4 ms·

I donated 100 euro. APT is secured using GnuPG https://wiki.debian.org/SecureApt https://wiki.debian.org/SecureApt and that is enough contribution to my peace

by sanxiyn 12y ago

I donated 100 euro. APT is secured using GnuPG https://wiki.debian.org/SecureApt https://wiki.debian.org/SecureApt and that is enough contribution to my peace of mind for me to donate.

Nanzikambe 12y ago
Likewise. Gpg is ubiquitous in the Linux/*nix ecosystem - we can't afford to let projects like this go unmaintained
Fuxy 12y ago
I donated £50. A lot of things I use use GnuPG behind the scenes unfortunately that the most I can give at the moment.
Johnny_Brahms 12y ago
I donated £50. I use GPG to encrypt every unencrypted incoming email in my inbox (I'm self hosted) so that nothing is stored unencrypted. I had one server breach a year ago (due to me not updating...), but thanks to gpg I knew my mails were secure from prying eyes. I sore the mails unencrypted locally though. Being able to search them is too useful to give up.
- Nanzikambe 12y ago
  Did you use gpg instead of disk/partition encryption for that scenario?
  - maaku 12y ago
    Disk encryption only protects against physical theft of the drive, which is not the primary concern with most servers. If a server is up 24/7 and I hack into it, it doesn't matter that the drive is encrypted since I have access to the decrypted files anyway. Encrypting incoming emails works because the mail server doesn't really care what the content of the email is, so decryption keys don't have to be stored on the server.
    - gog 12y ago
      Can you give some more information about your setup? In which phase to you encrypt the email, what tools do you use, etc.
      - chrismsnz 12y ago
        Just use a procmail rule to call gpg on every incoming email before it's stored using your public key, then your client (configured with your private key) can decrypt every email as normal.
      - jakeogh 12y ago
        Here's my over engineered setup: https://github.com/jakeogh/gpgmda https://github.com/jakeogh/gpgmda It attempts to also store the metadata encrypted. Admittedly got a bit carried away trying to hide mtimes.
Sami_Lehtinen 12y ago
Donated 100€. GnuPG is essential encryption tool. Used daily for multiple different use cases at work and home.

by sanxiyn 12y ago

I donated 100 euro. APT is secured using GnuPG https://wiki.debian.org/SecureApt https://wiki.debian.org/SecureApt and that is enough contribution to my peace of mind for me to donate.

Nanzikambe 12y ago

Likewise. Gpg is ubiquitous in the Linux/*nix ecosystem - we can't afford to let projects like this go unmaintained

Fuxy 12y ago

I donated £50. A lot of things I use use GnuPG behind the scenes unfortunately that the most I can give at the moment.

Johnny_Brahms 12y ago

I donated £50. I use GPG to encrypt every unencrypted incoming email in my inbox (I'm self hosted) so that nothing is stored unencrypted. I had one server breach a year ago (due to me not updating...), but thanks to gpg I knew my mails were secure from prying eyes. I sore the mails unencrypted locally though. Being able to search them is too useful to give up.

Nanzikambe 12y ago
Did you use gpg instead of disk/partition encryption for that scenario?
- maaku 12y ago
  Disk encryption only protects against physical theft of the drive, which is not the primary concern with most servers. If a server is up 24/7 and I hack into it, it doesn't matter that the drive is encrypted since I have access to the decrypted files anyway. Encrypting incoming emails works because the mail server doesn't really care what the content of the email is, so decryption keys don't have to be stored on the server.
  - gog 12y ago
    Can you give some more information about your setup? In which phase to you encrypt the email, what tools do you use, etc.
    - chrismsnz 12y ago
      Just use a procmail rule to call gpg on every incoming email before it's stored using your public key, then your client (configured with your private key) can decrypt every email as normal.
    - jakeogh 12y ago
      Here's my over engineered setup: https://github.com/jakeogh/gpgmda https://github.com/jakeogh/gpgmda It attempts to also store the metadata encrypted. Admittedly got a bit carried away trying to hide mtimes.

Sami_Lehtinen 12y ago

Donated 100€. GnuPG is essential encryption tool. Used daily for multiple different use cases at work and home.