\"https://gnu.org/philosophy/surveillance-vs-democracy.html\">reduction "
280 "in the amount of data collected on us</a>, but the essential first step is "
281 "to protect yourself and make surveillance of your communication as difficult "
282 "as possible. This guide helps you do that. It is designed for beginners, but "
283 "if you already know the basics of GnuPG or are an experienced free software "
284 "user, you'll enjoy the advanced tips and the <a "
285 "href=\"workshops.html\">guide to teaching your friends</a>."
288 #. type: Content of: <html><body><section><div><div><h2>
289 msgid "<em>#1</em> Get the pieces"
292 #. type: Content of: <html><body><section><div><div><p>
294 "This guide relies on software which is <a "
295 "href=\"https://www.gnu.org/philosophy/free-sw.html\">freely licensed</a>; "
296 "it's completely transparent and anyone can copy it or make their own "
297 "version. This makes it safer from surveillance than proprietary software "
298 "(like Windows or macOS). Learn more about free software at <a "
299 "href=\"https://u.fsf.org/ys\">fsf.org</a>."
302 #. type: Content of: <html><body><section><div><div><p>
304 "Most GNU/Linux operating systems come with GnuPG installed on them, so if "
305 "you're running one of these systems, you don't have to download it. If "
306 "you're running macOS or Windows, steps to download GnuPG are below. Before "
307 "configuring your encryption setup with this guide, though, you'll need a "
308 "desktop email program installed on your computer. Many GNU/Linux "
309 "distributions have one installed already, such as Icedove, which may be "
310 "under the alternate name \"Thunderbird.\" Programs like these are another "
311 "way to access the same email accounts you can access in a browser (like "
312 "Gmail), but provide extra features."
315 #. type: Content of: <html><body><section><div><div><p>
317 "If you already have an email program, you can skip to <a "
318 "href=\"#section2\">Step 2</a>."
321 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
322 msgid "Step 1.A: Install Wizard"
325 #. type: Content of: <html><body><section><div><div><div><h3>
326 msgid "<em>Step 1.a</em> Set up your email program with your email account"
329 #. type: Content of: <html><body><section><div><div><div><p>
331 "Open your email program and follow the wizard (step-by-step walkthrough) "
332 "that sets it up with your email account. This usually starts from \"Account "
333 "Settings\" → \"Add Mail Account\". You should get the email server "
334 "settings from your systems administrator or the help section of your email "
338 #. type: Content of: <html><body><section><div><div><div><div><h4>
339 msgid "Troubleshooting"
342 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
343 msgid "The wizard doesn't launch"
346 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
348 "You can launch the wizard yourself, but the menu option for doing so is "
349 "named differently in each email program. The button to launch it will be in "
350 "the program's main menu, under \"New\" or something similar, titled "
351 "something like \"Add account\" or \"New/Existing email account.\""
354 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
355 msgid "The wizard can't find my account or isn't downloading my mail"
358 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
360 "Before searching the Web, we recommend you start by asking other people who "
361 "use your email system, to figure out the correct settings."
364 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
365 msgid "I can't find the menu"
368 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
370 "In many new email programs, the main menu is represented by an image of "
371 "three stacked horizontal bars."
374 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
375 msgid "Don't see a solution to your problem?"
378 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
380 "Please let us know on the <a "
381 "href=\"https://libreplanet.org/wiki/GPG_guide/Public_Review\">feedback "
385 #. type: Content of: <html><body><section><div><div><div><h3>
386 msgid "<em>Step 1.b</em> Get your terminal ready and install GnuPG"
389 #. type: Content of: <html><body><section><div><div><div><p>
391 "If you are using a GNU/Linux machine, you should already have GnuPG "
392 "installed, and you can skip to <a href=\"#section2\">Step 2</a>."
395 #. type: Content of: <html><body><section><div><div><div><p>
397 "If you are using a macOS or Windows machine, however, you need to first "
398 "install the GnuPG program. Select your operating system below and follow the "
399 "steps. For the rest of the steps in this guide, the steps are the same for "
400 "all operating systems."
403 #. type: Content of: <html><body><section><div><div><div><div><h4>
407 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
408 msgid "Use a third-party package manager to install GnuPG"
411 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
413 "Your macOS comes with a program called \"Terminal\" pre-installed, which "
414 "we'll use to set up your encryption with GnuPG, using the command "
415 "line. However, the default macOS package manager makes it difficult to "
416 "install GnuPG and other pieces of free software (like Emacs, GIMP, or "
420 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
422 "To make things easier, we recommend setting up the third-party package "
423 "manager \"Homebrew\" to install GnuPG. Copy the link on the home page of <a "
424 "href=\"https://brew.sh/\">Homebrew</a> and paste it in Terminal. Click "
425 "\"Enter\" and wait for it to finalize."
428 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
430 "When it is done, install the program by entering the following code in "
434 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
436 "<span style=\"color:#2f5faa; font-family: monospace;\">brew install gnupg "
437 "gnupg2</span>. After installation is done, you can follow the steps of the "
438 "rest of this guide."
441 #. type: Content of: <html><body><section><div><div><div><div><h4>
445 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
446 msgid "Get GnuPG by downloading GPG4Win"
449 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
451 "<a href=\"https://www.gpg4win.org/\">GPG4Win</a> is a email and file "
452 "encryption software package that includes GnuPG. Download and install the "
453 "latest version, choosing default options whenever asked. After it's "
454 "installed, you can close any windows that it creates."
457 #. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
459 "To follow the rest of the steps in this guide, you'll use the program called "
460 "\"PowerShell\", which is a program you'll see elsewhere referred to as a "
461 "\"terminal.\" This allows you to operate your computer using the command "
465 #. type: Content of: <html><body><section><div><div><div><h3>
466 msgid "GnuPG, OpenPGP, what?"
469 #. type: Content of: <html><body><section><div><div><div><p>
471 "In general, the terms GnuPG, GPG, GNU Privacy Guard, OpenPGP and PGP are "
472 "used interchangeably. Technically, OpenPGP (Pretty Good Privacy) is the "
473 "encryption standard, and GNU Privacy Guard (often shortened to GPG or GnuPG) "
474 "is the program that implements the standard. Most email programs provide an "
475 "interface for GnuPG. There is also a newer version of GnuPG, called GnuPG2."
478 #. type: Content of: <html><body><section><div><div><h2>
479 msgid "<em>#2</em> Make your keys"
482 #. type: Attribute 'alt' of: <html><body><section><div><div><p><img>
483 msgid "A robot with a head shaped like a key holding a private and a public key"
486 #. type: Content of: <html><body><section><div><div><p>
488 "To use the GnuPG system, you'll need a public key and a private key (known "
489 "together as a keypair). Each is a long string of randomly generated numbers "
490 "and letters that are unique to you. Your public and private keys are linked "
491 "together by a special mathematical function."
494 #. type: Content of: <html><body><section><div><div><p>
496 "Your public key isn't like a physical key, because it's stored in the open "
497 "in an online directory called a keyserver. People download it and use it, "
498 "along with GnuPG, to encrypt emails they send to you. You can think of the "
499 "keyserver as a phonebook; people who want to send you encrypted email can "
500 "look up your public key."
503 #. type: Content of: <html><body><section><div><div><p>
505 "Your private key is more like a physical key, because you keep it to "
506 "yourself (on your computer). You use GnuPG and your private key together to "
507 "descramble encrypted emails other people send to you. <span "
508 "style=\"font-weight: bold;\">You should never share your private key with "
509 "anyone, under any circumstances.</span>"
512 #. type: Content of: <html><body><section><div><div><p>
514 "In addition to encryption and decryption, you can also use these keys to "
515 "sign messages and check the authenticity of other people's signatures. We'll "
516 "discuss this more in the next section."
