Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 


Forgot your password?
Close
typodupeerror
×
Encryption Security

Ask Slashdot: Cryptography in Mail software? 201

Posted by Cliff from the secure-it-now dept.
Bartmoss asksL: "Obviously, nobody will use encryption if two problems occure: (a) your friends won't be able to read your mail because they don't have crypto, and (b) your software doesn't have crypto. I'm wondering - are there good HOWTO's and info sites on how to plug encryption into leading mail software for UNIX, Mac and Windows? What Windows-Software supports PGP, and which can have PGP support added? Does anybody have information on clients people could use for crypted mails?"
This discussion has been archived. No new comments can be posted.

Ask Slashdot: Cryptography in Mail software? More

Ask Slashdot: Cryptography in Mail software?

Comments Filter:

  • forget MUA, go MTA (Score:1)

    by Anonymous Coward
    I was discussing this with my friends after watching Enemy of the State and the general consensus was that the usability issues combined with the goofy US laws were insurmountable for ordinary users, and that wide spread encryption was never going to happen on the MUA level. It's great that has [P|G]GP support, but realistically it's a very small subset of people who you can mail. The best solution IMHO is to patch sendmail such that it automagically encrypts your mail if the remote server supports it. I was looking into implementing this, when I found it was already done. It was done in Australia by some guy working at Qualcomm and it's called ssmail, and it's at:
    http://www.home.aone.net.au/qualcomm/
    and I think it's GPL'd. While it's not as good a solution if you just want to encrypt your mail to 1 or 2 others, it's a much better mass solution if you are the admin for a mail domain. I urge you to start using it.

    --sam

  • MH is pretty key, yes, it is ... (Score:1)

    by Anonymous Coward
    I love MH and nmh and exmh -- they have supported PGP for years and do so transparently and securely and, unlike most other readers, allow you to manage gigantic volumes of mail. PGP, MH, and procmail -- I never even need to drop into X! It is a pity that more people don't use MH. It is a pity that O'Reilly dropped the MH book (although it was good of them to allow Mr. Peek's book to be GPL-ed). Oh well.

    Kids: I know that a lot of you are pretty young. If you don't mind a bit of advocacy from an old fart, learn MH. Like many enduring things in the UNIX world, there is a reason that it has stuck around -- it works. elm and mutt (really what elm should be) are good, pine is good, albeit basic. But you should look at MH. Imagine being able to do anything that you can think of from the command line while working on other things. No shelling out, nothing. exmh allows you to do all of this in X. MH and exmh are both rock solid and very rewarding, and they both give you that nice feeling after a while that this really is The Right Thing.

    Here are some URLs:

    http://www.ics.uci.edu/~mh/book/ for a basic website.

    ftp://ftp.gw.com/pub/people/jpeek/mh/book-ps/ is the book, still updated regularly, and a very good read. Pull it down and read it.

    http://www.ics.uci.edu/~mh/book/mh/senove.htm#Se nPGP and http://www.ics.uci.edu/~mh/book/mh/remime.htm#ReaP GP covers the use of PGP in MH. http://www.ics.uci.edu/~mh/book/exmh/thbuied.htm#P GP covers it in exmh.

    OK that is it for advocacy on this fine morning. The birds are singing, the s70s are at 2-3 (loafing, my children, loafing), and I think that I will go show the mainframers what REAL coffee tastes like.

    Have fun. 'Cause if it ain't fun, you're doing it wrong (this can be applied to many things ...).
  • Everyone in the GNU/linux world
    should be talking about GPG instead of PGP
    GPG aka GnuPG aka GNU Privacy Guard
    fully openPGP compatible

    http://www.d.shuttle.de/isil/gnupg/
    http://www.gnupg.org

    there is even a wrapper for compatibility with
    pgp 2.6
    http://www.nessie.de/mroth/pgpgpg/

  • mailcrypt (Score:2)

    by Anonymous Coward
    For those using Emacs for email, Mailcrypt
    is an excellent tool for integrating PGP
    support. Also, the original author, Pat LoPresti,
    is a nice guy.

  • Bahhhhhhhhhh! Just Do What I Do! (Score:2)

    by Anonymous Coward
    Develop your own provably secure encryption algorithm, and then whenever you want to send email to a friend, encrypt it 3 or 4 times over with different keys, zip it using InfoZip but change the extension to ".tgz" or ".tar.gz" (very important!), then uuencode it and encrypt the result. Now split the file up into a thousand chunks and intersperse them in an MPEG animation as spurious frames. Take note of which frames have the real data in them and split the numbers up into groups of 4 (this will be important later on). Now place the MPEG on a zip disk, mislabel it as "holiday pictures" (sneaky!) and place in a regular postal envelope. Finally, hire out a Brink's truck and 4 guards to drive the package to the intended recipient. Make each of the 4 guards memorize one group of the MPEG frames without telling them what it is.

    VOILA! One secure email!
  • If it's that hard for you to type, link it to something that isn't.
  • Well, if that are your requirements for a mailer, telnet would make a fine mailer....

    ---

  • PGP, MH, and procmail -- I never even need to drop into X!

    That's my recipe! And I'm what you might consider a "kid" ;-).

    It's amazing what one can do with these programs and the basic Unix toolkit-- shell scripts, the command line utilities, cron and at.

    ---

  • Last time I looked at Mew, I recall finding it very nice feature-wise, but completely backwards keymap-wise. (Who doesn't instinctively press the "r" key to "(r)eply" to a message, rather than the "a" key to "(a)nswer?)

    Of course, one could remap it. But figuring out how to tweak an email agent is a waste of time unless you're already decided on it.

    ---

  • Rather than dealing with the problems of hacking encryption into MUAs, why not create a PGP encrypting/decrypting proxy that would work seamlessly with any MUA?

    I assume you mean a proxy that will run on your same machine, and not on the network; otherwise, you're transmitting cleartext on the wires.

    ---

  • There are mainly two kinds of cryptography in use: secret key and public/private key.

    Secret key cryptography are systems that use a single secret key both to encrypt and decrypt the message. That is, both the sender and the recipient need to arrange for both to have the secret key, over some kind of secure channel. This approach is not practical to use over the net, since transmitting the key over it would place the users in danger of it being intercepted.

    Public/private key cryptography uses a pair of keys: one to encrypt messages, and a second one to decrypt them. This works the following way: suppose you want to send me an encrypted message. What you (or anyone) would have to do is get a copy of my public encryption key (which I could place in an accesible place, like my home page), and use that to encrypt the message. When I receive it, only I can read it, since it can only be decrypted with the private key I keep on a safe computer. Of course, I need to protect my private key from being stolen. But the main point is that I never have to transmit the private decryption key over the net, while my public encryption key can be wholly public.

