Fwd: Re: Fwd: Re: Question for app developers, like Enigmail etc. - Identicons

Stefan Claas stefan.claas at posteo.de
Tue Jun 13 09:43:51 CEST 2017


Am 12.06.2017 um 23:50 schrieb Duane Whitty:

Thanks for your input much appreciated!

> I would also add one word about USB sticks:  It is very difficult to
> know if they've been compromised and there are no tell-tale signs when
> an attack is taking place.  I never put a USB in my computer that has
> been used on a computer I don't own.
> Best Regards,
> Duane
>

Thanks for pointing this out!

I come to the conclusion after reading all the replies from this thread
that i will return to pure GnuPG usage, instead of using an email / Usenet
client with add-ons. I already found a script for PGP/MIME so that i can
decrypt/verify a message send to me when using GnuPG in command-line
mode.

Another thing i will do in the future, which i haven't read in popular 
tutorials,
is that once checking the hash/sig of the provided package i will also hash
the binaries after unpacking and print them out on a piece of paper, so 
that i
can frequently check the values.

Regards
Stefan









More information about the Gnupg-users mailing list