519 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
520 msgid "Step 2.A: Make your Keypair"
523 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
524 msgid "Step 2.A: Set your passphrase"
527 #. type: Content of: <html><body><section><div><div><div><h3>
528 msgid "<em>Step 2.a</em> Make a keypair"
531 #. type: Content of: <html><body><section><div><div><div><h6>
532 msgid "Make your keypair"
535 #. type: Content of: <html><body><section><div><div><div><p>
537 "Open a terminal using <span style=\"color:#2f5faa; font-family: "
538 "monospace;\">ctrl + alt + t</span> (on GNU/linux), or find it in your "
539 "applications, and use the following code to create your keypair:"
542 #. type: Content of: <html><body><section><div><div><div><p>
544 "We will use the command line in a terminal to create a keypair using the "
545 "GnuPG program. A terminal should be installed on your GNU/Linux operating "
546 "system, if you are using a macOS or Windows OS system, use the programs "
547 "\"Terminal\" (macOS) or \"PowerShell\" (Windows) that were also used in "
551 #. type: Content of: <html><body><section><div><div><div><p>
553 "# <span style=\"color:#2f5faa; font-family: monospace;\">gpg "
554 "--full-generate-key</span> to start the process."
557 #. type: Content of: <html><body><section><div><div><div><p>
559 "# To answer what kind of key you would like to create, select the default "
560 "option <span style=\"color:#2f5faa; font-family: monospace;\"> 1 RSA and "
564 #. type: Content of: <html><body><section><div><div><div><p>
566 "# Enter the following keysize: <span style=\"color:#2f5faa; font-family: "
567 "monospace;\">4096</span> for a strong key."
570 #. type: Content of: <html><body><section><div><div><div><p>
572 "# Choose the expiration date, we suggest <span style=\"color:#2f5faa; "
573 "font-family: monospace;\">2y</span> (2 years)."
576 #. type: Content of: <html><body><section><div><div><div><p>
577 msgid "Follow the prompts to continue setting up with your personal details."
580 #. type: Content of: <html><body><section><div><div><div><h6>
581 msgid "Set your passphrase"
584 #. type: Content of: <html><body><section><div><div><div><p>
586 "On the screen titled \"Passphrase,\" pick a strong password! You can do it "
587 "manually, or you can use the Diceware method. Doing it manually is faster "
588 "but not as secure. Using Diceware takes longer and requires dice, but "
589 "creates a password that is much harder for attackers to figure out. To use "
590 "it, read the section \"Make a secure passphrase with Diceware\" in <a "
591 "href=\"https://theintercept.com/2015/03/26/passphrases-can-memorize-attackers-cant-guess/\"> "
592 "this article</a> by Micah Lee."
595 #. type: Content of: <html><body><section><div><div><div><p>
597 "If you'd like to pick a passphrase manually, come up with something you can "
598 "remember which is at least twelve characters long, and includes at least one "
599 "lower case and upper case letter and at least one number or punctuation "
600 "symbol. Never pick a password you've used elsewhere. Don't use any "
601 "recognizable patterns, such as birthdays, telephone numbers, pets' names, "
602 "song lyrics, quotes from books, and so on."
605 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
606 msgid "GnuPG is not installed"
609 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
611 "GPG is not installed. You can check if this is the case with the command "
612 "<span style=\"color:#2f5faa; font-family: monospace;\">gpg "
613 "--version</span>. If GnuPG is not installed, it would bring up the "
614 "following result on most GNU/Linux operating systems, or something like it: "
615 "<span style=\"color:#2f5faa; font-family: monospace;\">Command 'gpg' not "
616 "found, but can be installed with: sudo apt install gnupg</span>. Follow that "
617 "command and install the program."
620 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
621 msgid "I took too long to create my passphrase"
624 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
626 "That's okay. It's important to think about your passphrase. When you're "
627 "ready, just follow the steps from the beginning again to create your key."
630 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
631 msgid "How can I see my key?"
634 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
636 "Use the following command to see all keys <span style=\"color:#2f5faa; "
637 "font-family: monospace;\">gpg --list-keys</span>. Yours should be listed in "
638 "there, and later, so will Edward's (<a href=\"#section3\">section 3</a>). If "
639 "you want to see only your key, you can use <span style=\"color:#2f5faa; "
640 "font-family: monospace;\">gpg --list-key [your@email]</span>. You can also "
641 "use <span style=\"color:#2f5faa; font-family: monospace;\">gpg "
642 "--list-secret-key</span> to see your own private key."
645 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
646 msgid "More resources"
649 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
651 "For more information about this process, you can also refer to <a "
652 "href=\"https://www.gnupg.org/gph/en/manual/c14.html#AEN25\">The GNU Privacy "
653 "Handbook</a>. Make sure you stick with \"RSA and RSA\" (the default), "
654 "because it's newer and more secure than the algorithms the documentation "
655 "recommends. Also make sure your key is at least 4096 bits if you want to be "
659 #. type: Content of: <html><body><section><div><div><div><div><h4>
663 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
664 msgid "Advanced key pairs"
667 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
669 "When GnuPG creates a new keypair, it compartmentalizes the encryption "
670 "function from the signing function through <a "
671 "href=\"https://wiki.debian.org/Subkeys\">subkeys</a>. If you use subkeys "
672 "carefully, you can keep your GnuPG identity more secure and recover from a "
673 "compromised key much more quickly. <a "
674 "href=\"https://alexcabal.com/creating-the-perfect-gpg-keypair/\">Alex "
675 "Cabal</a> and <a href=\"https://keyring.debian.org/creating-key.html\">the "
676 "Debian wiki</a> provide good guides for setting up a secure subkey "
680 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
681 msgid "Step 2.B: Send to server and generate a certificate"
684 #. type: Content of: <html><body><section><div><div><div><h3>
685 msgid "<em>Step 2.b</em> Some important steps following creation"
688 #. type: Content of: <html><body><section><div><div><div><h6>
689 msgid "Upload your key to a keyserver"
692 #. type: Content of: <html><body><section><div><div><div><p>
694 "We will upload your key to a keyserver, so if someone wants to send you an "
695 "encrypted message, they can download your public key from the "
696 "Internet. There are multiple keyservers that you can select from the menu "
697 "when you upload, but they are all copies of each other, so it doesn't matter "
698 "which one you use. However, it sometimes takes a few hours for them to match "
699 "each other when a new key is uploaded."
702 #. type: Content of: <html><body><section><div><div><div><p>
704 "# Copy your keyID <span style=\"color:#2f5faa; font-family: "
705 "monospace;\">gnupg --list-key [your@email]</span> will list your public "
706 "(\"pub\") key information, including your keyID, which is a unique list of "
707 "numbers and letters. Copy this keyID, so you can use it in the following "
711 #. type: Content of: <html><body><section><div><div><div><p>
713 "# Upload your key to a server: <span style=\"color:#2f5faa; font-family: "
714 "monospace;\">gpg --send-key [keyID]</span>"
717 #. type: Content of: <html><body><section><div><div><div><h6>
718 msgid "Export your key to a file"
721 #. type: Content of: <html><body><section><div><div><div><p>
723 "Use the following command to export your secret key so you can import it "
724 "into your email client at the next <a href=\"#section3\">step</a>. To avoid "
725 "getting your key compromised, store this in a safe place, and make sure that "
726 "if it is transferred, it is done so in a trusted way. Exporting your keys "
727 "can be done with the following commands:"
730 #. type: Content of: <html><body><section><div><div><div><span>
732 "<span style=\"color:#2f5faa; font-family: monospace;\"> $ gpg "
733 "--export-secret-keys -a [keyid] > my_secret_key.asc"
736 #. type: Content of: <html><body><section><div><div><div><span>
737 msgid "$ gpg --export -a [keyid] > my_public_key.asc"
740 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
744 #. type: Content of: <html><body><section><div><div><div><h6>
745 msgid "Generate a revocation certificate"
748 #. type: Content of: <html><body><section><div><div><div><p>
750 "Just in case you lose your key, or it gets compromised, you want to generate "
751 "a certificate and choose to save it in a safe place on your computer for now "
752 "(please refer to <a href=\"#step-6c\"> step 6.C</a> for how to best store "
753 "your revocation cerficate safely). This step is essential for your email "
754 "self-defense, as you'll learn more about in <a href=\"#section5\">Section "
758 #. type: Content of: <html><body><section><div><div><div><p>
760 "# Generate a revocation certificate: <span style=\"color:#2f5faa; "
761 "font-family: monospace;\">gpg --gen-revoke --output revoke.asc "
765 #. type: Content of: <html><body><section><div><div><div><p>
767 "# It will prompt you to give a reason for revocation, we recommend to use "
768 "<span style=\"color:#2f5faa; font-family: monospace;\">1 \"key has been "
769 "compromised\"</span>"
772 #. type: Content of: <html><body><section><div><div><div><p>
774 "# You don't have to fill in a reason, but you can, then press enter for an "
775 "empty line, and confirm your selection."
