[kwlug-disc] Looking for resources to better understand GPG.

[Mark Steffen]

With regards to key management you could get a USB HSM, to keep your keys
backed up buy two.  Nitrokey HSM will do RSA keys, Yubikey HSM will only do
symmetrical encryption keys; I know the Nitrokey works very well with
Linux, I don't own a Yubikey.  I think there may be a way to load your
private keys into your computer's TPM module though I'm not 100% sure about
that.

I do have PGP installed, but I sign/encrypt email when necessary using an
S/MIME certificate.  S/MIME leverages the pre-existing public PKI
infrastructure, so I think it works better "out of the box" than PGP and is
a fairly universally accepted standard, though I'm sure there is a place
for both.

WhatsApp is great, but I can't see it having a long life in many
jurisdictions; I think they'll quietly settle for a back door arrangement
with GCHQ and others soon.  Also check out Signal.

*Mark Steffen*
Office Direct: +1.226.476.1240 | Mobile/WhatsApp/Signal: +1.226.600.0464
*"Don't believe everything you read on the Internet." -Abraham Lincoln*



On Tue, Aug 15, 2017 at 10:12 PM, Ronald Barnes <ron at ronaldbarnes.ca> wrote:

> stuart at lowlevel.ca wrote on 2017-08-14 06:52 PM:
>
> I've always found it painful and difficult to use/integrate... and if I
>> mention it to regular people they stop talking to me. Would be interesting
>> to see where things are at...
>>
>
> My biggest issue with it is key management.
>
> Lose that precious key, and not only can interlopers not read your email,
> but you can't either.
>
>
> And, of course, there's the network effect, whereby without enough people
> using it, there's not much incentive to use it, which means no one uses it,
> ad infinitum.
>
>
> I don't think we'll ever have properly encrypted email.
>
>
> And, strangely (to me), I was using WhatsApp last week, and it has e2e
> (end-to-end) encryption on, by default.
>
> Who'd have thunk it - a proprietary solution controlled by Facebook -
> gives everyone what we've longed for all these years.
>
>
> r b
>
>
>
> _______________________________________________
> kwlug-disc mailing list
> kwlug-disc at kwlug.org
> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20170815/254f027b/attachment.htm>