• Visitors can check out the Forum FAQ by clicking this link. You have to register before you can post: click the REGISTER link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. View our Forum Privacy Policy.
  • Want to receive the latest contracting news and advice straight to your inbox? Sign up to the ContractorUK newsletter here. Every sign up will also be entered into a draw to WIN £100 Amazon vouchers!

PGP Email

Collapse
X
  •  
  • Filter
  • Time
  • Show
Clear All
new posts

    PGP Email

    I've got a potential client that wants to be able e-mail me PGP encrypted messages and attachments and me to be able to respond likewise.

    I've had a google around and I'm totally confused. I'm thinking that I'd need some sort of plug-in to either exchange or outlook, but there doesn't appear to be much around. Have I got the wrong end of the stick again?

    I'm not sure I want this punter anyway. At least not while I'm still in the UK. I'm sure it's not the very naughty end of dodgy money, but it's a bit more than sound tax planning. or
    How did this happen? Who's to blame? Well certainly there are those more responsible than others, and they will be held accountable, but again truth be told, if you're looking for the guilty, you need only look into a mirror.

    Follow me on Twitter - LinkedIn Profile - The HAB blog - New Blog: Mad Cameron
    Xeno points: +5 - Asperger rating: 36 - Paranoid Schizophrenic rating: 44%

    "We hang the petty thieves and appoint the great ones to high office" - Aesop

    #2
    Originally posted by HairyArsedBloke View Post

    I've got a potential client that wants to be able e-mail me PGP encrypted messages and attachments and me to be able to respond likewise.

    I've had a google around and I'm totally confused. I'm thinking that I'd need some sort of plug-in to either exchange or outlook, but there doesn't appear to be much around. Have I got the wrong end of the stick again?

    I'm not sure I want this punter anyway. At least not while I'm still in the UK. I'm sure it's not the very naughty end of dodgy money, but it's a bit more than sound tax planning. or
    Can't you copy and paste the block of encrypted text into a separate text file, and use a PGP utility to decrypt it outside your mail program?

    There must be slicker solutions, such as (probably) a Firefox addon to decrypt a block of highlighted text if you use a web email account like gmail; but the text file method would at least work, once you set up everything.
    Work in the public sector? Read the IR35 FAQ here

    Comment


      #3
      I'm a bit rusty on this and things have changed in the past few years by the looks of it (PGP used to have a freeware version), but at worse you should be able to communicate using OpenPGP file attachments that you manually attach and open, even if you can't seemlessly integrate OpenPGP with outlook or other email software. Or if you buy PGP it may well do it all for you, as I think it once did. But if he's using a paid-for version of PGP and you the opensource version, you'll have to make sure the encyption schemes you use are available in both. There should be some overlap. I suspect OpenPGP would read anything PGP produces, but PGP map be limited strength, e.g. for America.

      One way of communication would involve each of you creating a private and public key pair, then you hand each other your public keys (can be done non-securely). They use your public key to encrypt messages, and you (and only you can) use your private key to decrypt them.

      Comment


        #4
        Why not use Outlook's built in ability so handle signed & encrypted mail?
        While you're waiting, read the free novel we sent you. It's a Spanish story about a guy named 'Manual.'

        Comment


          #5
          They are not using anything at the moment. It has been talk about Blackberry that has put the idea into their heads that they should look into such things. There is no link (as far as I know) with the parts of the world that Blackberry are having trouble with. However, there could be issues with the level of encryption.

          The more I look into this the more I don't want to get involved with it.
          How did this happen? Who's to blame? Well certainly there are those more responsible than others, and they will be held accountable, but again truth be told, if you're looking for the guilty, you need only look into a mirror.

          Follow me on Twitter - LinkedIn Profile - The HAB blog - New Blog: Mad Cameron
          Xeno points: +5 - Asperger rating: 36 - Paranoid Schizophrenic rating: 44%

          "We hang the petty thieves and appoint the great ones to high office" - Aesop

          Comment


            #6
            Originally posted by doodab View Post
            Why not use Outlook's built in ability so handle signed & encrypted mail?
            Dunno. I have no input on this.

            I was simply asked if I was set up to receive and send PGP encrypted messages and files and to keep those message in encrypted form when not in use etc.
            How did this happen? Who's to blame? Well certainly there are those more responsible than others, and they will be held accountable, but again truth be told, if you're looking for the guilty, you need only look into a mirror.

            Follow me on Twitter - LinkedIn Profile - The HAB blog - New Blog: Mad Cameron
            Xeno points: +5 - Asperger rating: 36 - Paranoid Schizophrenic rating: 44%

            "We hang the petty thieves and appoint the great ones to high office" - Aesop

            Comment


              #7
              Originally posted by HairyArsedBloke View Post
              They are not using anything at the moment. It has been talk about Blackberry that has put the idea into their heads that they should look into such things. There is no link (as far as I know) with the parts of the world that Blackberry are having trouble with. However, there could be issues with the level of encryption.

              The more I look into this the more I don't want to get involved with it.
              It's dead easy essentially. Just files.

              Comment


                #8
                At worse you'll have to buy PGP.

                Comment


                  #9
                  There is still a freeware version of PGP. Why not download it and have a play? The first thing it'll probably do (after perhaps asking you which encryption scheme to use, for your encryption, for which I guess the default will do) is a create a key pair. It'll then maybe ask you to publish your public key that was generated at the start, which is what the guys you want to communicate with can grab (perhaps from a keystore you uploaded to, also probably a hand-hold process, or emailed). To encrypt messages for their eyes only, you just grab their public key (either ask them for it or grab it off a keystore) and use that to encrypt messages. It's all automatic once you have each others public keys.

                  The International PGP Home Page
                  Last edited by TimberWolf; 19 August 2010, 19:50.

                  Comment


                    #10
                    In my experience if you force the issue and start chasing them to start using PGP they back away sharpish!

                    Various companies have tried to do this in the past (they had a very high opinion of their data - no one else did!).

                    In the end no one could be bothered to continue encrypting.


                    T

                    Comment

                    Working...
                    X