778 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
779 msgid "My key doesn't seem to be working or I get a \"permission denied.\""
782 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
784 "Like every other file or folder, gpg keys are subject to permissions. If "
785 "these are not set correctly, your system may not be accepting your keys. You "
786 "can follow the next steps to check, and update to the right permissions."
789 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
791 "# Check your permissions: <span style=\"color:#2f5faa; font-family: "
792 "monospace;\">ls -l ~/.gnupg/*</span>"
795 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
797 "# Set permissions to read, write, execute for only yourself, no "
798 "others. These are the recommended permissions for your folder."
801 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
803 "You can use the code <span style=\"color:#2f5faa; font-family: "
804 "monospace;\">chmod 700 ~/.gnupg</span>"
807 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
809 "# Set permissions to read and write for yourself only, no others. These are "
810 "the recommended permissions for the keys inside your folder."
813 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
815 "You can use the code: <span style=\"color:#2f5faa; font-family: "
816 "monospace;\">chmod 600 ~/.gnupg/*</span>"
819 #. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
821 "If you have (for any reason) created your own folders inside ~/.gnupg, you "
822 "must also additionally apply execute permissions to that folder. Folders "
823 "require execution privileges to be opened. For more information on "
824 "permissions, you can check out <a "
825 "href=\"https://helpdeskgeek.com/linux-tips/understanding-linux-permissions-chmod-usage/\">this "
826 "detailed information guide</a>."
829 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
830 msgid "More about keyservers"
833 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
835 "You can find some more keyserver information<a "
836 "href=\"https://www.gnupg.org/gph/en/manual/x457.html\"> in this "
837 "manual</a>. <a href=\"https://sks-keyservers.net/overview-of-pools.php\">The "
838 "sks Web site</a> maintains a list of highly interconnected keyservers. You "
840 "href=\"https://www.gnupg.org/gph/en/manual/x56.html#AEN64\">directly export "
841 "your key</a> as a file on your computer."
844 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
845 msgid "Transferring your keys"
848 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
850 "Use the following commands to transfer your keys. To avoid getting your key "
851 "compromised, store it in a safe place, and make sure that if it is "
852 "transferred, it is done so in a trusted way. Importing and exporting a key "
853 "can be done with the following commands:"
856 #. type: Content of: <html><body><section><div><div><div><div><dl><dd><span>
858 "<span style=\"color:#2f5faa; font-family: monospace;\"> $ gpg "
859 "--export-secret-keys -a keyid > my_private_key.asc"
862 #. type: Content of: <html><body><section><div><div><div><div><dl><dd><span>
863 msgid "$ gpg --export -a keyid > my_public_key.asc"
866 #. type: Content of: <html><body><section><div><div><div><div><dl><dd><span>
867 msgid "$ gpg --import my_private_key.asc"
870 #. type: Content of: <html><body><section><div><div><div><div><dl><dd><span>
871 msgid "$ gpg --import my_public_key.asc"
874 #. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
876 "Ensure that the keyID printed is the correct one, and if so, then go ahead "
877 "and add ultimate trust for it:"
880 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
882 "<span style=\"color:#2f5faa; font-family: monospace;\"> $ gpg --edit-key "
883 "[your@email] </span>"
886 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
888 "Because this is your key, you should choose <span style=\"color:#2f5faa; "
889 "font-family: monospace;\">ultimate</span>. You shouldn't trust anyone else's "
893 #. type: Content of: <html><body><section><div><div><div><div><dl><dd><p>
895 "Refer to <a href=\"#step-2b\">troubleshoot in step 2.B</a> for more "
896 "information on permissions. When transferring keys, your permissions may get "
897 "mixed, and errors may be prompted. These are easily avoided when your "
898 "folders and files have the right permissions"
901 #. type: Content of: <html><body><section><div><div><h2>
902 msgid "<em>#3</em> Set up email encryption"
905 #. type: Content of: <html><body><section><div><div><p>
907 "The Icedove (or Thunderbird) email program has PGP functionality integrated, "
908 "which makes it pretty easy to work with. We'll take you through the steps of "
909 "integrating and using your key in these email clients."
912 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
913 msgid "Step 3.A: Email Menu"
916 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
917 msgid "Step 3.A: Import From File"
920 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
921 msgid "Step 3.A: Success"
924 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
925 msgid "Step 3.A: Troubleshoot"
928 #. type: Content of: <html><body><section><div><div><div><h3>
929 msgid "<em>Step 3.a</em> Set up your email with encryption"
932 #. type: Content of: <html><body><section><div><div><div>
934 "Once you have set up your email with encryption, you can start contributing "
935 "to encrypted traffic on the Internet. First we'll get your email client to "
936 "import your secret key, and we will also learn how to get other people's "
937 "public keys from servers so you can send and receive encrypted email."
940 #. type: Content of: <html><body><section><div><div><div><p>
942 "# Open your email client and use \"Tools\" → <span "
943 "style=\"color:#2f5faa;\">OpenPGP Manager</span>"
946 #. type: Content of: <html><body><section><div><div><div><p>
948 "# Under \"File\" → <span style=\"color:#2f5faa;\">Import Secret Key(s) "
952 #. type: Content of: <html><body><section><div><div><div><p>
954 "# Select the file you saved under the name [my_secret_key.asc] in step <a "
955 "href=\"#step-3b\">step 3.b</a> when you exported your key"
958 #. type: Content of: <html><body><section><div><div><div><p>
959 msgid "# Unlock with your passphrase"
962 #. type: Content of: <html><body><section><div><div><div><p>
964 "# You will receive a \"OpenPGP keys successfully imported\" window to "
968 #. type: Content of: <html><body><section><div><div><div><p>
970 "# Go to \"Edit\" (in Icedove) or \"Tools\" (in Thunderbird) → \"Account "
971 "settings\" → \"End-To-End Encryption,\" and make sure your key is "
972 "imported and select <span style=\"color:#2f5faa;\">Treat this key as a "
973 "Personal Key</span>."
976 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
977 msgid "I'm not sure the import worked correctly"
980 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
982 "Look for \"Account settings\" → \"End-To-End Encryption\" (Under "
983 "\"Edit\" (in Icedove) or \"Tools\" (in Thunderbird)). Here you can see if "
984 "your personal key associated with this email is found. If it is not, you can "
985 "try again via the <span style=\"color:#2f5faa;\">Add key</span> option. Make "
986 "sure you have the correct, active, secret key file."
989 #. type: Content of: <html><body><section><div><div><h2>
990 msgid "<em>#4</em> Try it out!"
993 #. type: Attribute 'alt' of: <html><body><section><div><div><p><img>
994 msgid "Illustration of a person in a house with a cat connected to a server"
997 #. type: Content of: <html><body><section><div><div><p>
999 "Now you'll try a test correspondence with an FSF computer program named "
1000 "Edward, who knows how to use encryption. Except where noted, these are the "
1001 "same steps you'd follow when corresponding with a real, live person."
1004 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1005 msgid "Step 4.A Send key to Edward."