    This is the method used by PGP to encrypt email, by SSH for encrypted logins, and SSL for secure sockets (like when you use a secure web connection). A variant of it is used for PGP signatures (which can, in conjunction with a public key, cryptographically guarantee that some file has not been altered).

    ---

  • Why get the commercial Eudora plugin when it is included in the freeware international PGPi releases? Current version is 6.02i I think, works great with Eudora.
  • Heehee mutt pisses on pine....film @ 11
  • If you use Pine, there is a package called PGP4Pine which you can find at
    freshmeat [freshmeat.net]. It lets you use PGP seamlessly in Pine. I haven't personally had time to set it up but a bunch of my friends use it and recomend it.
  • Posted by Moritz Moeller - Herrmann:

    I agree. It installs easily and works perfectly with mutt. I can really recommend it!
  • >>If I was a goverment agent in charge of snooping through email don't >>you think that I would have a scanner similar to a virus detector >>looking for encrypted messages?

    >That's exactly the reason why we all should use encryption for _all_ of our messages.

    Eh? Haven't you heard the best way to hide something is to hide it in plain sight?
  • Bah. Cryptography in Mail is a joke. It's something to play with, but really isn't all that useful in the real world. Let's face it, unless you're really dealing with really sensitive matters, the hassle involed with encryption isn't worth it, and all it really does is call attention to yourself. Think about it. If I was a goverment agent in charge of snooping through email don't you think that I would have a scanner similar to a virus detector looking for encrypted messages? The scanner may not be able to decrypt the messages, but it could flag and save the headers (including the adresses of the computers sending and receiving the encrypted mail) to a file so they could be investigated later by human field agents.

    I really think you encryption supporters are really operating under a false sense of security. If the goverment really wants to get you, they will. End of story.
  • Lotus Notes does it automatically and it is pretty nice. The problem is that it is really centralized and that your admins can still read your email if they want, your competitors cannot though. WHen it's automatic it is nice and easy and very convienient, I like it when I get authenticated email in netscape.


    You're right though, it's a chicken and egg problem, you draw attention to yourself when you encrypt email, fortunately I have nothing to hide so attention spent paying attention to my email will protect those who should fear our government.


    As for the sense of security, a false sense of security can be better than none at all. I also presume that you are talking about methods other than simply capturing and decrypting emails. If all email was encrypted, I'd feel pretty good that mine weren't the ones that were being focused on for decryption.

  • It may be a "good" idea next time to post a link instead of doing 'Edit -> View Source' and selecting then pasting....makes me wonder if there is/should be a comment byte limit. :)

  • Mutt (Score:1)

    by hilander ( 1838 )
    Mutt has inbuilt suport for the various PGP flavours (2 5 and gpg)
  • ...high-grade encryption offers little resistance to a court-ordered search warrant

    Wow Those are easy to get! I get one or two a day! :P

    Yes but they still need the passphrase to unlock the message. You can just keep the passphrase to yourself. (take the fifth?) I know you can talk about temp files and swap files and stuff, but if you look at real world examples those things don't usually come into play. If you are really paranoid then you can get the tools to scrub your hd anywhere.
    In my opinion it's not the government that would be crippled by crypto it's small time spooks like jealous boyfriends and industrial spys. I think crypto would stop more crime than it would hide!

  • It's ironic that you said this. In the last day, I decided to try out mutt instead of my old faithful pine. After messing around with my .muttrc, I got it working semi-ok. The keys and everything were so alien to me that it was a pain learning them. I like the scroll down feature that pine has and mutt dosen't. While mutt might be great with PGP and can be configured in many ways, I have retreated back to my good old pine. Hitting the down key is a little too weird for me instead of "n".
  • A little weird to incorperate. With past experiences with PGP4Pine, I found that it is a little weird. After all of the instructions and all, I don't think I even got it working. Maybe I will take a better look at it today.
  • Ok, fixed the bindings and got scrolling down to work. Thanks.
  • Ok, I used parts of that file and now mutt acts just like I want to. Except an option to bind a key to go back to the main index of messages. :)
  • JCSI [dstc.edu.au] is in Java. You'll need to download many a package from Javasoft before you'll get it to work.
    --
    http://www.wholepop.com/ [wholepop.com]
    Whole Pop Magazine Online - Pop Culture
  • Paul Leyland and I did an investigation for Secure Email for ac.uk [pgp.net], but the powers that be decided `secure email is not wanted' :-(

    For MUA integration, see Mail User Agent Survey [pgp.net]

  • for the latest (win 3.x/9x/nt, unix and others) PGPi software (legal non US export controlled software) look here [pgpi.com]......

    here's some more stuff,

    Search results

    59 programs matched your search criteria.

    Aegis Shell (16-bit) 3.0.8

    • Author: AEgis Research
    • Category: Shell
    • Platform: Windows 3.x
    • For use with: PGP 2.x
    • Filename: shell16.exe
    • License: Freeware for personal use
    • Homepage: http://www.aegisrc.com/Products/Shell/ [aegisrc.com]
    • Description: Developed for those who need to secure their e-mail with PGP, but do not like the DOS command prompt, PGP Windows Shell provides push-button control to PGP.

    Aegis Shell (32-bit) 3.0.8

    • Author: AEgis Research
    • Category: Shell
    • Platform: Windows 95/98/NT
    • For use with: PGP 2.x
    • Filename: shell32.exe
    • License: Freeware for personal use
    • Homepage: http://www.aegisrc.com/Products/She ll/index.htm [aegisrc.com]
    • Description: Developed for those who need to secure their e-mail with PGP, but do not like the DOS command prompt, PGP Windows Shell provides push-button control to PGP.

    BetweenUs

    • Author: TamoSoft
    • Category: Tool
    • Platform: Windows 95/98/NT
    • For use with: PGP 5.x/6.x
    • License: Commercial, try before you buy
    • Homepage: http://www.tamos.com/bu.htm [tamos.com]
    • Description: Encrypted peer-to-peer chat, conferencing and file transfers. PGP-compatible mode allows the usage of existing PGP keys for encryption and authentication. Full support for PGP version 5.5.2 and higher.

    Calyspo 3 PGP plugin

    • Author: MCS, Inc.
    • Category: Email plugin
    • Platform: Windows 95/98/NT
    • For use with: PGP 5.x/6.x
    • License: Shareware
    • Homepage: http://www.mcsdallas.com/mcs/calypso/ [mcsdallas.com]
    • Description: Email plugin for Calypso E-mail Client.

    Claris Emailer plugin

    • Author: Network Associates, Inc.
    • Category: Email plugin
    • Platform: MacOS
    • For use with: PGP 5.x/6.x
    • License: Freeware
    • Homepage: http://www.pgpi.com/download/ [pgpi.com]
    • Description: This plugin integrates PGP with Claris Emailer. It is included in the PGP 6.0.2i distribution.

