Security

For some time I've considered social netwoking, having up to this point avoided joining any social networking sites. That's right - I'm not a Luddite, yet I don't use Facebook. However, today I was invited to join Google Plus. And so, I decided to take the plunge, and jack into the Matrix.

Now that you've set up APG and K9 to allow you to send and receive encrypted and signed emails from your Android phone, you've probably found that you need to import OpenPGP keys. Fortunately, if the keys you need can be found on keyservers, APG can download and import them for you.

This post is the second in the series on using OpenPG to sign and/or encrypt emails on Android.
This guide covers the setup of the K9 email client on Android for use with APG in order to encrypt and sign emails with OpenPGP. It also covers other basic options in K9, such as setting email signatures for outgoing messages, and how to send emails.
This guide requires that the steps in Installing and Configuring APG be implemented on your phone first.

Updated to include picutures

Some Linux distributions allow you to install all of your partitions, save the boot partition, onto encrypted partitions. Doing this can be a big increase to the security of your data, should your computer be stolen, but can be an inconvenience when installed on a server that has no input devices connected. Fortunately, initramfs, the same program allowing you to boot an encrypted root partition in the first place, can also be configure to allow ssh connections.

All of the following must be done as root.

This post is the first in the series on use OpenPG to sign and/or encrypt emails on Android.
In this post, the OpenPGP key manager for Android, APG, is installed and configured.
To follow all of the steps in this guide, you need to have a public and private OpenPGP key.. The steps doing so can be found at here under the Setting Up GPG heading.

Now updated to include screenshots of the installation.

Installation

A SSH Key allows you to log into a remote server without ever having to enter the password for you user on that server. In some situations, you can use this to increase security, by configuring the remote host to only allow SSH to be used when the client has a key. It can also be useful when the remote host does not have a password, such as when using Dropbear on initramfs. Or, if you need to be able to set up a cron job that can log onto a remote host, you could setup a passwordless key (although there are inherent risks to doing so) and use that to allow the log on.

This article covers how to configure Enigmail for Thunderbird, and is part of a series in communications security.

This post requires GnuPG to be setup beforehand. See Security for guides to GnuPG.

Installing and Basic Configuration of Enigmail