1008 #. type: Content of: <html><body><section><div><div><div><h3>
1009 msgid "<em>Step 4.a</em> Send Edward your public key"
1012 #. type: Content of: <html><body><section><div><div><div><p>
1014 "This is a special step that you won't have to do when corresponding with "
1015 "real people. In your email program's menu, go to \"Tools\" → \"OpenPGP "
1016 "Key Manager.\" You should see your key in the list that pops up. Right click "
1017 "on your key and select <span style=\"color:#2f5faa;\">Send Public Keys by "
1018 "Email</span>. This will create a new draft message, as if you had just hit "
1019 "the \"Write\" button, but in the attachment you will find your public "
1023 #. type: Content of: <html><body><section><div><div><div><p>
1025 "Address the message to <a "
1026 "href=\"mailto:edward-en@fsf.org\">edward-en@fsf.org</a>. Put at least one "
1027 "word (whatever you want) in the subject and body of the email. Don't send "
1031 #. type: Content of: <html><body><section><div><div><div><p>
1033 "We want Edward to be able to open the email with your keyfile, so we want "
1034 "this first special message to be unencrypted. Make sure encryption is turned "
1035 "off by using the dropdown menu \"Security\" and select <span "
1036 "style=\"color:#2f5faa\">Do Not Encrypt</span>. Once encryption is off, hit "
1040 #. type: Content of: <html><body><section><div><div><div><p>
1042 "It may take two or three minutes for Edward to respond. In the meantime, you "
1043 "might want to skip ahead and check out the <a href=\"#section6\">Use it "
1044 "Well</a> section of this guide. Once you have received a response, head to "
1045 "the next step. From here on, you'll be doing just the same thing as when "
1046 "corresponding with a real person."
1049 #. type: Content of: <html><body><section><div><div><div><p>
1051 "When you open Edward's reply, GnuPG may prompt you for your passphrase "
1052 "before using your private key to decrypt it."
1055 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1056 msgid "Step 4.B Option 1. Verify key"
1059 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1060 msgid "Step 4.B Option 2. Import key"
1063 #. type: Content of: <html><body><section><div><div><div><h3>
1064 msgid "<em>Step 4.b</em> Send a test encrypted email"
1067 #. type: Content of: <html><body><section><div><div><div><h6>
1068 msgid "Get Edward's key"
1071 #. type: Content of: <html><body><section><div><div><div><p>
1073 "To encrypt an email to Edward, you need its public key, so now you'll have "
1074 "to download it from a keyserver. You can do this in two different ways:"
1077 #. type: Content of: <html><body><section><div><div><div><p>
1079 "<strong>Option 1.</strong> In the email answer you received from Edward as a "
1080 "response to your first email, Edward's public key was included. On the right "
1081 "of the email, just above the writing area, you will find an \"OpenPGP\" "
1082 "button that has a lock and a little wheel next to it. Click that, and select "
1083 "<span style=\"color:#2f5faa\">Discover</span> next to the text: \"This "
1084 "message was sent with a key that you don't have yet.\" A popup with Edward's "
1085 "key details will follow."
1088 #. type: Content of: <html><body><section><div><div><div><p>
1090 "<strong>Option 2.</strong> Open your OpenPGP manager and under \"Keyserver\" "
1091 "choose <span style=\"color:#2f5faa\">Discover Keys Online</span>. Here, fill "
1092 "in Edward's email address, and import Edward's key."
1095 #. type: Content of: <html><body><section><div><div><div><p>
1097 "The option <span style=\"color:#2f5faa\">Accepted (unverified)</span> will "
1098 "add this key to your key manager, and now it can be used to send encrypted "
1099 "emails and to verify digital signatures from Edward."
1102 #. type: Content of: <html><body><section><div><div><div><p>
1104 "In the popup window confirming if you want to import Edward's key, you'll "
1105 "see many different emails that are all associated with its key. This is "
1106 "correct; you can safely import the key."
1109 #. type: Content of: <html><body><section><div><div><div><p>
1111 "Since you encrypted this email with Edward's public key, Edward's private "
1112 "key is required to decrypt it. Edward is the only one with its private key, "
1113 "so no one except Edward can decrypt it."
1116 #. type: Content of: <html><body><section><div><div><div><h6>
1117 msgid "Send Edward an encrypted email"
1120 #. type: Content of: <html><body><section><div><div><div><p>
1122 "Write a new email in your email program, addressed to <a "
1123 "href=\"mailto:edward-en@fsf.org\">edward-en@fsf.org</a>. Make the subject "
1124 "\"Encryption test\" or something similar and write something in the body."
1127 #. type: Content of: <html><body><section><div><div><div><p>
1129 "This time, make sure encryption is turned on by using the dropdown menu "
1130 "\"Security\" and select <span style=\"color:#2f5faa\">Require "
1131 "Encryption</span>. Once encryption is on, hit Send."
1134 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
1135 msgid "\"Recipients not valid, not trusted or not found\""
1138 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1140 "You may be trying to send an encrypted email to someone when you do not have "
1141 "their public key yet. Make sure you follow the steps above to import the key "
1142 "to your key manager. Open OpenPGP Key Manager to make sure the recipient is "
1146 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
1147 msgid "Unable to send message"
1150 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1152 "You could get the following message when trying to send your encrypted "
1153 "email: \"Unable to send this message with end-to-end encryption, because "
1154 "there are problems with the keys of the following recipients: "
1155 "edward-en@fsf.org.\" This usually means you imported the key with the "
1156 "\"unaccepted (unverified) option.\" Go to the \"key properties\" of this key "
1157 "by right clicking on the key in the OpenPGP Key Manager, and select the "
1158 "option <span style=\"color:#2f5faa\">Yes, but I have not verified that this "
1159 "is the correct key</span> in the \"Acceptance\" option at the bottom of this "
1160 "window. Resend the email."
1163 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
1164 msgid "I can't find Edward's key"
1167 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1169 "Close the pop-ups that have appeared since you clicked Send. Make sure you "
1170 "are connected to the Internet and try again. If that doesn't work, repeat "
1171 "the process, choosing a different keyserver when it asks you to pick one."
1174 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
1175 msgid "Unscrambled messages in the Sent folder"
1178 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1180 "Even though you can't decrypt messages encrypted to someone else's key, your "
1181 "email program will automatically save a copy encrypted to your public key, "
1182 "which you'll be able to view from the Sent folder like a normal email. This "
1183 "is normal, and it doesn't mean that your email was not sent encrypted."
1186 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
1187 msgid "Encrypt messages from the command line"
1190 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1192 "You can also encrypt and decrypt messages and files from the <a "
1193 "href=\"https://www.gnupg.org/gph/en/manual/x110.html\">command line</a>, if "
1194 "that's your preference. The option --armor makes the encrypted output appear "
1195 "in the regular character set."
1198 #. type: Content of: <html><body><section><div><div><div><h3>
1199 msgid "<em>Important:</em> Security tips"
1202 #. type: Content of: <html><body><section><div><div><div><p>
1204 "Even if you encrypt your email, the subject line is not encrypted, so don't "
1205 "put private information there. The sending and receiving addresses aren't "
1206 "encrypted either, so a surveillance system can still figure out who you're "
1207 "communicating with. Also, surveillance agents will know that you're using "
1208 "GnuPG, even if they can't figure out what you're saying. When you send "
1209 "attachments, you can choose to encrypt them or not, independent of the "
1213 #. type: Content of: <html><body><section><div><div><div><p>
1215 "For greater security against potential attacks, you can turn off "
1216 "HTML. Instead, you can render the message body as plain text. In order to do "
1217 "this in Icedove or Thunderbird, go to View > Message Body As > Plain "
1221 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1222 msgid "Step 4.C Edward's response"
1225 #. type: Content of: <html><body><section><div><div><div><h3>
1226 msgid "<em>Step 4.c</em> Receive a response"
1229 #. type: Content of: <html><body><section><div><div><div><p>
1231 "When Edward receives your email, it will use its private key to decrypt it, "
1232 "then reply to you."
1235 #. type: Content of: <html><body><section><div><div><div><p>
1237 "It may take two or three minutes for Edward to respond. In the meantime, you "
1238 "might want to skip ahead and check out the <a href=\"#section6\">Use it "
1239 "Well</a> section of this guide."
