Security Concerns

James A DePrisco james@brocs.org
Mon Nov 4 02:39:01 2002


Hello, I am a newbie and I have a few questions:

First, I am using GnuPG with Mandrake Linux 8.2.  90% of my usage is via 
Kmail.  This is working fine and I am able to send encrypted and signed 
emails and I have received encryted emails no problem.

I set up my gpg using the online manual, so I used all the defaults.  I have 
read a little about how GnuPG works and I understand that breaking the code 
on an encrypted file is pretty near impossible.  My question is about the 
signed files and emails.  If I send an email or file that is signed, but not 
encrypted, isn't this a little dangerous?  My concern is that don't you give 
out some information on your private key if you sign it?  I am not big on the 
math, so any pointers you have on how to do this safely would be appreciated.

Perhaps the fact that I have the primary key and the sub key assure my 
protection.

Also, I have never used an unattached signature file.  What is this and do I 
need one?

Thanks for the help.

James DePrisco