Re: [Trisquel-users] Need help with GPG/Enigmail/Torbirdy
I currently use the host of my website, but eventually plan to self-host and run my own mail server. If you're looking for an alternative to Screwgle, posteo.de seems like a good option. It's not gratis, but if you can afford the 1 Euro/month paying with money is better than paying with your privacy. signature.asc Description: PGP signature
Re: [Trisquel-users] Need help with GPG/Enigmail/Torbirdy
Google's list showing their support of open source: https://opensource.google.com/community/affiliations/ I am disappointed with google's appropriation of free software with their position that they should give 'something' back. The idea of Torvald's Linux was that you give it 'all' back, after all, he gave it all to you. But, at least they are giving back and since they are so huge, what they can give is an incredible amount. Maybe it will all work out for the goo... uh, good. Has any one tried using ciphermail? https://addons.mozilla.org/en-US/firefox/addon/encrypt-gmail-ciphermail/ They say 'Encrypt Gmail and any email with CipherMail' and is GNU General Public License, version 3.0.
Re: [Trisquel-users] Need help with GPG/Enigmail/Torbirdy
Google is the most fascinating, of the enemies of free software, to me anyways... for one reason: They hire people who work on coreboot, and give them some freedom, they use free software licenses in malicious ways, and most of all, they track so many people across the world, its hard to believe they use free software licenses in ANYTHING... Long story short, they are one sneaky evil invasive enemy. Microsoft has nothing on google when it comes to level of craftiness they have in which they track people. I hate the idea of it, but it is impressive no matter how decadent it may appear. And yes, google is very decadent. By decadent I mean lost in evil.
Re: [Trisquel-users] Need help with GPG/Enigmail/Torbirdy
Adobe, Amazon, App1e, Canonical, Fuckbook, G00g1e, m$, Netflix, Uber, are the world’s most evil companies against software freedom ever. I now use no services from all them but Fuckbook and G00g1e, just for legacy communications factor. I also run Android but installs F-droid and doesn’t install nonfree G-apps.
Re: [Trisquel-users] Need help with GPG/Enigmail/Torbirdy
https://mai.disroot.org, thanks to Disroot.org for providing free (as in freedom), decentralized, hardened mail service. :) Gmail is also blocked outside Hyperbola GNU/Linux-libre, for this you’d like to consult from CalmStorm here, which he’s the most active most generous donor for Hyperbola project. :)
Re: [Trisquel-users] Need help with GPG/Enigmail/Torbirdy
> Apparently Google's approach to "keeping your account secure" is to track you, and they won't allow you to use their anti-service unless your inform them when and where you travel. Yep, they are creepy and disgusting and their power is just too much, we have to difund the free software ideas in order to get a respectful world. Thanks for the comments.
Re: [Trisquel-users] Need help with GPG/Enigmail/Torbirdy
mason, would it be possible to know to which e-mail provider you switched from Gmail?
Re: [Trisquel-users] Need help with GPG/Enigmail/Torbirdy
> Reading this five pages you can run Icedove - Enigmail - Thorbirdy without a > problem even with your disgusting gmail account. Back when I had a disgusting Gmail account, Google would lock my account for a few hours almost every time I accessed it using Torbirdy. Also, every time I used Icedove at all (without Torbirdy) from a new IP address it would refuse to let Icedove download my emails until I signed in through webmail and confirmed my location. Apparently Google's approach to "keeping your account secure" is to track you, and they won't allow you to use their anti-service unless your inform them when and where you travel. signature.asc Description: PGP signature
Re: [Trisquel-users] Need help with GPG/Enigmail/Torbirdy
Well, all doubts have been solved finally. After taking advice from quiliro and jxself, I have done some tests with GPG (everything works fine in command line and no errors happen, unlike with the GUIs I mentioned, and I see no internet connection happening whatsoever) and I asked around in Tor IRC. Here is a simple view of things for people with some similar doubts: Torbirdy changes settings in Thunderbird to force it to use the appropriate proxy and the appropriate privacy settings. These are enforced in each boot of Thunderbird, so even if you mess with something you can restart and everything will be safe again. There is a leak of the actual time you sent the email (the person who receives it can see, presumably the email service provider as well) but not of the time zone (Torbirdy forces Thunderbird time zone to UTC). So, the receiver can see what time was it that you sent the email, they are working on a patch for it. As for using Enigmail, it is safe. It works correctly, you can encrypt and import keys and such, the only issue is that if the Engimail plugin tries to connect to the internet key server without using proxy settings, Torbirdy will deny it. That's what safe close means. In other words, there is no chance of revealing your identity through there. You might find some problems in using a key server, but again, Torbirdy uses a tor hidden service as key server, to make it safer. So, all in all, I believe this thread might be useful for other people (even because different aspects of GPG and email were discussed here), and I hope the explanation I provide here is also clear enough. I thank everyone who tried to help. The thread is now ended.