1242 #. type: Content of: <html><body><section><div><div><div><p>
1244 "Edward will send you an encrypted email back saying your email was received "
1245 "and decrypted. Your email client will automatically decrypt Edward's "
1249 #. type: Content of: <html><body><section><div><div><div><p>
1251 "The OpenPGP button in the email will show a little green checkmark over the "
1252 "lock symbol to show the message is encrypted, and a little orange warning "
1253 "sign which means that you have accepted the key, but not verified it. When "
1254 "you have not yet accepted the key, you will see a little question mark "
1255 "there. Clicking the prompts in this button will lead you to key properties "
1259 #. type: Content of: <html><body><section><div><div><div><h3>
1260 msgid "<em>Step 4.d</em> Send a signed test email"
1263 #. type: Content of: <html><body><section><div><div><div><p>
1265 "GnuPG includes a way for you to sign messages and files, verifying that they "
1266 "came from you and that they weren't tampered with along the way. These "
1267 "signatures are stronger than their pen-and-paper cousins -- they're "
1268 "impossible to forge, because they're impossible to create without your "
1269 "private key (another reason to keep your private key safe)."
1272 #. type: Content of: <html><body><section><div><div><div><p>
1274 "You can sign messages to anyone, so it's a great way to make people aware "
1275 "that you use GnuPG and that they can communicate with you securely. If they "
1276 "don't have GnuPG, they will be able to read your message and see your "
1277 "signature. If they do have GnuPG, they'll also be able to verify that your "
1278 "signature is authentic."
1281 #. type: Content of: <html><body><section><div><div><div><p>
1283 "To sign an email to Edward, compose any message to the email address and "
1284 "click the pencil icon next to the lock icon so that it turns gold. If you "
1285 "sign a message, GnuPG may ask you for your password before it sends the "
1286 "message, because it needs to unlock your private key for signing."
1289 #. type: Content of: <html><body><section><div><div><div><p>
1291 "In \"Account Settings\" → \"End-To-End-Encryption\" you can opt to "
1292 "<span style=\"color:#2f5faa\">add digital signature by default</span>."
1295 #. type: Content of: <html><body><section><div><div><div><h3>
1296 msgid "<em>Step 4.e</em> Receive a response"
1299 #. type: Content of: <html><body><section><div><div><div><p>
1301 "When Edward receives your email, he will use your public key (which you sent "
1302 "him in <a href=\"#step-3a\">Step 3.A</a>) to verify the message you sent has "
1303 "not been tampered with and to encrypt a reply to you."
1306 #. type: Content of: <html><body><section><div><div><div><p>
1308 "Edward's reply will arrive encrypted, because he prefers to use encryption "
1309 "whenever possible. If everything goes according to plan, it should say "
1310 "\"Your signature was verified.\" If your test signed email was also "
1311 "encrypted, he will mention that first."
1314 #. type: Content of: <html><body><section><div><div><div><p>
1316 "When you receive Edward's email and open it, your email client will "
1317 "automatically detect that it is encrypted with your public key, and then it "
1318 "will use your private key to decrypt it."
1321 #. type: Content of: <html><body><section><div><div><h2>
1322 msgid "<em>#5</em> Learn about the Web of Trust"
1325 #. type: Attribute 'alt' of: <html><body><section><div><div><p><img>
1326 msgid "Illustration of keys all interconnected with a web of lines"
1329 #. type: Content of: <html><body><section><div><div><p>
1331 "Email encryption is a powerful technology, but it has a weakness: it "
1332 "requires a way to verify that a person's public key is actually "
1333 "theirs. Otherwise, there would be no way to stop an attacker from making an "
1334 "email address with your friend's name, creating keys to go with it, and "
1335 "impersonating your friend. That's why the free software programmers that "
1336 "developed email encryption created keysigning and the Web of Trust."
1339 #. type: Content of: <html><body><section><div><div><p>
1341 "When you sign someone's key, you are publicly saying that you've verified "
1342 "that it belongs to them and not someone else."
1345 #. type: Content of: <html><body><section><div><div><p>
1347 "Signing keys and signing messages use the same type of mathematical "
1348 "operation, but they carry very different implications. It's a good practice "
1349 "to generally sign your email, but if you casually sign people's keys, you "
1350 "may accidently end up vouching for the identity of an imposter."
1353 #. type: Content of: <html><body><section><div><div><p>
1355 "People who use your public key can see who has signed it. Once you've used "
1356 "GnuPG for a long time, your key may have hundreds of signatures. You can "
1357 "consider a key to be more trustworthy if it has many signatures from people "
1358 "that you trust. The Web of Trust is a constellation of GnuPG users, "
1359 "connected to each other by chains of trust expressed through signatures."
1362 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1363 msgid "Section 5: trusting a key"
1366 #. type: Content of: <html><body><section><div><div><div><h3>
1367 msgid "<em>Step 5.a</em> Sign a key"
1370 #. type: Content of: <html><body><section><div><div><div><p>
1372 "In your email program's menu, go to OpenPGP Key Manager and select <span "
1373 "style=\"color:#2f5faa\">Key properties</span> by right clicking on Edward's "
1377 #. type: Content of: <html><body><section><div><div><div><p>
1379 "Under \"Your Acceptance,\" you can select <span style=\"color:#2f5faa\">Yes, "
1380 "I've verified in person this key has the correct fingerprint\"</span>."
1383 #. type: Content of: <html><body><section><div><div><div><p>
1385 "You've just effectively said \"I trust that Edward's public key actually "
1386 "belongs to Edward.\" This doesn't mean much because Edward isn't a real "
1387 "person, but it's good practice, and for real people it is important. You can "
1388 "read more about signing a person's key in the <a "
1389 "href=\"#check-ids-before-signing\">check IDs before signing</a> section."
1392 #. type: Content of: <html><body><section><div><div><div><h3>
1393 msgid "Identifying keys: Fingerprints and IDs"
1396 #. type: Content of: <html><body><section><div><div><div><p>
1398 "People's public keys are usually identified by their key fingerprint, which "
1399 "is a string of digits like F357AA1A5B1FA42CFD9FE52A9FF2194CC09A61E8 (for "
1400 "Edward's key). You can see the fingerprint for your public key, and other "
1401 "public keys saved on your computer, by going to OpenPGP Key Management in "
1402 "your email program's menu, then right clicking on the key and choosing Key "
1403 "Properties. It's good practice to share your fingerprint wherever you share "
1404 "your email address, so that people can double-check that they have the "
1405 "correct public key when they download yours from a keyserver."
1408 #. type: Content of: <html><body><section><div><div><div><p>
1410 "You may also see public keys referred to by a shorter keyID. This keyID is "
1411 "visible directly from the Key Management window. These eight character "
1412 "keyIDs were previously used for identification, which used to be safe, but "
1413 "is no longer reliable. You need to check the full fingerprint as part of "
1414 "verifying you have the correct key for the person you are trying to "
1415 "contact. Spoofing, in which someone intentionally generates a key with a "
1416 "fingerprint whose final eight characters are the same as another, is "
1417 "unfortunately common."
1420 #. type: Content of: <html><body><section><div><div><div><h3>
1421 msgid "<em>Important:</em> What to consider when signing keys"
1424 #. type: Content of: <html><body><section><div><div><div><p>
1426 "Before signing a person's key, you need to be confident that it actually "
1427 "belongs to them, and that they are who they say they are. Ideally, this "
1428 "confidence comes from having interactions and conversations with them over "
1429 "time, and witnessing interactions between them and others. Whenever signing "
1430 "a key, ask to see the full public key fingerprint, and not just the shorter "
1431 "keyID. If you feel it's important to sign the key of someone you've just "
1432 "met, also ask them to show you their government identification, and make "
1433 "sure the name on the ID matches the name on the public key."
1436 #. type: Content of: <html><body><section><div><div><div><div><dl><dt>
1437 msgid "Master the Web of Trust"
1440 #. type: Content of: <html><body><section><div><div><div><div><dl><dd>
1442 "Unfortunately, trust does not spread between users the way <a "
1443 "href=\"https://fennetic.net/irc/finney.org/~hal/web_of_trust.html\">many "
1444 "people think</a>. One of the best ways to strengthen the GnuPG community is "
1446 "href=\"https://www.gnupg.org/gph/en/manual/x334.html\">understand</a> the "
1447 "Web of Trust and to carefully sign as many people's keys as circumstances "
1451 #. type: Content of: <html><body><section><div><div><h2>
1452 msgid "<em>#6</em> Use it well"
1455 #. type: Content of: <html><body><section><div><div><p>
1457 "Everyone uses GnuPG a little differently, but it's important to follow some "
1458 "basic practices to keep your email secure. Not following them, you risk the "
1459 "privacy of the people you communicate with, as well as your own, and damage "
1463 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1464 msgid "Section 6: Use it Well (1)"
1467 #. type: Content of: <html><body><section><div><div><div><h3>
1468 msgid "When should I encrypt? When should I sign?"