    CryptoEx 1.0b4

    • Author: Glueck & Kanja
    • Category: Email plugin
    • Platform: Windows 95/98/NT
    • For use with: PGP 2.x
    • License: Commercial (free beta-versions available)
    • Homepage: http://www.glueckkanja.de/ [glueckkanja.de]
    • Description: A professional PGP extension for Microsoft Outlook and Microsoft Exchange. The client-based, transparent extension has been fully integrated into the familiar email user environment. It automatically recognizes encrypted emails and offers an easy-to-use keyring administration. CryptoEx works with both the US and the international version of PGP. A user-friendly adminstrator tool helps distributing CryptoEx and managing user options in large Windows networks.

    Emacs auto-pgp

    Encryplet 1.0

    • Category: Shell
    • Platform: MacOS
    • For use with: PGP 2.x
    • Filename: encryplet-10fc1-as.hqx
    • License: Freeware
    • Homepage: ftp://ftp.ifi.uio.no/pu b/pgp/2.x/mac/encryplet-10fc1-as.hqx [ifi.uio.no]
    • Description: AppleScript droplet which makes it easy to encrypt and decrypt files by drag-and-dropping them onto a Desktop Encryptor icon.

    Eudora 3.x and 4.x plugin

    • Author: Network Associates, Inc.
    • Category: Email plugin
    • Platform: Windows 95/98/NT
    • For use with: PGP 5.x/6.x
    • License: Freeware
    • Homepage: http://www.pgpi.com/download/ [pgpi.com]
    • Description: This plugin integrates PGP with Eudora 3.x or 4.x. It is included in the PGP 6.0.2i distribution.

    Eudora plugin

    • Author: Network Associates, Inc.
    • Category: Email plugin
    • Platform: MacOS
    • For use with: PGP 5.x/6.x
    • License: Freeware
    • Homepage: http://www.pgpi.com/download/ [pgpi.com]
    • Description: This plugin integrates PGP with Eudora. It is included in the PGP 6.0.2i distribution.

    Gibbon PGP Front-End for EPM 1.2

    • Author: Gibbon Computer Products, Inc.
    • Category: Tool
    • Platform: OS/2
    • For use with: PGP 2.x
    • Filename: gcppgp12.zip
    • License: Freeware
    • Homepage: http://www.gibbon.com/catalog/pgpfe.html [gibbon.com]
    • Description: The Gibbon PGP Front-End is an E language macro that creates a PGP menu on the EPM menu bar. This allows menued use of PGP whenever you are using the EPM editor. Since both NewsReader/2 and LAMail use EPM, this will allow seamless integration of PGP into your Newsreader and E-Mail.

    Gui4PGP 2.0

    • Author: Sascha Ott
    • Category: Shell
    • Platform: Windows 95/98/NT
    • For use with: PGP 2.x
    • Filename: g4p20.zip
    • License: Shareware
    • Homepage: http://www.lanobis.de/~sascha/gui4pgp.ht ml [lanobis.de]
    • Description: Full Windows95 conform * Almost no DOS-windows * Read PGPs textoutput in the Gui4PGP-editor * En-decrypting/signing via hotkey * Copy text to clipboard, push hotkey - ready * Support for Microsoft Internet Explorer * Multilanguage * Register own file extensions - decrypting simply out of the explorer * Treeview of the public keyring * Define your own user-buttons * All keymanagement commands built in * Simple en-and decrypting in the internal editor * Choose user with only a mouse click - and much more!

    Lock & Key 3.1

    • Author: Walter E. Heindl
    • Category: Shell
    • Platform: Windows 95/98/NT
    • For use with: PGP 2.x
    • Filename: lk32v310.zip
    • License: Shareware ($19.95)
    • Homepage: http://www.voicenet.com/~wheindl/lock &key.htm [voicenet.com]
    • Description: Lock & Key integrates PGP functions into the Windows 95 Explorer. Right-click to encrypt a file. Double-click to decrypt. Decrypt to QuickView/+. Choose a recipient from a drop-down list. Supports signing files, viewing signatures, adding keys, viewing the keyring, and Win95 long file names. Version 3.0 adds: multiple language support; context-sensitive help; an integrated editor for composing messages; open or print a decrypted file; append your public key to outgoing messages.

    MS Outlook 97/98 and Exchange plugin

    • Author: Network Associates, Inc.
    • Category: Email plugin
    • Platform: Windows 95/98/NT
    • For use with: PGP 5.x/6.x
    • License: Freeware
    • Homepage: http://www.pgpi.com/download/ [pgpi.com]
    • Description: This plugin integrates PGP with Microsoft Outlook 97/98 or Exchange. It is included in the PGP 6.0.2i distribution.

    MS Outlook Express 4 plugin

    • Author: Network Associates, Inc.
    • Category: Email plugin
    • Platform: Windows 95/98/NT
    • For use with: PGP 5.x/6.x
    • License: Freeware
    • Homepage: http://www.pgpi.com/download/ [pgpi.com]
    • Description: This plugin integrates PGP with Microsoft Outlook Express 4 (not 5!). It is included in the PGP 6.0.2i distribution.

    MacPGP Control 1.0

    • Author: Raïf S. Naffah
    • Category: Shell
    • Platform: MacOS
    • For use with: PGP 2.x
    • License: Shareware ($15)
    • Homepage: http://www.deepeddy.com/pgp/ [deepeddy.com]
    • Description: AppleScript application that offers an easy-to-use, more Macintosh friendly user interface to MacPGP 2.x.

    MailPGP 1.3

    • Author: Sami Tolvanen
    • Category: Shell
    • Platform: Windows 95/98/NT
    • For use with: PGP 2.x
    • Filename: lk32v310.zip
    • Requires: mfc4.zip
    • License: Freeware
    • Homepage: http://www.iki.fi/st/mailpgp/ [www.iki.fi]
    • Description: MailPGP is an advanced, yet fast and easy-to-use Windows user interface for PGP. MailPGP conveniently integrates PGP with every program that uses the clipboard and does not require any space from the screen since the window can be minimized to the taskbar notification area. PGP is run on the background and the DOS window is shown only if necessary. You can encrypt, decrypt and sign messages on the clipboard just by clicking the taskbar icon. The most important key management functions are located on a pop-up menu. You can also easily encrypt and decrypt files by choosing them from a file dialog, or just by dragging and dropping one to the program window. Requires properly installed PGP 2.6.x or newer and mfc40.dll.

    Mailcrypt 3.5.3

    • Category: Email plugin
    • Platform: Unix
    • For use with: PGP 2.x/5.x
    • License: Freeware
    • Homepage: http://www.nb.net/~lbudney /linux/software/mailcrypt.html [nb.net]
    • Description: Mailcrypt is an Emacs Lisp package which provides a simple interface to public key cryptography with PGP 2.x/5.x, as well as GnuPG.

