PGP Question

[mkultra]

Why don't more people on here use PGP? Wouldn't it make sense to put our public keys in our profiles so that vendor comms across different e-mail platforms, especially e-mail menu requests, order information, etc. Was more secure?

Am I missing something?

Happy Saturday.

 

[Packrat]

As an encryption platform, I agree, and to employ multiple layers of security it likely makes sense. But that's me, and I'm a little geeky. There is a bit of a learning curve with PGP as well as other independent encryption patforms. On the other hand, it's pretty easy to use the encryption built into email platforms like proton, without the need to manage and support changing keys. Just MHO.

 

[Gulp2788]

pgp is very secure and does have a bit of learning curve attributed to it. There are more convenient methods these days though but as an old head I do like using PGP, feels like both parties take their security seriously that way. The offline aspect to PGP is what I like most, but if someone were to drop into your system through a RAT or something you might have issues with your pgp messages unless I'm reading that incorrectly. Private keys are only as good as the method of storing them.

 

[fembot]

This assumption is exactly correct.

My pgp keys are symmetrically encrypted at startup, and unlocked with my keyring.

Physical, USB keys exist for this purpose.

Personally - I'd lose a dongle.

All communication, of every kind, between any people, should be signed and encrypted with elliptical curve cryptography, and keys should be symmetrically encrypted at rest, using XKCD-compliant passwords.