1471 #. type: Content of: <html><body><section><div><div><div><p>
1473 "The more you can encrypt your messages, the better. If you only encrypt "
1474 "emails occasionally, each encrypted message could raise a red flag for "
1475 "surveillance systems. If all or most of your email is encrypted, people "
1476 "doing surveillance won't know where to start. That's not to say that only "
1477 "encrypting some of your email isn't helpful -- it's a great start and it "
1478 "makes bulk surveillance more difficult."
1481 #. type: Content of: <html><body><section><div><div><div><p>
1483 "Unless you don't want to reveal your own identity (which requires other "
1484 "protective measures), there's no reason not to sign every message, whether "
1485 "or not you are encrypting. In addition to allowing those with GnuPG to "
1486 "verify that the message came from you, signing is a non-intrusive way to "
1487 "remind everyone that you use GnuPG and show support for secure "
1488 "communication. If you often send signed messages to people that aren't "
1489 "familiar with GnuPG, it's nice to also include a link to this guide in your "
1490 "standard email signature (the text kind, not the cryptographic kind)."
1493 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1494 msgid "Section 6: Use it Well (2)"
1497 #. type: Content of: <html><body><section><div><div><div><h3>
1498 msgid "Be wary of invalid keys"
1501 #. type: Content of: <html><body><section><div><div><div><p>
1503 "GnuPG makes email safer, but it's still important to watch out for invalid "
1504 "keys, which might have fallen into the wrong hands. Email encrypted with "
1505 "invalid keys might be readable by surveillance programs."
1508 #. type: Content of: <html><body><section><div><div><div><p>
1510 "In your email program, go back to the first encrypted email that Edward sent "
1511 "you. Because Edward encrypted it with your public key, it will have a green "
1512 "checkmark a at the top \"OpenPGP\" button."
1515 #. type: Content of: <html><body><section><div><div><div><p>
1517 "<b>When using GnuPG, make a habit of glancing at that button. The program "
1518 "will warn you there if you get an email signed with a key that can't be "
1522 #. type: Content of: <html><body><section><div><div><div><h3>
1523 msgid "Copy your revocation certificate to somewhere safe"
1526 #. type: Content of: <html><body><section><div><div><div><p>
1528 "Remember when you created your keys and saved the revocation certificate "
1529 "that GnuPG made? It's time to copy that certificate onto the safest storage "
1530 "that you have -- a flash drive, disk, or hard drive stored in a safe place "
1531 "in your home could work, not on a device you carry with you regularly. The "
1532 "safest way we know is actually to print the revocation certificate and store "
1533 "it in a safe place."
1536 #. type: Content of: <html><body><section><div><div><div><p>
1538 "If your private key ever gets lost or stolen, you'll need this certificate "
1539 "file to let people know that you are no longer using that keypair."
1542 #. type: Content of: <html><body><section><div><div><div><h3>
1543 msgid "<em>IMPORTANT:</em> ACT SWIFTLY if someone gets your private key"
1546 #. type: Content of: <html><body><section><div><div><div><p>
1548 "If you lose your private key or someone else gets a hold of it (say, by "
1549 "stealing or cracking your computer), it's important to revoke it immediately "
1550 "before someone else uses it to read your encrypted email or forge your "
1551 "signature. This guide doesn't cover how to revoke a key, but you can follow "
1553 "href=\"https://www.hackdiary.com/2004/01/18/revoking-a-gpg-key/\">instructions</a>. "
1554 "After you're done revoking, make a new key and send an email to everyone "
1555 "with whom you usually use your key to make sure they know, including a copy "
1559 #. type: Content of: <html><body><section><div><div><div><h3>
1560 msgid "Webmail and GnuPG"
1563 #. type: Content of: <html><body><section><div><div><div><p>
1565 "When you use a web browser to access your email, you're using webmail, an "
1566 "email program stored on a distant website. Unlike webmail, your desktop "
1567 "email program runs on your own computer. Although webmail can't decrypt "
1568 "encrypted email, it will still display it in its encrypted form. If you "
1569 "primarily use webmail, you'll know to open your email client when you "
1570 "receive a scrambled email."
1573 #. type: Content of: <html><body><section><div><div><div><h3>
1574 msgid "Make your public key part of your online identity"
1577 #. type: Content of: <html><body><section><div><div><div><p>
1579 "First add your public key fingerprint to your email signature, then compose "
1580 "an email to at least five of your friends, telling them you just set up "
1581 "GnuPG and mentioning your public key fingerprint. Link to this guide and ask "
1582 "them to join you. Don't forget that there's also an awesome <a "
1583 "href=\"infographic.html\">infographic to share.</a>"
1586 #. type: Content of: <html><body><section><div><div><div><p>
1588 "Start writing your public key fingerprint anywhere someone would see your "
1589 "email address: your social media profiles, blog, Website, or business "
1590 "card. (At the Free Software Foundation, we put ours on our <a "
1591 "href=\"https://fsf.org/about/staff\">staff page</a>.) We need to get our "
1592 "culture to the point that we feel like something is missing when we see an "
1593 "email address without a public key fingerprint."
1596 #. type: Content of: <html><body><section><div><div><h2>
1597 msgid "<a href=\"next_steps.html\">Great job! Check out the next steps.</a>"
1600 #. type: Attribute 'content' of: <html><head><meta>
1601 msgid "GnuPG, GPG, openpgp, surveillance, privacy, email, Enigmail"
1604 #. type: Content of: <html><body><header><div><p>
1605 msgid "← Read the <a href=\"index.html\">full guide</a>"
1608 #. type: Content of: <html><body><header><div><h3><a>
1611 "href=\"https://fsf.org/share?u=https://u.fsf.org/zc&t=How%20public-key%20encryption%20works.%20Infographic%20via%20%40fsf\">"
1614 #. type: Content of: <html><body><header><div><h3>
1615 msgid " Share our infographic </a> with the hashtag #EmailSelfDefense"
1618 #. type: Attribute 'alt' of: <html><body><header><div><p><img>
1619 msgid "View & share our infographic"
1622 #. type: Attribute 'content' of: <html><head><meta>
1623 msgid "GnuPG, GPG, openpgp, surveillance, privacy, email, encryption"
1626 #. type: Content of: <html><body><header><div><h1>
1630 #. type: Content of: <html><body><section><div><div><h2>
1631 msgid "<em>#7</em> Next steps"
1634 #. type: Content of: <html><body><section><div><div><p>
1636 "You've now completed the basics of email encryption with GnuPG, taking "
1637 "action against bulk surveillance. These next steps will help make the most "
1638 "of the work you've done."
1641 #. type: Content of: <html><body><section><div><div><div><p>
1642 msgid "← <a href=\"index.html\">Return to the guide</a>"
1645 #. type: Content of: <html><body><section><div><div><div><h3>
1646 msgid "Join the movement"
1649 #. type: Content of: <html><body><section><div><div><div><p>
1651 "You've just taken a huge step towards protecting your privacy online. But "
1652 "each of us acting alone isn't enough. To topple bulk surveillance, we need "
1653 "to build a movement for the autonomy and freedom of all computer users. Join "
1654 "the Free Software Foundation's community to meet like-minded people and work "
1655 "together for change."