    MandelSteg and GIFExtract 1.0

    • Author: Henry Hastur
    • Category: Tool
    • Platform: Unix / MS-DOS
    • For use with: PGP 2.x/5.x/6.x
    • Filename: MandSteg.tar.Z
    • License: Freeware
    • Homepage: http://www.unicorn.com/pgp/m-readme.html [unicorn.com]
    • Description: These two programs allow you to hide confidential data in fractal GIF images, giving an increased level of security compared to sending PGP-encrypted email over the Internet.

    Mollusc 1.0

    • Author: Net Services
    • Category: Email plugin
    • Platform: Windows 3.x/95/98/NT
    • For use with: PGP 2.x
    • Filename: mlsc100.exe
    • License: Commercial, try before you buy
    • Homepage: http://www.compulink.co.uk/~net-servi ces/pgp/ [compulink.co.uk]
    • Description: Direct interface to your e-mail software - you don't have to cut and paste. Extensive key management including Key Server functions. Mollusc currently supports Eudora Pro (v2.2 - 32 bit), Eudora Light (1.5.2 and 1.5.4), Pegasus Mail 2.40, WinCIM 2.0, Ameol, Free Agent and Netscape 1.2N.

    PGP Encryptor Interface 1.1

    • Author: John Navas
    • Category: Email plugin
    • Platform: Windows 3.x
    • For use with: PGP 2.x
    • Filename: pgpjn.zip
    • License: Freeware
    • Homepage: http://web.aimnet.com/~jnavas/w inpmail/helpers.html [aimnet.com]
    • Description: Integrates seamlessly into Pegasus Mail for Windows (Version 2.23 and above), making it easy to protect email messages with secure PGP public ke encryption and/or digital signatures. NB! Only works with the 16-bit versions of Pegasus Mail.

    PGP Extension for Microsoft Exchange 1.10

    • Author: Jon Whalen
    • Category: Email plugin
    • Platform: Windows 3.x/95/98/NT
    • For use with: PGP 2.x
    • Filename: pgpext.zip
    • License: Freeware
    • Homepage: http://homepage.interaccess.com/~jon/ [interaccess.com]
    • Description: PGP Extension is an add-on for Microsoft Exchange that allows execution of basic PGP commands from the Exchange menu.

    PGP Manager (16-bit) 1.3

    • Author: Ollivier Civiol
    • Category: Email plugin
    • Platform: Windows 3.x
    • For use with: PGP 2.x
    • Filename: pgpman13.zip
    • License: Shareware
    • Homepage: http://www.voicenet.com/~jank/astec/ pgpman.htm [voicenet.com]
    • Description: Sporting a friendly front-end, PGP Manager allows you to type in your message then Encrypt it and send it through the mail. PGP Manager Supports the Windows MAPI SubSystem. When an encrypted message is in your mailbox, it will show in the main combobox, click and read. PGP Manager requires PGP 2.6 and up (some functions require PGP 2.6.3i (multiple recipients)).

    PGP Manager (32-bit) 2.2b

    • Author: Ollivier Civiol
    • Category: Email plugin
    • Platform: Windows 95/98/NT
    • For use with: PGP 2.x
    • Filename: pgpmgr22b.zip
    • License: Shareware
    • Homepage: http://www.voicenet.com/~jank/astec/ pgpman.htm [voicenet.com]
    • Description: Sporting a friendly front-end, PGP Manager allows you to type in your message then Encrypt it and send it through the mail. PGP Manager Supports the Windows MAPI SubSystem. When an encrypted message is in your mailbox, it will show in the main combobox, click and read. PGP Manager requires PGP 2.6 and up (some functions require PGP 2.6.3i (multiple recipients)).

    PGP QuickFront 1.0

    • Author: Ross Barclay / Ugali International Corp.
    • Category: Shell
    • Platform: Windows 3.x
    • For use with: PGP 2.x
    • Filename: pqf.zip
    • Requires: vbrun300.zip
    • License: Shareware ($25)
    • Homepage: http://www.netacce ss.on.ca/~rbarclay/ugali/crypt/quickfront.html [netaccess.on.ca]
    • Description: PGP QuickFront works as a companion to PGP WinFront. It uses the clipboard so thus can interface with any Windows application. The encryption and decryption is automatic. It also makes signatures and check signatures.

    PGP REXX 1.2

    • Author: Lueko Willms
    • Category: Tool
    • Platform: OS/2
    • For use with: PGP 2.x
    • License: Freeware
    • Homepage: http://nick.secant.com/pgprex.htm [secant.com]
    • Description: PGP REXX consists of seven REXX scripts to automate PGP usage from your OS/2 internet mail program. PGP REXX works with Post Road Mailer, PMMAIL and MR/2 ICE.

    PGP Windows 1.1

    • Author: Roger Kurrat
    • Category: Shell
    • Platform: Windows 3.x
    • For use with: PGP 2.x
    • Filename: pgpwin11.zip
    • License: Freeware
    • Homepage:
    • Description: PGP Windows offers an easy to use interface to PGP. Includes key management and clipboard integration.

    PGP Winfront (16-bit) 3.1

    • Author: Ugali International Corp.
    • Category: Shell
    • Platform: Windows 3.x
    • For use with: PGP 2.x
    • Filename: pwf31.zip
    • Requires: vbrun300.zip
    • License: Freeware
    • Homepage: http://www.netaccess .on.ca/~rbarclay/ugali/crypt/winfront.html [netaccess.on.ca]
    • Description: PWF provides a very efficient way of accessing the full functionality of PGP through an intuitive Windows interface.

    PGP Winfront (32-bit) 4.0

    • Author: Ugali International Corp.
    • Category: Shell
    • Platform: Windows 95/98/NT
    • For use with: PGP 2.x
    • Filename: pwf32402.zip
    • Requires: vbrun300.zip
    • License: Freeware
    • Homepage: http://www.netaccess .on.ca/~rbarclay/ugali/crypt/winfront.html [netaccess.on.ca]
    • Description: PWF provides a very efficient way of accessing the full functionality of PGP through an intuitive Windows interface.

    PGP-PM32 0.7 beta

    PGP4Pine (aka PAPP)

    • Category: Email plugin
    • Platform: Unix
    • For use with: PGP 2.x
    • License: Freeware
    • Homepage: http://user.cs.tu-berlin.de/~gator/pgp 4pine/ [tu-berlin.de]
    • Description: PGP4Pine, also known as "PAPP" ("Pine And PGP") is a Perl script to integrate pgp into the popular mail reader Pine.

