| | Stumble It! | Add to Mixx! | | diigo it | | Slashdot |

Monday, January 5, 2009

Gmail Encryption in Firefox

For Christmas this year, my brother decided to get me the "Wrath of the Lich King" (WotLK) expansion for World of Warcraft. A fine gift for any geek/gamer. I had already downloaded the 10 day free trial so all I needed was the keycode, no need for buying the disc too.
Through some confusing circumstance, the only way to do this was for my brother to send me his credit card information and suffice it to say that he's in a place where he is less than confident in the fidelity of his internet connection. He rightfully had significant misgivings about sending his credit card information in the body of an email.
I suggested that we use GPG to solve this problem. Here's how:
  1. Download and install GnuPG. The application itself is a command line application so if you're not comfortable without a GUI you may want to look for a different solution.
  2. Install the FireGPG add-on for Firefox.
  3. After restarting Firefox, right-click anywhere on the page and go to FireGPG > Key Manager. In the pop-up window, click the "New key" button.
  4. After your key is created, highlight the listing and click on the "Export to file" button. This is your PUBLIC key.
  5. Send your PUBLIC key to anyone you want to be able to send you encrypted information. This email can be plain text in the body of an email or as an attachment, no need to encrypt anything just yet.
  6. If someone sends you their public key, you need to add it to your "key ring" so that you can send them encrypted information. The easiest way to do this is from within Firefox, select everything between:
    -----BEGIN PGP PUBLIC KEY BLOCK-----

    ...

    -----END PGP PUBLIC KEY BLOCK-----
    and right-click, go to FireGPG > Import. Now you can send them encrypted messages!
  7. Navigate to https://mail.google.com/mail/#compose and you'll see a couple buttons for encrypting and decrypting messages. Now you can send and receive sensitive information with a MUCH higher degree of security.
If you want to practice, feel free to import my public key and send me a message. I'll decrypt it and send one back to you!
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.6 (GNU/Linux)
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=OosZ
-----END PGP PUBLIC KEY BLOCK-----

0 comments: