up vote 4 down vote favorite
4
share [g+] share [fb]

I'm looking for a web front-end or some easy way to get a user who's never been exposed to cryptography / digital signatures etc. to simply copy/paste my GPG signed (not encrypted) email and specify whether that email/text has been correctly signed - meaning contents are untampered and from me - the sender.

Ideally, it would be able to pull my public key off a key server in order to verify or allow a user to upload the key along with the signed text for verification.

Basically - how would I be able to convince an ordinary user that the email sent is indeed from me.

UPDATE: I found something similar here, but apparently it only works for users who've signed up for HushMail.

link|improve this question
86% accept rate
thats the main reason why crypto is not (yet) deployed among non-techies :) – akira Dec 12 '10 at 10:02
@akira, well not when using PGP maybe. S/MIME signed email is handled fine by sane email clients. – Arjan Dec 13 '10 at 13:26
feedback

2 Answers

up vote 2 down vote

Try the enigmail Thunderbird extension.

It "just works" and shows you a little icon and offers you to verify signatures, import public keys, sign them, etc... No cut & paste involved.

link|improve this answer
I personally already use Enigmail as well as GPGShell. Both work exceedingly well. However, getting an ordinary user to switch from what is undoubtedly the majority interface (webmail) to a client isn't practical. I'm looking for some way to let a total n00b click one or two links and know whether or not the message was tampered with / originated from me. – Sparx Dec 12 '10 at 16:18
feedback
up vote 1 down vote

I have not tried FireGPG yet, but it should do what you had in mind. Unfortunately, it's discontinued, but maybe the latest version fits your needs.

link|improve this answer
i have tried it, but it's only meant for the Firefox browser. – Sparx Dec 12 '10 at 17:26
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.