    PGPClick (16-bit) 2.5

    • Author: Robert Wilson
    • Category: Shell
    • Platform: Windows 3.x
    • For use with: PGP 2.x
    • Filename: pgpclk16.zip
    • License: Freeware
    • Homepage: http://www.ncinter.net/~rewilson/PGPClic k/ [ncinter.net]
    • Description: PGPClick was written to simplify use of PGP encryption for email applications. Once properly set up, most encryption and decryption can be accomplished with just one or two mouse clicks. PGPClick works well with email readers, newsreaders, text editors, word processors, and almost any program that edits text.

    PGPClick (32-bit) 2.5

    • Author: Robert Wilson
    • Category: Shell
    • Platform: Windows 95/98/NT
    • For use with: PGP 2.x
    • Filename: pgpclk32.zip
    • License: Freeware
    • Homepage: http://www.ncinter.net/~rewilson/PGPClic k/ [ncinter.net]
    • Description: PGPClick was written to simplify use of PGP encryption for email applications. Once properly set up, most encryption and decryption can be accomplished with just one or two mouse clicks. PGPClick works well with email readers, newsreaders, text editors, word processors, and almost any program that edits text.

    PGPClip 1.4.4

    • Author: Michael Meyer
    • Category: Shell
    • Platform: Windows 3.x
    • For use with: PGP 2.x
    • Filename: pcl1_1_4.zip
    • Requires: vbrun300.zip
    • License: Shareware
    • Homepage: http://ourworld.compuserv e.com/homepages/michael_p_meyer/ [compuserve.com]
    • Description: PGPClip utilizes the clipboard for most PGP functions. Provides immediate desktop access to PGP functions.

    PGPSort 1.0

    • Author: Ståle Schumacher Ytteborg
    • Category: Tool
    • Platform: Unix / MS-DOS
    • For use with: PGP 2.x
    • Filename: pgpsort.zip
    • License: Freeware
    • Homepage: ftp://ftp.pgpi.com/pub/pgp/2.x/ pc/msdos/pgpsort.zip [pgpi.com]
    • Description: Sorts PGP public keyrings and (optionally) removes bad keys.

    PGPn123 (freeware) 1.0 beta 5

    • Author: Alpha1 Enterprises
    • Category: Shell
    • Platform: Windows 3.x
    • For use with: PGP 2.x
    • Filename: pn123-05.zip
    • License: Freeware
    • Homepage: http://www.pobox.com/~alpha1/epgpn123.htm [pobox.com]
    • Description: PGPn123 floats above your e-mail application in the form of a toolbar, making it possible to click a single button to sign, encrypt or decrypt your messages. PGPn123 has been found to work well with Eudora, Agent, Netscape, Pegasus, and a few other products.

    PGPn123 (shareware) 1.8

    • Author: Alpha1 Enterprises
    • Category: Shell
    • Platform: Windows 3.x
    • For use with: PGP 2.x
    • Filename: pn123e18.zip
    • License: Shareware
    • Homepage: http://www.pobox.com/~alpha1/epgpn123.htm [pobox.com]
    • Description: PGPn123 floats above your e-mail application in the form of a toolbar, making it possible to click a single button to sign, encrypt or decrypt your messages. PGPn123 has been found to work well with Eudora, Agent, Netscape, Pegasus, and a few other products.

    PGPoMAGIC 2.4

    • Author: Jens Bruhn
    • Category: Shell
    • Platform: Windows 3.x
    • For use with: PGP 2.x
    • Filename: pom24.zip
    • License: Shareware
    • Homepage: http://members.aol.com/PGPoMAGIC/ [aol.com]
    • Description: PGPoMAGIC features a "fast clip board" mode that allows you to highlight and capture text for encryption in any editable window. Decryption with only one mouse click. This version now supports things like networks (PGP may be somewhere in the net, the keyrings in an other directory and PoM may be in a third directory; all users can use PGP with their own configuration) and multiple keyrings

    PGPsendmail 1.4

    PGPtoGUI

    PGPwho

    PMMail/2 2.0

    PgpEudra 1.02

    • Author: Hans Bausewein / Comerwell Software
    • Category: Email plugin
    • Platform: Windows 3.x/95/98/NT
    • For use with: PGP 2.x
    • Filename: pgpeudra102.zip
    • License: Freeware for personal use
    • Homepage: http://www.xs4all.nl/~comerwel/pgpeudra/ [xs4all.nl]
    • Description: PgpEudra is a PGP-shell that runs as an extension to Eudora. It adds a menu item "Run PGP..." to Eudora's "Message" menu, thereby making receiving and sending encrypted mail very easy. It supports just the basic PGP tasks encrypt, decode, sign and check signature. No copy and paste needed anymore. Works with both 16 and 32 bit versions of Eudora.

    PowerPGP (16-bit) 2.0

    • Author: Joe Fennin
    • Category: Shell
    • Platform: Windows 3.x
    • For use with: PGP 2.x
    • Filename: ppgp2-16.zip
    • License: Shareware ($20)
    • Homepage: http://www.frontiernet.net/~jfeen in/powerpgp.html [frontiernet.net]
    • Description: PowerPGP lets you write and encrypt messages. After that you can cut and paste your message into any windows based e-mail program.

    PowerPGP (32-bit) 2.20

    • Author: Joe Fennin
    • Category: Shell
    • Platform: Windows 95/98/NT
    • For use with: PGP 2.x
    • Filename: ppgp2-32.zip
    • License: Shareware ($20)
    • Homepage: http://www.frontiernet.net/~jfeen in/powerpgp.html [frontiernet.net]
    • Description: PowerPGP lets you write and encrypt messages. After that you can cut and paste your message into any windows based e-mail program.

    Private Idaho 2.8b3

    • Author: Joel McNamara
    • Category: Tool
    • Platform: Windows 3.x
    • For use with: PGP 2.x
    • Filename: pi28b3.exe
    • Requires: vbrun300.zip
    • License: Freeware
    • Homepage: http://www.eskimo.com/~joelm/pi.html [eskimo.com]
    • Description: A PGP/anonymous remailer utility for e-mail software. Supports direct sending of SMTP e-mail, as well direct receipt of PGP messages from POP3 mailboxes. Also supports multiple NYM servers, NYMS, multiple PGP keys for signing, etc., support for C2.org remailer, usenet posting through remailers, and more.

    Privtool 0.90 beta

    • Author: Mark Grant
    • Category: Email client
    • Platform: Unix
    • For use with: PGP 2.x
    • License: Freeware
    • Homepage: http://www.unicorn.com/privtool/privt ool.html [unicorn.com]
    • Description: Privtool is intended to be a PGP-aware replacement for the standard Sun Workstation mailtool program, with a similar user interface and automagick support for PGP-signing and PGP-encryption. Privtool runs on Linux and FreeBSD as well as SunOS and Solaris.

