27 ms·
Snowden called himself Verax[1]. Anyone who wants to send a message to Snowden* can just: $ gpg --keyserver pgp.mit.edu --recv-keys 79DEBE35 $ gpg --en
by kyboren 13y ago
Snowden called himself Verax[1]. Anyone who wants to send a message to Snowden* can just:
$ gpg --keyserver pgp.mit.edu --recv-keys 79DEBE35
$ gpg --encrypt --sign --armor --recipient 79DEBE35
and post it publicly; perhaps on Pastebin.
[1]: http://www.washingtonpost.com/world/national-security/code-name-verax-snowden-in-exchanges-with-post-reporter-made-clear-he-knew-risks/2013/06/09/c9a25b54-d14c-11e2-9f1a-1a7cdee20287_story.html http://www.washingtonpost.com/world/national-security/code-n...
*assuming you believe the key is authentic
- joeyh 13y ago79DEBE35 is a key in the possession of Wired, I'm sure they'll enjoy passing your message on the the NSA via their parent media giant. Edit: Also, it's not very hard to generate a different key with signature 79DEBE35, and put it on the key servers. gpg's displaying of such short abbreviations for keys is one the worst parts of its UI.
- drivebyacct2 13y ago>79DEBE35 is a key in the possession of Wired How do you know this?
- deleted 13y ago[deleted]
- scott_karana 13y agoIt was the signing key on Wired's broadcast.
- drivebyacct2 13y agoSo? You can download my public key and encrypt something with it... and only I'll be able to read it with my private key. It's still "my" key even though you're signing or rather encrypting a message with it.
- chj 13y agoI find all this public key and private key concept is confusing to general people. A private key is an actual key that you can use to unlock an encrypted message. A public key is actually a lock that you gave someone so that he can use to encrypt message and only you can open it.
- LoganCale 13y agoI believe some people, myself included initially, misinterpreted the "encrypted with" key as being the sender's key rather than the recipient's. We don't know who that key belongs to for sure, of course, but it could be Snowden's.
- LoganCale 13y agoThe message posted on Wired is encrypted with that key. EDIT: While what I said was technically true, in that it is encrypted with the 79DEBE35 key, that's not Wired's key, it's the recipient's key.
- marshray 13y agoOne could say it was encrypted to the 79DEBE35 key.
- drivebyacct2 13y agoThe way this thread is going, one probably ought to say that or otherwise imply/explain it :S
- kyboren 13y agoBoth valid points; I have no way to verify that's an authentic key.
- jlgreco 13y ago> Edit: Also, it's not very hard to generate a different key with signature 79DEBE35, and put it on the key servers. gpg's displaying of such short abbreviations for keys is one the worst parts of its UI. Yup: http://www.asheesh.org/note/debian/short-key-ids-are-bad-news.html http://www.asheesh.org/note/debian/short-key-ids-are-bad-new...
- Sami_Lehtinen 13y agoYou can naturally use longer fingerprint to confirm keys. pub 1024D/274EF626 2006-07-25 [expires: 2046-07-15] Key fingerprint = 166C 5F6B 8808 A9BE B2B4 F265 AE02 7784 274E F626
- marshray 13y ago* That's a pretty big assumption now isn't it.