Trades West Web Services 
Making the Web Work,
for Working People.

Built and hosted on Linux with Gnu tools.  Graphics by the GIMP.

What is a GnuPG public key?

Why digitally sign e-mail?

What other methods can protect against e-mail abuse?

 

What is a GnuPG public key?

GnuPG, the Gnu Privacy Guard, is a free/libre application for secure communication and data storage. It is available for Windows, Mac OS X, Linux, several BSD variants and other *nixes from www.gnupg.org. It is used to digitally sign and if desired to encrypt messages and files. Signing and encryption are done using a secret key. Verification of signatures and decryption are done using the corresponding public key.

GnuPG is OpenPGP-compliant. www.openpgp.org.

To verify the authenticity of a digitally signed e-mail you will need GnuPG or OpenPGP installed on your computer. With that in place follow these steps;

With the public key added to your keyring you can now click the digital signature icon on the e-mail to verify the identity of the sender.

  

 

Why digitally sign e-mail?

The proliferation of spam, viruses and other nuisances commonly relies on what is termed "social engineering". This boils down to tricking the user into activating malicious code. Common methods include making an e-mail appear to be from a trusted sender and/or disguising the true nature of attachments.

Digitally signing e-mail protects against these threats on two levels;

  1. If a sender digitally signs e-mails, recipients are alerted that something may be amiss if an e-mail is received apparently from that sender, but lacking the signature.
  2. Verification of signed e-mails using the sender's public key proves the authenticity of the sender.

Using GnuPG or OpenPGP allows you to verify signed e-mails you receive and protects those you communicate with by allowing them to verify your messages.

  

 

What other methods can protect against e-mail abuse?

There are many ways you can protect yourself and others from abuse of e-mail communications. Some of these are;