# How do I enable PGP/Public Keys

**URL:** https://boards.straightdope.com/t/how-do-i-enable-pgp-public-keys/248993
**Category:** Factual Questions
**Created:** [June 6, 2004, 7:32pm UTC](https://boards.straightdope.com/t/how-do-i-enable-pgp-public-keys/248993 "2004-06-06T19:32:59Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![633squadron](https://avatars.discourse-cdn.com/v4/letter/6/ee59a6/32.png) [@633squadron](https://boards.straightdope.com/u/633squadron)
#### Post date: [June 6, 2004, 7:32pm UTC](https://boards.straightdope.com/t/how-do-i-enable-pgp-public-keys/248993/1 "2004-06-06T19:32:59Z")

</div>

I’ve read a ton of stuff about asymmetric encryption/public keys. I’ve seen a ton of public key servers. I see message boards/blogs/wikis offering to post my public key.

**BUT HOW THE HECK DO I ESTABLISH PGP/PUBLIC KEY ON MY COMPUTER?** :smack:

I admit to being a real computer nerd, and I want to explore new technology in security. So I’d like to experiment with public key encryption even if it’s overkill. Where to start? 😕 All the Google references point to theoretical/reference stuff or an explanation of how it works, and _not_ how to get it working.

Thanks in advance. Even a link to a good website/document would be useful.

---

<div class="post-metadata">

### Author: ![rfgdxm](https://avatars.discourse-cdn.com/v4/letter/r/c0e974/32.png) [@rfgdxm](https://boards.straightdope.com/u/rfgdxm)
#### Post date: [June 6, 2004, 7:44pm UTC](https://boards.straightdope.com/t/how-do-i-enable-pgp-public-keys/248993/2 "2004-06-06T19:44:41Z")

</div>

Google not working?:

[http://www.google.com/search?sourceid=navclient&q=pgp](http://www.google.com/search?sourceid=navclient&q=pgp)

Download the software. Note there is a _serious_ security concern with public keys being posted on message boards, etc. How can anyone know it really is yours? Read about man in the middle attacks. This is a major issue with public key cryptography. Hard to know if a key is yours unless you personally hand it on disk to someone. Most practical workaround under ordinary circumstances is if you have a website that is obviously yours that has been on the Net for a while. Then you can post your private key there. Of course, if your site gets hacked…

---

<div class="post-metadata">

### Author: ![Garfield226](https://avatars.discourse-cdn.com/v4/letter/g/9e8a1a/32.png) [@Garfield226](https://boards.straightdope.com/u/Garfield226)
#### Post date: [June 6, 2004, 7:47pm UTC](https://boards.straightdope.com/t/how-do-i-enable-pgp-public-keys/248993/3 "2004-06-06T19:47:22Z")

</div>

> [@rfgdxm](#):
>
> you can post your private key there. Of course, if your site gets hacked…

Your _private_ key?

Anyhow, I tried it for a while, but it really wasn’t worth the hassle and no one on the other end wanted to download a program just so they could read my email.

---

<div class="post-metadata">

### Author: ![633squadron](https://avatars.discourse-cdn.com/v4/letter/6/ee59a6/32.png) [@633squadron](https://boards.straightdope.com/u/633squadron)
#### Post date: [June 6, 2004, 7:51pm UTC](https://boards.straightdope.com/t/how-do-i-enable-pgp-public-keys/248993/4 "2004-06-06T19:51:34Z")

</div>

> [@rfgdxm](#):
>
> Google not working?:.

This link is just what I was complaining about! I ran exactly the same search. I do appreciate your help, but all of this stuff just tells you how to get hold of the software and store your key. There isn’t much practical information about how to use it. I certainly didn’t see anything about using it with existing e-mail clients.

In any event, I wouldn’t use it with most people anyway. I’m just experimenting. I’m the type that doesn’t feel he understands the stuff until he knows how to  
_use_ it.

---

<div class="post-metadata">

### Author: ![rfgdxm](https://avatars.discourse-cdn.com/v4/letter/r/c0e974/32.png) [@rfgdxm](https://boards.straightdope.com/u/rfgdxm)
#### Post date: [June 6, 2004, 7:52pm UTC](https://boards.straightdope.com/t/how-do-i-enable-pgp-public-keys/248993/5 "2004-06-06T19:52:24Z")

</div>

> [@Garfield226](#):
>
> Your _private_ key?
> 
> Anyhow, I tried it for a while, but it really wasn’t worth the hassle and no one on the other end wanted to download a program just so they could read my email.

Your private key is secured by the passphrase, which only you should know, and NOT have written down. Physical security of the private key isn’t that important. If a burglar steals your computer, or the disk with your private key, it is useless without the passphrase.

---

<div class="post-metadata">

### Author: ![rfgdxm](https://avatars.discourse-cdn.com/v4/letter/r/c0e974/32.png) [@rfgdxm](https://boards.straightdope.com/u/rfgdxm)
#### Post date: [June 6, 2004, 7:54pm UTC](https://boards.straightdope.com/t/how-do-i-enable-pgp-public-keys/248993/6 "2004-06-06T19:54:39Z")

</div>

> [@633squadron](#):
>
> This link is just what I was complaining about! I ran exactly the same search. I do appreciate your help, but all of this stuff just tells you how to get hold of the software and store your key. There isn’t much practical information about how to use it. I certainly didn’t see anything about using it with existing e-mail clients.
> 
> In any event, I wouldn’t use it with most people anyway. I’m just experimenting. I’m the type that doesn’t feel he understands the stuff until he knows how to  
> _use_ it.

Read the documentation included with the software. It allows a plug-in to common e-mail clients.

---

<div class="post-metadata">

### Author: ![633squadron](https://avatars.discourse-cdn.com/v4/letter/6/ee59a6/32.png) [@633squadron](https://boards.straightdope.com/u/633squadron)
#### Post date: [June 7, 2004, 12:09am UTC](https://boards.straightdope.com/t/how-do-i-enable-pgp-public-keys/248993/7 "2004-06-07T00:09:39Z")

</div>

> [@rfgdxm](#):
>
> Read the documentation included with the software. It allows a plug-in to common e-mail clients.

I eventually went to GNUPG ([http://www.gnupg.org/](http://www.gnupg.org/) ) which provides distributions of both source and binaries. GNUPG does not distribute the documentation with the binaries; the binaries just contain man pages. The GNUPG site does have a separate documentation area which includes a link to Brendan Kidwell’s _Practical Introduction to GPG in Windows_. I skimmed through it, and though it’s short, it hits all the points that I was looking for. I recommend it everyone including non-Windows users.

You can find Brendan’s doc in his blog, at [http://www.glump.net/archive/000060.php](http://www.glump.net/archive/000060.php)

Thank you Brendan!

I appreciate everyone’s efforts in trying to get this question answered.