1658 #. type: Content of: <html><body><section><div><div><div><p>
1660 "<small>Read <a href=\"https://www.fsf.org/twitter\">why GNU Social and "
1661 "Mastodon are better than Twitter</a>, and <a "
1662 "href=\"https://www.fsf.org/facebook\">why we don't use Facebook</a>.</small>"
1665 #. type: Content of: <html><body><section><div><div><div><div><p>
1666 msgid "Low-volume mailing list"
1669 #. type: Content of: <html><body><section><div><div><div><div><form>
1671 "<input type=\"text\" value=\"Type your email...\" name=\"email-Primary\" "
1672 "id=\"frmEmail\" /> <input type=\"submit\" value=\"Add me\" "
1673 "name=\"_qf_Edit_next\" /> <input type=\"hidden\" "
1674 "value=\"https://emailselfdefense.fsf.org/en/confirmation.html\" "
1675 "name=\"postURL\" /> <input type=\"hidden\" value=\"1\" name=\"group[25]\" /> "
1676 "<input type=\"hidden\" "
1677 "value=\"https://my.fsf.org/civicrm/profile?reset=1&gid=391\" "
1678 "name=\"cancelURL\" /> <input type=\"hidden\" value=\"Edit:cancel\" "
1679 "name=\"_qf_default\" />"
1682 #. type: Content of: <html><body><section><div><div><div><div><p>
1684 "<small>Read our <a "
1685 "href=\"https://my.fsf.org/donate/privacypolicy.html\">privacy "
1686 "policy</a>.</small>"
1689 #. type: Content of: <html><body><section><div><div><div><h3>
1690 msgid "Bring Email Self-Defense to new people"
1693 #. type: Content of: <html><body><section><div><div><div><p>
1695 "Understanding and setting up email encryption is a daunting task for "
1696 "many. To welcome them, make it easy to find your public key and offer to "
1697 "help with encryption. Here are some suggestions:"
1700 #. type: Content of: <html><body><section><div><div><div><ul><li>
1702 "# Lead an Email Self-Defense workshop for your friends and community, using "
1703 "our <a href=\"workshops.html\">teaching guide</a>."
1706 #. type: Content of: <html><body><section><div><div><div><ul><li>
1709 "href=\"https://fsf.org/share?u=https://u.fsf.org/zb&t=Encrypt%20with%20me%20using%20Email%20Self-Defense%20%40fsf\"> "
1710 "our sharing page</a> to compose a message to a few friends and ask them to "
1711 "join you in using encrypted email. Remember to include your GnuPG public key "
1712 "fingerprint so they can easily download your key."
1715 #. type: Content of: <html><body><section><div><div><div><ul><li>
1717 "# Add your public key fingerprint anywhere that you normally display your "
1718 "email address. Some good places are: your email signature (the text kind, "
1719 "not the cryptographic kind), social media profiles, blogs, Web sites, or "
1720 "business cards. At the Free Software Foundation, we put ours on our <a "
1721 "href=\"https://fsf.org/about/staff\">staff page</a>."
1724 #. type: Content of: <html><body><section><div><div><div><h3>
1725 msgid "Protect more of your digital life"
1728 #. type: Content of: <html><body><section><div><div><div><p>
1730 "Learn surveillance-resistant technologies for instant messages, hard drive "
1731 "storage, online sharing, and more at <a "
1732 "href=\"https://directory.fsf.org/wiki/Collection:Privacy_pack\"> the Free "
1733 "Software Directory's Privacy Pack</a> and <a "
1734 "href=\"https://prism-break.org\">prism-break.org</a>."
1737 #. type: Content of: <html><body><section><div><div><div><p>
1739 "If you are using Windows, Mac OS or any other proprietary operating system, "
1740 "we recommend you switch to a free software operating system like "
1741 "GNU/Linux. This will make it much harder for attackers to enter your "
1742 "computer through hidden back doors. Check out the Free Software Foundation's "
1743 "<a href=\"https://www.gnu.org/distros/free-distros.html\">endorsed versions "
1747 #. type: Content of: <html><body><section><div><div><div><h3>
1748 msgid "Optional: Add more email protection with Tor"
1751 #. type: Content of: <html><body><section><div><div><div><p>
1753 "<a href=\"https://www.torproject.org/about/overview.html.en\">The Onion "
1754 "Router (Tor) network</a> wraps Internet communication in multiple layers of "
1755 "encryption and bounces it around the world several times. When used "
1756 "properly, Tor confuses surveillance field agents and the global surveillance "
1757 "apparatus alike. Using it simultaneously with GnuPG's encryption will give "
1758 "you the best results."
1761 #. type: Content of: <html><body><section><div><div><div><p>
1763 "To have your email program send and receive email over Tor, install the <a "
1764 "href=\"https://addons.mozilla.org/en-us/thunderbird/addon/torbirdy/\">Torbirdy "
1765 "plugin</a> by searching for it through Add-ons."
1768 #. type: Content of: <html><body><section><div><div><div><p>
1770 "Before beginning to check your email over Tor, make sure you understand <a "
1771 "href=\"https://www.torproject.org/docs/faq.html.en#WhatProtectionsDoesTorProvide\"> "
1772 "the security tradeoffs involved</a>. This <a "
1773 "href=\"https://www.eff.org/pages/tor-and-https\">infographic</a> from our "
1774 "friends at the Electronic Frontier Foundation demonstrates how Tor keeps you "
1778 #. type: Attribute 'alt' of: <html><body><section><div><div><div><p><img>
1779 msgid "Section 7: Next Steps"
1782 #. type: Content of: <html><body><section><div><div><div><h3>
1783 msgid "Make Email Self-Defense tools even better"
1786 #. type: Content of: <html><body><section><div><div><div><p>
1788 "<a href=\"https://libreplanet.org/wiki/GPG_guide/Public_Review\">Leave "
1789 "feedback and suggest improvements to this guide</a>. We welcome "
1790 "translations, but we ask that you contact us at <a "
1791 "href=\"mailto:campaigns@fsf.org\">campaigns@fsf.org</a> before you start, so "
1792 "that we can connect you with other translators working in your language."
1795 #. type: Content of: <html><body><section><div><div><div><p>
1797 "If you like programming, you can contribute code to <a "
1798 "href=\"https://www.gnupg.org/\">GnuPG</a>."
1801 #. type: Content of: <html><body><section><div><div><div><p>
1803 "To go the extra mile, support the Free Software Foundation so we can keep "
1804 "improving Email Self-Defense, and make more tools like it."
1807 #. type: Content of: <html><body><header><div><ul><li>
1808 msgid "<a href=\"index.html\">Set up guide</a>"
1811 #. type: Content of: <html><body><header><div><ul><li>
1812 msgid "<a href=\"workshops.html\" class=\"current\">Teach your friends</a>"
1815 #. type: Content of: <html><body><header><div><ul><li><a>
1818 "href=\"https://fsf.org/share?u=https://u.fsf.org/zb&t=Email%20encryption%20for%20everyone%20via%20%40fsf\">Share "
1821 #. type: Content of: <html><body><header><div><div><div><p>
1823 "We want to translate this guide into more languages, and make a version for "
1824 "encryption on mobile devices. Please donate, and help people around the "
1825 "world take the first step towards protecting their privacy with free "
1829 #. type: Content of: <html><body><header><div><div><p><a>
1832 "href=\"https://crm.fsf.org/civicrm/contribute/transact?reset=1&id=14&pk_campaign=email_self_defense&pk_kwd=guide_donate\">"
1835 #. type: Attribute 'alt' of: <html><body><header><div><div><p><a><img>
1836 msgid "View & share our infographic →"
1839 #. type: Content of: <html><body><header><div><div><p>
1841 "</a> Understanding and setting up email encryption sounds like a daunting "
1842 "task to many people. That's why helping your friends with GnuPG plays such "
1843 "an important role in helping spread encryption. Even if only one person "
1844 "shows up, that's still one more person using encryption who wasn't "
1845 "before. You have the power to help your friends keep their digital love "
1846 "letters private, and teach them about the importance of free software. If "
1847 "you use GnuPG to send and receive encrypted email, you're a perfect "
1848 "candidate for leading a workshop!"
1851 #. type: Attribute 'alt' of: <html><body><section><div><div><p><img>
1852 msgid "A small workshop among friends"
1855 #. type: Content of: <html><body><section><div><div><h2>
1856 msgid "<em>#1</em> Get your friends or community interested"
1859 #. type: Content of: <html><body><section><div><div><p>
1861 "If you hear friends grumbling about their lack of privacy, ask them if "
1862 "they're interested in attending a workshop on Email Self-Defense. If your "
1863 "friends don't grumble about privacy, they may need some convincing. You "
1864 "might even hear the classic \"if you've got nothing to hide, you've got "
1865 "nothing to fear\" argument against using encryption."
