Security Basics mailing list archives

Re: PGP encrypted email - basic questions


From: Gouki <Gouki () GoukiHQ org>
Date: Sat, 30 Dec 2006 00:28:44 -0100

Hi Dave,

Signed and encrypted messages are two different things, as I'm sure you
know. Everyone can, and should, sign every outgoing message, regardless
of the addressee having, or not, the public key.

When you see 'BEGIN PGP SIGNED..' it only means that the eMail was
digitally signed, not encrypted.

As you can see on the bottom of this message, it was signed, but not
encrypted.

If you don't mind me asking, what OS and eMail software are you using?

Hope I made myself clear.

Regards,

Tiago 

On Fri, 2006-12-29 at 09:00 -0600, Dave Moore wrote:
Hello all-

I'm trying to get started with PGP and there are some concepts I am
having trouble with.

I understand that a recipient of a PGP signed/encrypted message will
have to get my public key to decrypt said message. What I don't
understand is how this is carried out in a seemingly automatic fashion
for many of the email messages I receive, e.g. postings from mailing
lists, in which I see the 'BEGIN PGP SIGNED.. ' and the signature at
the end. I didn't decrypt these messages, and I have no idea how they
got decrypted.

When I encrypt a message and send it to myself, the message I see is
decidedly not decrypted. I did notice this header..

OpenPGP: id=5847D5CF;
url=http://random.sks.keyserver.penguin.de:11371/pks/lookup?op=get&search=0x5847D5CF

in the outgoing encrypted test message I sent, which leads me to
suspect that it might have something to do with this process, but
still, my message is not decrypted.

How does this work?
Dave

Attachment: signature.asc
Description: This is a digitally signed message part


Current thread: