http://www.wtvi.com/teks/pgp Why you want to use PGP: Q: Why should I use encryption software when I send email? A: Sending email is like sending a postcard via snail mail-- it is very easy for someone who intercepts it to read it. Most employers make employees sign acceptable use policies that forfeit all their privacy rights for email sent over corporate networks, whether they use corporate email accounts or not. US Courts have repeatedly upheld the right of employers to do this. In short, the entire concept of "a right to privacy" is in jeopardy in this brave new world of internet technology. Most people probably do not have something to "hide" in email messages they send, but never the less, why should an employer have carte blanche permission to read ANY email an employee sends to ANYONE? Employers answer: because we own the hardware and network infrastructure, we should have that right. Employees might answer: even if you own the highway, you don't have a right to all the ideas and messages I send on that highway. The tool of choice for employees giving this answer is PGP freeware. PGP encryption software permits people to send encrypted, secure messages over the internet using a variety of different platforms (Windows, Macintosh, UNIX, etc). It is also free, and fairly easy to use. Installation and Use Instructions (the short version): PGP is distributed only to U.S. citizens in the United States, or to Canadian citizens in Canada. If you do not fit into one of these categories, read no further. This software is NOT for you. Step 1: Download and install PGP software from: www.pgpi.org For help downloading and installing software, read the workshop notes for "Intermediate Internet Skills: Download, Expand, Install and Zip" at http://www.wtvi.com/teks/ii/. Step 2: Create a "key set" PGP works fastest when users create "keys" within the PGP Tools program. See Chapter 2, page 28 of the PGP User's guide for step by step instructions. The shortened instruction set is: Click on the icon of a lock at the top of the screen or on the right side of your taskbar and open PGP KEYS. (You can alternatively find the PGP Tools icon on your hard drive and open PGP KEYS from inside it.) From the KEYS menu, choose NEW. Step through the instructions to create your PUBLIC and PRIVATE keys. You will want to save the backup copies of your public and private keys on a floppy disk in a secure location. Conceptually, understand that: Your PUBLIC key must be shared with other people with whom you wish to communicate securely. Your PRIVATE key will be installed on your own computer, and requires that you type a short passphrase (which you define) each time you open or send an encrypted message. Encrypted messages using public/private keys can ONLY be opened by the person who both possesses the correct PRIVATE key on their computer, and enters the correct passphrase. (See Figure 2-1 at right) Step 3: Make your public key available to others by uploading it to a "certificate server" See page 48 of the documentation file to learn how to do this. There are 3 ways to share your PUBLIC key with others. (Remember other people must have your PUBLIC key in order to send you or receive from you encrypted email.) You can either: Make your public key available through a public certificate server (this is the easiest way). Include your public key in an email message. Export your public key or copy it to a text file, and send it as an attachment or on disk. The shortened instruction set for option 1 (uploading to a certificate server) is: Click on the icon of a lock at the top of the screen or on the right side of your taskbar and open PGP KEYS. Click once on your key in the open window. From the SERVER menu, choose SEND TO and then select one of the addresses at the bottom of the popup menu. After the key finishes sending, repeat the previous step for the other address (each of these is called a "certificate server.") Now people who want to send you encrypted email via PGP can search for your PUBLIC key on either of these certificate servers. You don't have to send them anything special. Step 4: Add the public keys of people you want to securely communicate with to your PGP Keys list. See page 52 of the documentation file to learn how to do this. The shortened instruction set is: Click on the icon of a lock at the top of the screen or on the right side of your taskbar and open PGP KEYS. From the SERVER menu choose SEARCH. Enter the email address of the person whose public key you want to find. (Remember they may not have created a public/private key set yet. If they haven't, refer them to these directions online!) Once their public key is located, drag and drop it from the search window into your PGP KEYS window. Click on their key once in your PGP KEYS window. From the KEYS menu, choose SIGN. Enter your passphrase to verify their key is authentic. (This is a judgment call on your part.) Step 5: Send encrypted email See Chapter 3 (page 60) of the documentation file to learn how to do this. The shortened instruction set is: Type a normal email within your email client (Outlook, Outlook Express, Eudora, etc). After you finish typing, click on the icon of a lock at the top of the screen or on the right side of your taskbar and choose ENCRYPT/SIGN. Enter your passphrase, and your entire email message will be converted to encrypted text. Send your email. Step 6: Open and read encrypted email See Chapter 3 (page 66) of the documentation file to learn how to do this. The shortened instruction set is: Open the email message containing encrypted text. If you don't have the PUBLIC key of the person who send you the message, add it to your PGP key list (see step 4 above). Click on the icon of a lock at the top of the screen or on the right side of your taskbar and choose DECRYPT/VERIFY. Enter your passphrase, and the entire message will be converted from encrypted text to plain (readable) text. Privacy Links Protecting your privacy online by TRUSTE Electronic Frontier Foundation Electronic Privacy Information Center The Privacy Page Privacytimes.com Pages on Identity Theft Kidz Privacy Global Internet Liberty Campaign Digital Future Coalition or Last updated 1-19-2002 This page has received visitors since 2/22/2000. This CryptRing site owned by Wesley Fryer. [ Prev 5 | Skip Prev | Prev | Next | Skip Next | Next 5 | Random | List ] Tools for the TEKS home | Article Archive | Technology Workshops Mailing List | Feedback | Tools and Techniques | Technology Idea Exchange Contact me using this webform. This work is licensed under a Creative Commons License.