Re: [Trisquel-users] Need help with GPG/Enigmail/Torbirdy
El 04/01/14 08:46, gnu...@lavabit.com escribió: My problem is that I am trying to use it through Tor :) And Torbirdy and Enigmail apparently don't work very well together, also, there is the problem that since I am not using Tails, I am afraid that by accident I might leak the keys of my contacts, thus revealing my real IP behind the tor mail service. If it was a matter of using Enigmail, I would be doing so by now :) Perhaps the people at torproject.org IRC will know what the problem is.
Re: [Trisquel-users] Need help with GPG/Enigmail/Torbirdy
Indeed, I have been trying to search for answers in the Tor Project website. But my questions here deal directly with something else (though I admit I got a little sidetracked at a point). I need to know if I can use a program to: Import a public key file, without connecting to the web; Choose to encrypt a text with a different key; Export my own keys (again never connecting to the web); Make the whole encryption/unencryption process in my computer; Protect/hide the keys that I have in my computer; Preferably with a GUI; I have investigated some alternatives (seahorse, GNU Shell, GPA, etc) but all of them have been giving me some headache. So, I am inclined to use the combination of Tor+Thunderbird/Icedove+Enigmail+Torbirdy, but I know that can be insecure at some times.
Re: [Trisquel-users] Need help with GPG/Enigmail/Torbirdy
I need to know if I can use a program to: Sure - It's called GPG. :) Import a public key file, without connecting to the web Sure - gpg --import /path/to/public/key (How that key gets on your file system is out of scope - Maybe you got it from someone over the internet or maybe they gave you their key in person or whatever. Either way, once it exists in your file system go import it.) Choose to encrypt a text with a different key; Sure - You can encrypt to whatever arbitrary key you want. Use the -u option when invoking GPG to specify which to use. Export my own keys (again never connecting to the web); Again, sure. Just like GPG has --import I mentioned earlier, it also has --export. An example would be gpg --export -a GNUuser /path/to/save/public/key and you'll then have your ASCII-encoded public key at that point in your file system. Want to export your secrety key instead? Replace --export with --export-secret-key. Ta Da! Make the whole encryption/unencryption process in my computer Yeah - Use GPG to encrypt decrypt messages. It has -e and -d options for encrypting and decrypting. Protect/hide the keys that I have in my computer; Use full-disk encryption? Preferably with a GUI; There are a number of GUI frontends listed at http://www.gnupg.org/related_software/frontends.html So, as you can see, it's all about reading the documentation of GPG, from which you could have arrived at these same answers instead of me copying pasting them for you. :)
Re: [Trisquel-users] Need help with GPG/Enigmail/Torbirdy
First, thanks for your reply, it was very clear and informative. I was aware of most of it, but some key elements were new, thanks! However, my main 2 problems are still standing which are: - can we be 100% sure that GPG will never connect to the internet (by an accident or bug) thus revealing my identity? I assume we can take that as a no, there seems to be no indication of such vulnerability - The front ends you mentioned, I already tried all of them. As you can see above, I state that all of them gave me problems. Seahorse for example gives me a much different window than what I see when I go to online tutorials and such... -.- Thanks again, I see that it might not be so complicated to do it in the command line as I was initially afraid, I still prefer to use a GUI, but I will have to find one that actually works :S
Re: [Trisquel-users] Need help with GPG/Enigmail/Torbirdy
GPG will only be doing stuff online when you tell it to, like searching a key server for a key or sending a key to a keyserver. There isn't much more left to do in GPG though, so, I expect you'll know if you're doing something that requires a network connection. :)
Re: [Trisquel-users] Need help with GPG/Enigmail/Torbirdy
My problem is that I am trying to use it through Tor :) And Torbirdy and Enigmail apparently don't work very well together, also, there is the problem that since I am not using Tails, I am afraid that by accident I might leak the keys of my contacts, thus revealing my real IP behind the tor mail service. If it was a matter of using Enigmail, I would be doing so by now :)
Re: [Trisquel-users] Need help with GPG/Enigmail/Torbirdy
Thanks for the comments. I am reading the handbook on the enigmail website and it really looks like a easy thing to do IF I was to use a personal email, instead of a Tor based one (or one that I wanted to access through Tor to protect my identity). After reading a little bit more on Tor project homepage, it seems like mixing GPG and Torbirdy is not a good idea (it will not work most of the time, unless curl is also installed, and the version on the reps is not the recommended one). So, I guess my plan of using Icedove GUI will not be the best solution =S Is there any other GUI for GPG in GNU/Linux? I understand using the command line would also work, but I would prefer something with a GUI if possible. Anyway, how would it work through the command line? I mean: 1. How would I tell the system encrypt this text with that particular key so I can send it to that person (without ever connecting to the internet even if a connection is present); 2. How would I say Take this text here and unencrypt it for me, using this particular key (in case I had two keys for different email accounts); Thanks!
