3 ms·
I am a public figure. If you want to contact me via PGP you can find my key easily. When you contact me, you encrypt your message and include your public PGP ke
by grugq 11y ago
I am a public figure. If you want to contact me via PGP you can find my key easily. When you contact me, you encrypt your message and include your public PGP key. This eliminates the threat of a man in the middle attack. Only one side needs to be authenticated (mine) and it is done publicly.
If you and a friend want to discuss something secretly, then you can create new email accounts plus new PGP keys and exchange them out of band, e.g. via USB stick. This will allow you to remain somewhat anonymous in that neither email account nor key are linked to you. As long as you don't taint that compartment, it will be secure against compromising you.
That level of secrecy might not be necessary for your given threat model. It is up to you and your interlocutor how you want to secure your comms channel. This guide presents best practices that can be combined into a complete COMSEC plan.
This guide is not a strict HOWTO that presents a simple step by step solution for everyone. No such HOWTO can exist. Instead it presents a number of solutions to problems (and attempts to explain what problems they solve, why and how).