Digitally Sign & Encrypt GMail Emails

Discussion in 'privacy technology' started by CyberWorm, Apr 27, 2010.

Thread Status:
Not open for further replies.
  1. CyberWorm

    CyberWorm Registered Member

    Joined:
    Apr 21, 2010
    Posts:
    74
    There is an excellent guide on how to digitally sign and encrypt your gmail emails here

    This a step by step walk through to give you the ability to fully encrypt your email using your gmail account and strong PGP based encryption. Some users who have google chrome installed have reported installation problems. You may want to uninstall google chrome if you have problems any where during installation.
     
  2. tobacco

    tobacco Frequent Poster

    Joined:
    Nov 7, 2005
    Posts:
    1,497
    Location:
    British Columbia
    It's funny you posted this as i'm immersed into this area right now in a VM testing. Another you can check out is Comodo Secure Email with free certificates issued from Comodo - http://www.comodo.com/home/internet-security/secure-email.php

    Have Gmail & Hotmail setup in Thunderbird 3 using signing and encryption with comodo certificates.
     
  3. CyberWorm

    CyberWorm Registered Member

    Joined:
    Apr 21, 2010
    Posts:
    74
    Yes, but it doesn't work directly with the GMail interface like FirePGP does. I don't think GMail will ever introduce mail encryption because then they won't be able to scan your emails :D
     
  4. tobacco

    tobacco Frequent Poster

    Joined:
    Nov 7, 2005
    Posts:
    1,497
    Location:
    British Columbia
    True - that would benefit those who don't use an email client.

    Yeah ~ Snipped as per TOS ~ :thumbd:
     
    Last edited by a moderator: Apr 28, 2010
  5. tobacco

    tobacco Frequent Poster

    Joined:
    Nov 7, 2005
    Posts:
    1,497
    Location:
    British Columbia
    Just trying to test this in a VM to recommend to a few friends but it is not working. Is it my end or gmail issues??. I installed Firegpg extension but not sure if its compatible with firefox 3.6.3.??
     
  6. chronomatic

    chronomatic Registered Member

    Joined:
    Apr 9, 2009
    Posts:
    1,343
    I use Gmail e-mail encryption all the time with the Enigmail PGP plugin for Thunderbird. You don't have to use FireGPG as Gmail can be configured within e-mail clients.
     
  7. tobacco

    tobacco Frequent Poster

    Joined:
    Nov 7, 2005
    Posts:
    1,497
    Location:
    British Columbia
    Correct but some people just don't want to bother with an email client.

    BTY, i have a question.

    Does anyone know a good discussion forum strictly about email encryptiono_O
     
  8. tobacco

    tobacco Frequent Poster

    Joined:
    Nov 7, 2005
    Posts:
    1,497
    Location:
    British Columbia
    Well, finally got this sorted. The gpg.exe isn't installed in the main program files folder but a subfolder called "pub".

    Secondly, the firegpg options shown below in the compose window are only there in the firefox 3.5 releases. With the 3.6 versions, you have to highlight the text you wish to encrypt and then access the firegpg options through tools menu in firefox to sign and encrypt.

    Could someone enlighten me on what "inline" means??
     
  9. tobacco

    tobacco Frequent Poster

    Joined:
    Nov 7, 2005
    Posts:
    1,497
    Location:
    British Columbia
    More coffee please - forgot the pic o_O
     

    Attached Files:

  10. chronomatic

    chronomatic Registered Member

    Joined:
    Apr 9, 2009
    Posts:
    1,343
    Yes, the GnuPG forums are where you want to go. A lot of real experts (developers, cryptologists, etc.) post there and also answer newb questions about PGP/GPG, how it works, etc. Granted the forums are mostly geared toward the use of the GnuPG software, but other non-GnuPG topics ocassionally arise.

    It is mostly deprecated and not recommended. What it means is that you put the signature directly into the message itself like so:

    Code:
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1
    
    Hello world.
    
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.4.5 (GNU/Linux)
    Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org/
    -----END PGP SIGNATURE-----
    This is "inline." Again, the preferred way is to go with an attachment, which many e-mail clients do automatically.
     
  11. tobacco

    tobacco Frequent Poster

    Joined:
    Nov 7, 2005
    Posts:
    1,497
    Location:
    British Columbia
    Thanks chronomatic

    My experience is with Comodo Secure Email and as it turns out, is limited as it only recognizes and works with certificates and not keys :thumbd:

    Could you expand on why inline is not recommended?? I ask because when i tried to send an encrypted email through the gmail interface using firegpg, it kept throwing me an error and didn't work (encrypt and send the email) until i used "inline".
     
Loading...
Thread Status:
Not open for further replies.