Re: [Trisquel-users] Need help with GPG/Enigmail/Torbirdy
After doing some more reading it seems that Seahorse will be the tool for the job. At least from what I have seen so far :) One thing that bothers me is the fact that to create a new PGP key, it will always ask for the email address... Since I don't want to connect to the internet, and do everything locally, why is it trying to connect the key to the email?? Anyway, I will probably use this, since it even has a gedit plugin (which means it will save me some time). Does anyone knows which ports are used to connect to the internet (like to keyservers and such)? I would like to make sure Seahorse cannot connect to the internet... THANKS =)
Re: [Trisquel-users] Need help with GPG/Enigmail/Torbirdy
Guess I'm back at square one -.- So, after lots of testing... seahorse: is useless, for some reason the window that I get is totally different from the ones that I saw at the tutorials online, so most actions are not there. For some reason I can barely do anything at all with this one. gpa: installed it and honestly I pretty much like it, but I always get an error general assuan error that prevents me from doing basically anything with it. pyrite: a little software that I found in this site https://github.com/ryran/pyrite looks good, and apparently does what I want but given the fact that is not a part of the repositories, I would rather not use it, even because it (from times to times) gives unexpected errors and bugs. Which is normal it was a one man project... Still, I don't think I feel very confortable with this one. kgpg: basically too many broken dependencies for some reason. Gave it up. I am thinking about using command line and maybe create a few scripts for nautilus. But I have some questions, hope someone will be able to clarify it for me: 1. Since I want to use GPG to encrypt text emails that I will be sending from an anonymous email, I feel uncertain about using the real email on key generating process. I think that if I by mistake upload the key to a server, it will reveal that my IP was the person behind the email all the time. 2. Could problem 1 be solved by not putting the email on key generating process? Would that still allow me to sign the messages, as in be able to prove that it was I who sent the message? 3. If I have imported 3 different keys from different persons/emails, how to I tell the system (in command line) that it must use key1 for email1 and keyX for emailX? Also, I will need to save and store the emails and keys of people who I want to connect to... That means that if an attacker can look at what keys are in my computer, it will be possible to find out who I am by seeing who I have been communicating with... right?? Sorry to make such a long post with so many questions, but PGP was always a part of computers that puzzled me a little. I a trying to overcome my initial fears and use it for better security :) THANKS
Re: [Trisquel-users] Need help with GPG/Enigmail/Torbirdy
I really don't understand what your problem is. But what I did was: - install thunderbird, thunderbird-locale-es enigmail - OpenPGP - Configuration Wizard And followed the steps. (Perhaps the names of the menus are not the same in English.)
Re: [Trisquel-users] Need help with GPG/Enigmail/Torbirdy
Why not use GPG on the command line to encrypt decrypt message text? Should be easy to copy paste stuff between terminal web browser.
Re: [Trisquel-users] Need help with GPG/Enigmail/Torbirdy
For PGP, try this: https://www.enigmail.net/documentation/quickstart.php That's how I learned to do it.