    Pronto Secure 1.13

    QDPGP 2.60

    • Author: Gerard R Thomas
    • Category: Email plugin
    • Platform: Windows 95/98/NT
    • For use with: PGP 5.x/6.x
    • Filename: qdpgp.zip
    • License: Freeware
    • Homepage: http://www.wow.net/community/grt/qdpgp. html [wow.net]
    • Description: Email plugin for Pegasus Mail. Supports encryption/decryption, generation/verification of signatures, addition of public keys to keyring.

    SafeMail 2.0 beta5

    • Author: Highware, Inc.
    • Category: Email client
    • Platform: MacOS
    • For use with: PGP 2.x/5.x/6.x
    • License: Commercial
    • Homepage: http://www.highware.com/main-sm.html [highware.com]
    • Description: OpenPGP compatible email client.

    Stealth 1.1

    • Author: Henry Hastur
    • Category: Tool
    • Platform: Unix / MS-DOS
    • For use with: PGP 2.x/5.x/6.x
    • Filename: stealth.zip
    • License: Freeware
    • Homepage: http://www.unicorn.com/pgp/s-readme.html [unicorn.com]
    • Description: Stealth is a simple filter for PGP which strips off all identifying header information to leave only the encrypted data in a format suitable for steganographic use.

    WPGP 1.6

    • Author: Jack Gostl
    • Category: Shell
    • Platform: Windows 3.x
    • For use with: PGP 2.x
    • Filename: wpgp160.zip
    • License: Shareware ($40)
    • Homepage: http://www.panix.com/~jgostl/wpgp/ [panix.com]
    • Description: A Windows/PGP integration tool with a point and click interface between Windows applications and PGP. With WPGP, simply click on a window; WPGP will extract the text from that window, process it through PGP, and place the result back in the window. Includes a drag & drop file encryption interface.

    WinPGP (16-bit) 4.1

    • Author: Chris Geib / Geib Enterprises Network
    • Category: Shell
    • Platform: Windows 3.x
    • For use with: PGP 2.x
    • Filename: pgpw41.zip
    • License: Shareware
    • Homepage: http://ourworld.compuserve.com/home pages/CGeib/ [compuserve.com]
    • Description: Allows you to access the features of PGP while remaining in Windows. Also supports directory encryption and has good key managment features.

    WinPGP (32-bit) 5.0

    • Author: Chris Geib / Geib Enterprises Network
    • Category: Shell
    • Platform: Windows 95/98/NT
    • For use with: PGP 2.x
    • Filename: winpgp5a.zip
    • License: Shareware
    • Homepage: http://ourworld.compuserve.com/home pages/CGeib/ [compuserve.com]
    • Description: Allows you to access the features of PGP while remaining in Windows. Also supports directory encryption and has good key managment features.

    dirtypgp

    • Author: Carsten Meyer (carsten.meyer@home.gelsen-net.de)
    • Category: Shell
    • Platform: Unix
    • For use with: PGP 2.x
    • License: Freeware
    • Homepage: http://195.145.169.13/~cmeyer/dirtypgp [195.145.169.13]
    • Description: PGP 2.6.3i shell for X11.

    elmpgp 2.4pl24

    pgp4pine

    • Author: Chris Wiegand (cwiegant@urgentmail.com)
    • Category: Email plugin
    • Platform: Unix
    • For use with: PGP 2.x/5.x
    • License: Freeware
    • Homepage: http://www.dimensional.com /~cwiegand/linux/pgp4pine.html [dimensional.com]
    • Description: PGP/GPG filter for pine, enabling you to manually and automatically decrypt and encrypt email messages.

    psMail 1.1

    • Author: Bill Cohee
    • Category: Email client
    • Platform: Windows 3.x
    • For use with: PGP 2.x
    • License: Freeware
    • Homepage: http://mville.edu:8000/~bcohee/psmail.ht ml [mville.edu]
    • Description: psMail (Pretty Secure Mail) is an offline mail manager designed for people who wish to send/receive encrypted email through their online service or Internet access provider. psMail is composed of two seperate modules; an Inbox and a OutBox. psMail:InBox manages and decrypts email sent to you. psMail:OutBox manages and encrypts email that you are going to send.

    zmail PGP script

    • Author: Aldo Valente
    • Category: Email plugin
    • Platform: Unix
    • For use with: PGP 2.x
    • License: Freeware
    • Homepage: http://www.rhein.de/~aldo/zmail.html [rhein.de]
    • Description: Script for integrating PGP with zmail.

  • Linux people should really pay attention to Outlook
    and all of the cool stuff that Microsoft does in
    it. With the possible exception of GNUS, Outlook
    is the best email client on the planet. Sure, it
    has its faults, but if you subscribe to the "my inbox
    contains everything in my whole life" school of life
    management, then Outlook is about the best there is.
    Now, it's far from worth justifying Windows, which
    is why I sue the mighty pine, but everyone should at least
    give it a shot and see what neat stuff they have.
  • What the hell does PGP4Pine do? Without this product you can STILL set up incoming and outgoing filters that seem to do everything pgp4pine does.

    I am convinced there must be some added functionality but I am unaware of it and would love to find out what it is.
  • Fortunately the part about one-way algorithms is very important. It is absurd even with astounding advances in computing power to do a brute force search of 160 bits. Thus the question becomes how secure is your hash function.

    Secure hash functions are a VERY important topic but the fact that you only have 160 bits is irrelevant.
  • But its 147K of simplifying it a little bit. The filters take about 2 minutes to explain/set up. That extra 145K must do SOMETHING!

    my new opinion is that it is a security hole to send your encrypted email to the government.

  • http://www.mutt.org/doc/manual/ma nual-6.html#move [mutt.org]

    move
    Type: quadoption
    Default: ask-no
    Controls whether you will be asked to confirm moving read messages from your spool mailbox to your $mbox mailbox, or as a result of a mbox-hook command.

    "set move=no" will do exactly what you want.

  • You don't even need to delve into the source. Here [ajou.ac.kr] is a sample muttrc which will redefine all the key bindings to their pine equivalents.

  • You simply cannot beat mutt (Score:3)

    by Nugget94M ( 3631 ) on Sunday July 04, 1999 @09:47PM (#1818303) Homepage

    Insofar as unix is concerned, you simply cannot beat mutt ( http://www.mutt.org/ [mutt.org]) for a pgp-aware mailer.

    If you're currently using either pine or elm, you're doing yourself a serious disservice not looking at mutt. It's easier, more flexible, and more powerful than any of the alternatives.

    PGP support is top-notch and native, for both v2 and v5 pgp. Highly recommended.

