Live data from Hacker News

Encryption with Gnu Privacy Guard (GPG)

digital-era.net

1–10 of 31 posts

Re: Encryption with Gnu Privacy Guard (GPG)

#6
post #4

There seems to be also a windows implementation: http://www.gpg4win.org/ (Wondering why the site doesn't use ssl, though) On a related note, I have a hard time understanding why a web site talking about digital security also doesn't have a certificate.

Lots of GPG themed sites do not. Notice that key servers provide web access over plain HTTP as well. My best guess is that they do not want to buy into the CA infrastructure and provide security using GPG itself. Also check out MonkeySphere.

Re: Encryption with Gnu Privacy Guard (GPG)

#7
post #5
post #2

This does not go into the Web of Trust and having your key signed, maybe the most complicated part of PGP, and perhaps also its most important feature.

Agreed - it also fails teach how one should create a revocation certificate.

No it doesn't. See the section titled "Generating revocation key"

Re: Encryption with Gnu Privacy Guard (GPG)

#8
post #4

There seems to be also a windows implementation: http://www.gpg4win.org/ (Wondering why the site doesn't use ssl, though) On a related note, I have a hard time understanding why a web site talking about digital security also doesn't have a certificate.

Lots of GPG themed sites do not. Notice that key servers provide web access over plain HTTP as well. My best guess is that they do not want to buy into the CA infrastructure and provide security using GPG itself. Also check out MonkeySphere.

> My best guess is that they do not want to buy into the CA infrastructure and provide security using GPG itself.

This may be true (I really have no idea) but isn't it like travelling on a highway at night with your normal lights turned off because you have a better system based on infrared? After reading about the story of that guy who hacked into a computer by MITMing the notepad++ site, I became even more convinced that all pages must have certificates. Nowadays it's also possible to get a basic ssl cert for free, I can't figure out what the catch is really.

Post reply on HN