1868 #. type: Content of: <html><body><section><div><div><p>
1870 "Here are some talking points you can use to help explain why it's worth it "
1871 "to learn GnuPG. Mix and match whichever you think will make sense to your "
1875 #. type: Content of: <html><body><section><div><div><div><h3>
1876 msgid "Strength in numbers"
1879 #. type: Content of: <html><body><section><div><div><div><p>
1881 "Each person who chooses to resist mass surveillance with encryption makes it "
1882 "easier for others to resist as well. People normalizing the use of strong "
1883 "encryption has multiple powerful effects: it means those who need privacy "
1884 "the most, like potential whistle-blowers and activists, are more likely to "
1885 "learn about encryption. More people using encryption for more things also "
1886 "makes it harder for surveillance systems to single out those that can't "
1887 "afford to be found, and shows solidarity with those people."
1890 #. type: Content of: <html><body><section><div><div><div><h3>
1891 msgid "People you respect may already be using encryption"
1894 #. type: Content of: <html><body><section><div><div><div><p>
1896 "Many journalists, whistleblowers, activists, and researchers use GnuPG, so "
1897 "your friends might unknowingly have heard of a few people who use it "
1898 "already. You can search for \"BEGIN PUBLIC KEY BLOCK\" + keyword to help "
1899 "make a list of people and organizations who use GnuPG whom your community "
1900 "will likely recognize."
1903 #. type: Content of: <html><body><section><div><div><div><h3>
1904 msgid "Respect your friends' privacy"
1907 #. type: Content of: <html><body><section><div><div><div><p>
1909 "There's no objective way to judge what constitutes privacy-sensitive "
1910 "correspondence. As such, it's better not to presume that just because you "
1911 "find an email you sent to a friend innocuous, your friend (or a surveillance "
1912 "agent, for that matter!) feels the same way. Show your friends respect by "
1913 "encrypting your correspondence with them."
1916 #. type: Content of: <html><body><section><div><div><div><h3>
1917 msgid "Privacy technology is normal in the physical world"
1920 #. type: Content of: <html><body><section><div><div><div><p>
1922 "In the physical realm, we take window blinds, envelopes, and closed doors "
1923 "for granted as ways of protecting our privacy. Why should the digital realm "
1927 #. type: Content of: <html><body><section><div><div><div><h3>
1928 msgid "We shouldn't have to trust our email providers with our privacy"
1931 #. type: Content of: <html><body><section><div><div><div><p>
1933 "Some email providers are very trustworthy, but many have incentives not to "
1934 "protect your privacy and security. To be empowered digital citizens, we need "
1935 "to build our own security from the bottom up."
1938 #. type: Content of: <html><body><section><div><div><h2>
1939 msgid "<em>#2</em> Plan The Workshop"
1942 #. type: Content of: <html><body><section><div><div><p>
1944 "Once you've got at least one interested friend, pick a date and start "
1945 "planning out the workshop. Tell participants to bring their computer and ID "
1946 "(for signing each other's keys). If you'd like to make it easy for the "
1947 "participants to use <a "
1948 "href=\"https://theintercept.com/2015/03/26/passphrases-can-memorize-attackers-cant-guess/\">Diceware</a> "
1949 "for choosing passwords, get a pack of dice beforehand. Make sure the "
1950 "location you select has an easily accessible Internet connection, and make "
1951 "backup plans in case the connection stops working on the day of the "
1952 "workshop. Libraries, coffee shops, and community centers make great "
1953 "locations. Try to get all the participants to set up an email client based "
1954 "on Thunderbird before the event. Direct them to their email provider's IT "
1955 "department or help page if they run into errors."
1958 #. type: Content of: <html><body><section><div><div><p>
1960 "Estimate that the workshop will take at least forty minutes plus ten minutes "
1961 "for each participant. Plan extra time for questions and technical glitches."
1964 #. type: Content of: <html><body><section><div><div><p>
1966 "The success of the workshop requires understanding and catering to the "
1967 "unique backgrounds and needs of each group of participants. Workshops should "
1968 "stay small, so that each participant receives more individualized "
1969 "instruction. If more than a handful of people want to participate, keep the "
1970 "facilitator to participant ratio high by recruiting more facilitators, or by "
1971 "facilitating multiple workshops. Small workshops among friends work great!"
1974 #. type: Content of: <html><body><section><div><div><h2>
1975 msgid "<em>#3</em> Follow the guide as a group"
1978 #. type: Content of: <html><body><section><div><div><p>
1980 "Work through the Email Self-Defense guide a step at a time as a group. Talk "
1981 "about the steps in detail, but make sure not to overload the participants "
1982 "with minutia. Pitch the bulk of your instructions to the least tech-savvy "
1983 "participants. Make sure all the participants complete each step before the "
1984 "group moves on to the next one. Consider facilitating secondary workshops "
1985 "afterwards for people that had trouble grasping the concepts, or those that "
1986 "grasped them quickly and want to learn more."
1989 #. type: Content of: <html><body><section><div><div><p>
1991 "In <a href=\"index.html#section2\">Section 2</a> of the guide, make sure the "
1992 "participants upload their keys to the same keyserver so that they can "
1993 "immediately download each other's keys later (sometimes there is a delay in "
1994 "synchronization between keyservers). During <a "
1995 "href=\"index.html#section3\">Section 3</a>, give the participants the option "
1996 "to send test messages to each other instead of or as well as "
1997 "Edward. Similarly, in <a href=\"index.html#section4\">Section 4</a>, "
1998 "encourage the participants to sign each other's keys. At the end, make sure "
1999 "to remind people to safely back up their revocation certificates."
2002 #. type: Content of: <html><body><section><div><div><h2>
2003 msgid "<em>#4</em> Explain the pitfalls"
2006 #. type: Content of: <html><body><section><div><div><p>
2008 "Remind participants that encryption works only when it's explicitly used; "
2009 "they won't be able to send an encrypted email to someone who hasn't already "
2010 "set up encryption. Also remind participants to double-check the encryption "
2011 "icon before hitting send, and that subjects and timestamps are never "
2015 #. type: Content of: <html><body><section><div><div><p>
2018 "href=\"https://www.gnu.org/proprietary/proprietary.html\">dangers of running "
2019 "a proprietary system</a> and advocate for free software, because without it, "
2021 "href=\"https://www.fsf.org/bulletin/2013/fall/how-can-free-software-protect-us-from-surveillance\">meaningfully "
2022 "resist invasions of our digital privacy and autonomy</a>."
2025 #. type: Content of: <html><body><section><div><div><h2>
2026 msgid "<em>#5</em> Share additional resources"
2029 #. type: Content of: <html><body><section><div><div><p>
2031 "GnuPG's advanced options are far too complex to teach in a single "
2032 "workshop. If participants want to know more, point out the advanced "
2033 "subsections in the guide and consider organizing another workshop. You can "
2035 "href=\"https://www.gnupg.org/documentation/index.html\">GnuPG's</a> official "
2036 "documentation and mailing lists, and the <a "
2037 "href=\"https://libreplanet.org/wiki/GPG_guide/Public_Review\">Email "
2038 "Self-Defense feedback</a> page. Many GNU/Linux distribution's Web sites also "
2039 "contain a page explaining some of GnuPG's advanced features."
2042 #. type: Content of: <html><body><section><div><div><h2>
2043 msgid "<em>#6</em> Follow up"
2046 #. type: Content of: <html><body><section><div><div><p>
2048 "Make sure everyone has shared email addresses and public key fingerprints "
2049 "before they leave. Encourage the participants to continue to gain GnuPG "
2050 "experience by emailing each other. Send them each an encrypted email one "
2051 "week after the event, reminding them to try adding their public key ID to "
2052 "places where they publicly list their email address."
2055 #. type: Content of: <html><body><section><div><div><p>
2057 "If you have any suggestions for improving this workshop guide, please let us "
2058 "know at <a href=\"mailto:campaigns@fsf.org\">campaigns@fsf.org</a>."
projects / enc.git / blob