This Blog Is Not For Reading

A blog, just like any blog, only more so

  • Subscribe

  • Categories

  • RSS Bob Jonkman’s Microblog

    • bobjonkman repeated a notice by fsf 24 May 2020
      RT @fsf Remote education has provided an unfortunate opportunity for privacy-invading proprietary software to invade students' lives. Learn how many people are fighting back: https://u.fsf.org/32h
    • Favorite 24 May 2020
      bobjonkman favorited something by fsf: Remote education has provided an unfortunate opportunity for privacy-invading proprietary software to invade students' lives. Learn how many people are fighting back: https://u.fsf.org/32h
    • Favorite 20 May 2020
      bobjonkman favorited something by matrix: RT @numbleroot@twitter.comThank you Facebook, for buying giphy. This aquisition alone has spawned three new @matrixdotorg@twitter.com homeservers for decentralized, end-to-end-encrypted communication in my friendsphere over the past couple days alone.🐦🔗: https://twitter.com/numbleroot/status/1263064307220254720
    • Favorite 20 May 2020
      bobjonkman favorited something by invaderxan: The highest mountain on Earth is known as Sagarmatha (सगरमाथा) in Nepali, meaning “goddess of the sky” and Qomolangma (ཇོ་མོ་གླང་མ) in Tibetan, meaning “holy mother”. The name “Everest” wasn’t given until 1865. Even the guy it was named after objected, and wanted them to keep a local name for it. […]
    • New note by bobjonkman 2 April 2020
      oh, hang on. That was a ReTweet from @wilkieii@twitter.com But you're still invited to make that presentation!
    • New note by bobjonkman 2 April 2020
      ...and you'll make a presentation at an upcoming @KWLUG meeting, right? On the very platform you're presenting about!
    • bobjonkman repeated a notice by hubert 2 April 2020
      RT @hubert ♲ @matrix: RT @wilkieii@twitter.com Successfully using entirely self-hosted+federated Riot/Matrix/Jitsi/Etherpad/PeerTube to host lectures, teleconference with students, answer questions in chat, and collaboratively edit their code. Write-up is incoming. Once I take a nap. 🐦🔗: twitter.com/wilkieii/status/12…
    • Favorite 2 April 2020
      bobjonkman favorited something by hubert: ♲ @matrix@mastodon.matrix.org: RT @wilkieii@twitter.comSuccessfully using entirely self-hosted+federated Riot/Matrix/Jitsi/Etherpad/PeerTube to host lectures, teleconference with students, answer questions in chat, and collaboratively edit their code. Write-up is incoming. Once I take a nap.🐦🔗: twitter.com/wilkieii/status/12…
    • New note by bobjonkman 22 March 2020
      He'll never find it again. But you get a tree!
    • New note by bobjonkman 22 March 2020
      Ja, ich bin hier noch. Aber meine timeline ist oft zwei oder drei monaten langzam...

Preparing for the Keysigning Cryptoparty, 2 Dec 2013

Posted by Bob Jonkman on 24th November 2013

Key Pair

Cryptoparty like it’s 31 December 1983!

At the next KWLUG meeting on Monday, 2 December 2013 I’ll be demonstrating how to do e-mail encryption with Thunderbird and Enigmail. If you’ve never used e-mail encryption before then bring a laptop, and we’ll create keys and learn how to use them. We’ll save the lesson with pointy sticks for another day.

For those people who already have GnuPG/PGP keys I’m also hosting a Formal Keysigning. Participants will introduce themselves, read their GnuPG key fingerprint, then anyone else is invited to vouch for that person:

Bob: “I’m Bob Jonkman, and my GnuPG fingerprint is 04F7 742B 8F54 C40A E115 26C2 B912 89B0 D2CC E5EA”

Andrew: “I’ve known Bob since the early days, and that’s really him”

This is a great way to expand your Web Of Trust to include people whose keys you might not otherwise sign (because you don’t know them very well, or they only have ID issued by an authority you don’t like). With all these introductions and vouchings the chance of someone misrepresenting their identity is vanishingly small, so you can trust that the key fingerprint they read is really associated with that person.

To make this process go smoothly I’d like to have a printout of all the participants’ keyIDs, UserIDs, and key fingerprints, which I’ll distribute at the keysigning. That way you can just check off each name/keyID/fingerprint as people read them, and then sign their keys later at your leisure. But to get that printout I’ll need the public key of anyone who would like to participate in the keysigning.

If you’re using Thunderbird and Enigmail then open the Key Management window, right-click on your key and select “Send Public Keys by E-mail”, and send it to me ( bjonkman@sobac.com )

If you’re a command-line weenie then use

gpg --export 0xYOURKEYID > 0xYOURKEYID-public-key-for-YOURNAME.pgp

and send that file 0xYOURKEYID-public-key-for-YOURNAME.pgp to me (substitute your actual keyID and actual name as needed).

Of course, I’d prefer signed, encrypted e-mail, but public keys are public (so encryption isn’t necessary), and public keys should already be self-signed anyway.

Unfortunately, if you’re creating your keys for the first time at the meeting you won’t be able to send me anything now. You can still participate in the vouching process, and we’ll have an informal keysigning after the formal keysigning, where all you need to do is read your fingerprint straight from your computer and those people who already know you can sign your key.

I’m still working on the procedures for the formal keysigning; you can see the work in progress (and contribute!) on the Formal Keysigning page on the Wiki.

Thanx, and hope to see you on Monday, 2 December 2013!

–Bob, who is the Keymaster. Who will be the Gatekeeper?

The Cryptoparty keypair logo from the Cryptoparty Artwork repository on GitHub is available in the CC0Public Domain.

Tags: , , , , , , , , , , , , , , , , , ,
Posted in Crypto, email, KWLUG, PGP/GPG, privacy | Comments Off on Preparing for the Keysigning Cryptoparty, 2 Dec 2013

 
Better Tag Cloud