  • Actually.. to deter the possibility of collusion (guards DO talk amongst themselves), have two separate brinks trucks. Each truck they learn four codes (which only two are needed, but they dont know which one, and are told that only one of them is needed)

    :-)



    https://www.mav.net/teddyr/syousif/ [mav.net]
  • The thing is, I have found that most people want to encrypt not to hide stuff from the govt, but to hide stuff from nosy system admins at their ISPs or workplace. Man-In-The-Middle intercepts are a factor, but many are more concerned with "who can read my mail before I get it while it is waiting for me"



    https://www.mav.net/teddyr/syousif/ [mav.net]
  • Use SSH and port forwarding.

    fetchmail has an easier way to do it automatically using SSH port forwarding (I have not yet found a seamless implemention)..

    There is an implementation of SSL/IMAP, but both clients and server have to follow it.

    Note: Same thing with
    POP3

    and you may want to use SSH port forwarding with NNTP. (which is also in the clear...)

    The problem w/ SSH port forwarding is that the server also needs to support SSHD (but if you have control over both machines)....

    https://www.mav.net/teddyr/syousif/ [mav.net]
  • "mutt" has two t's, which means a short delay there.

    In addition, is is difficult to type "mu" without using just one finger.

    "pine" on the other hand, can be typed with four fingers (one for each letter), and so can be typed much faster and more easily. That alone makes pine my mailer of choice.

    And no, editing my .cshrc file to alias pine to mutt is a ridiculous option. And besides, who wants to use a mailer not named after a tree?
  • Unfortunately, The Bat's IMAP support is clunky at best.

    Does anyone know of a good mail client that supports both IMAP and PGP? Most clients support one or the other.

    And Outlook is not an option.
  • This message is moderated up to two? Posting a link would have been soo much better.
  • Myself, I like Pegasus. It supports IMAP, and with plugins, supports PGP. QDPGP is one of several plugins that add PGP support. It adds signing/encrypting/decrypting/key management abilities to Pegasus.
    Pegasus has nifty mail filtering abilities also.

    http://www.pegasus.usa.com/ is the main US site.
  • zeroknowledge.com [zeroknowledge.com] has a beta client out that supports encryption and anonymous remailing. These guys tend to get quoted in wired frequently when privacy issues come up.

  • Goof (Score:1)

    by robbo ( 4388 )
    Try zeroknowledge.com [zeroknowledge.com] again.
  • With the question in mind, I use Ishmail as it
    has a GUI front-end and supports PGP, as well
    as well as working with IMAP, POP, and local mail servers, I really like the Automatic filing.
    Check it out at http://www.ishmail.com
    WDM
  • ... PMMail [southsoft.com] can not be beat in my opinion. It doesn't get much press but it handles PGP 2.x and [56].x very well. It's fast and very reliable.
  • It's easier, more flexible

    Definitely more flexible! Show me a thing you can't configure in mutt! :-)

    (And you can even set up macros, so it will output old-style PGP attachments for braindead `software' such as MS Outlook.)

    /* Steinar */
  • Come on, almost ANY old mailer can fake mails!

    /* Steinar */
  • Not only does The Bat support PGP in its latest version, but it is an all-around cool email program. It's very configurable and new enhancements are being added frequently. It's at www.ritlabs.com.
  • Both mutt and exmh are built on the MH (or nmh) mailkits.

    You're mistaken. Mutt isn't built upon anything but mutt.

    --
    Ian Peters
  • I won't try to convert you (I know that a mailer is a very personal choice), but I should point out that all of the key-bindings are completely configurable in mutt, so if you think "n" is a better choice, you can make it so. And mutt does have a scroll down feature.

    --
    Ian Peters
  • This is the notion that Winnow and Chaffing (sorry is the spelling is wrong) operates. It isn't a new idea, but application to today's network systems was recently (within the last year?) brought up by the R and S in RSA (Rivest and the other name I forget... Shamir?). The idea is simply to flood any given packetized connection with false signatured/authenticated garbage. The packets that are good are also signed/authenticated but they actually will check out correctly when the signature is checked. Depending on how small the packets are different methods of creating the "chaff" packets can be effectively utilized in this scheme. In this method corrent information can travel somewhat securely in the clear among "noise."
  • If you mean changing the From: header, mutt allows this.
  • Around here, my friend with windows use Outlook and
    PGP, and I use exmh and GnuPG, and they interoperate
    great!

  • Technically speaking, I have to wholeheartedly agree that PGP is superior to PGP in just about every way. Unfortunately, there is one mighty drawback:

    It's not reverse compatible with the old pgp 2.62 keysets out there. That sucks.

    (also the fact that /usr/local/bin/gpg is setuid root, but that's minor)

    Here's what it looked like when I tried to import my pgp 2.6.2 key. (id 'xxx'ed to protect the innocent)

    gpg (GnuPG) 0.9.8; Copyright (C) 1999 Free
    Software Foundation, Inc.
    This program comes with ABSOLUTELY NOWARRANTY.
    This is free software, and you are welcome to
    redistribute it under certain conditions. See
    the file COPYING for details.

    gpg: key xxx: unsupported public key algorithm
    gpg: key xxxx: no valid user ids
    gpg: this may be caused by a missing
    self-signature
    gpg: Total number processed: 1
    gpg: w/o user IDs: 1

  • The key I have is in fact self signed, it's just that GPG didn't recognize the format, and did a guess that it wasn't self-signed.. :)

    I guess that could be considered an unstable failure mode.

  • Is there a non-commercial imap server that supports ssl?
  • Cool, thanks. I went and got stunnel and SSLeay and have been having trouble getting it to work, but this seems like what I want. My client can't connect to the server after I killall -HUP inetd and tell messenger to use ssl. There are keys on the server and client.. Any idea why that would happen?
  • Hate to point out the obvious...but I believe that the message you replied to was a sarcastic farse. You need to lighten up a bit there bud.
  • I agree - in the meantime, there is good shareware for PGP email integration on Windows called Mollusc, which supports Netscape and almost every Windows emailer and the author can very rapidly support off-beat email programs.

    I used to use this quite a lot when I was using PGP on Windows. For attachments, the simplest thing is just to encrypt the file using PGP of course.
  • A quick search on Google.com revealed the following beta done in Norway, so it is usable worldwide - not sure if it is just a library but it should be usable by mail program developers.

    http://www.pasta.cs.uit.no/~perm/PASTA/pilot/

    There was also mention of some work done in US/Canada, for those who live there, in

    http://www.imc.org/ietf-open-pgp/mail-archive/ms g01874.html
  • Have a look at the international PGP home page. [pgpi.com] Good links here to the standard PGP packages for most platforms. Freshmeat is a good source for Linux specific things.
  • 20,000 people downloading that commment at once would Slashdot Slashdot, dumb-ass.
  • In my view S/MIME is a superior protocol for encrypting email than PGP. It is supported by the major mail clients (e.g. Netscape's Messenger), and I believe is easier to use. Its main disadvantage is that its support among "free" mail clients appears to be non-existent...
  • Or what about exmh? Both mutt and exmh are built on the MH (or nmh) mailkits. They will follow many of the same configurations. Only problem with exmh is that it's Tcl/Tk, and therefore somewhat hopelessly slow if you're running it on a remote computer.

    On exmh's website [beedub.com] there is information on what patches you need to get exmh up and running with PGP or GPG [shuttle.de].

  • OK. My mistake. I once asked for a textmode mail client that supported MH folders, and was referred to mutt. I therefore assumed it was MH based.
  • Perhaps for the same reason that MS Excel 97 `cannot open two documents with the same name, even if the documents are in different folders', eh?
  • Does outlook have a search-and-replace function?
  • I think it's just supposed to simplify it a little. If nothing else its documentation at least explains how to set up the filters, which I never would have figured out on my own.
  • I didn't perform the moderation you mention, but I suspect that it was done because the poster had made the exact same post twice. (by accident, I'm sure) You can't get much more redundant than that! The other post was (as of the time I write this) moderated up to a score of 2. That looks like quite appropriate moderation to me.
  • Isn't it
    So long, and thanks for all the ghoti?

    (couGH, wOmen, moTIon)
  • read the subject
  • What if the API in question wasn't for encryption, but rather a generic API that any number different plugins could work with (including encryption). I don't know, say for example, a plugin that just took 64 bits and XORed it with 45 or something (by no means strong encryption). Sure its worthless, but it should alow someone to write a plugin that used DES or some other strong encryption right? Just call it generic data transformation or something (GDT) - just an idea, has it ever been tried?

  • Ahhh, I can reminice about the old days.....
    Email was a simple client where you can scrub the messages through a nice encryptor (Simple double Xor encryption with phrases) that couldnt be cracked easily by a cracker or punk kid. Usenet postings that were offensive were rot13'd and all was joyous.

    What about the fact that ALL news readers and IRC clients no longer have a rot13 function?? if everyone used it then the bitching by us old-timers and the paranoid public would be minimal I.E. no chance of a child accidently seeing c00l D00d's latest flame where he tried out the new word F*** every 3 words. You would have to deliberately rot13 it ro read it. encryptors were easy to impliment... pine-- Ahhh a message from my russian commander -- save it as ascii and decrypt. to send? text->encryptor->mail ruskie@ussr.ru but then that was back in the dark ages.... before Point and drool...
    (NOTE: I like to point and drool, I use NT for silly things) on the Linux/unix/BSD side the encryption interface is trivial... it's the intentional Abstraction of winblows that was in place to keep you from doing things like encrypting your mail or adding features to software that dont exist yet. (It still can be done.. cut and paste your text, run the win interface to PGP, bla bla bla.... easy as pie :-)

    Now if Eudora wanted to rise from the ashes... make a Unix,solaris,linux,Windows,mac,BE,etc... version with a pgp interface built in.... but it wont happen...

    Eough of my drivel... where's my old-farts walker..
  • I think the point was that if we use crypto on ALL our mail then the nosey bastards monitoring our mail will be kept busy decoding messages about fridays pub-night until they get bored with the whole endevour. If people are going to snoop lets make it as painful as possible...

    Hack the system!!!! (lol)
    • If I was a goverment agent in charge of snooping through email don't you think that I would have a scanner similar to a virus detector looking for encrypted messages?

    That's exactly the reason why we all should use encryption for _all_ of our messages.
  • I sync my mail with my Palm, so that I can play^H^H^H^Hwork a bit while commuting. Using encryption limits working with encrypted mails till I reach my desktop.

    Does anybody know of a Palm version? I'd settle for just being able to *read*

    ----------
    'We have no choice in what we are. Yet what are we,
    but the sum of our choices.' --Rob Grant
    ----------
  • But in Windows i use Outlook 98 for e-mail. It has support for PGP...which I have found is the easiest way to share crypto stuff. PGP integrates rather well in my experience...if you DO use Outlook it's a nice way to keep big brother from reading your plans to kill people or whatever scheme they say everyone is now planning through e-mail.
  • Mutt not only seamlessly interacts with PGP, but also with the GNU Privacy Guard (GPG). Mutt is absolutely fantastic as MUA. If you're really crazy, you can use it under windows by compiling it with cygwin/slang.
  • > Bandwidth is free, even at 56k.

    Not necessarily. It's free for most people, particulary (I imagine) for people in North America and Europe, but people in other parts of the world don't always have as many options.

    The only reason that I'm bothering to write this reply is that the 'bandwidth is free' needs to be challenged. I know of too many people on limited bandwith that keep getting sent things like large attachments because of that assumption.

    A month ago, I was paying NZ$3/hour access for 28k - hardly free bandwidth, and the university department where I work gets charged something like NZ$1/Mb.

    Roy Ward.

  • Enigma (Score:1)

    by damm0 ( 14229 )
    http://enigma.intouch.ca [intouch.ca]

    Some of you might be interested in a project called Enigma. It is open source, written entirely in Java, and works with just about any e-mail package. Enigma works by being a proxy server decrypting all e-mail and intelligently encrypting e-mail according to who is on your keyring.

  • There are a few small problems:
    • Encrypting something more than once doesn't really make it more secure.
    • Your own algorithm is probably not as strong as XOR, let alone DES.
    • MPEG is lossy
    • Security guards are not reliable information conduits
    • It isn't e-mail.
  • WinVN, a pretty low-power newsreader, has ROT13 and is freely available. No killfile, last I checked, tho.

    Also, I believe tin has ROT13, but I've never been a fan of textmode newsreading, for whatever reason.

  • That's basically what happened with the Amiga's XPK interface. It was originally intended as a general-purpose interface for compression routines. But over time it got to be rather widely used for crypto too. It's really just a general-purpose data-munging API.

  • Makes you wonder whether the antiencryption spooks are behind the mail viruses, doesn't it?

    Well, actually, it looks more like clueless admins rather than spooks, but I guess you never know. They are virus-scanning at the wrong point.

  • I would say that entirely depends on what country you're in. Man, why do I even bother to reply to this? ;-)
  • Well... if you use PGP for Windows or Macintosh, you get this nifty menu that allows you to encrypt/sign or decrypt/verify any selected text.

    This setup won't work with PGP/MIME, (multipart/encrypted), but it will work with inline stuff (you know, the messages that start with "START PGP SIGNED MESSAGE" or whatever it is).
  • if someone is green to pgp than by far the easiest and most foolproof way to get them up and running is via pgp's native mail client plugins for outlook, outlook express, and eudora.

    my suggestion is eudora light 3.0.6, at www.eudora.com [eudora.com]. intutitive interface (remember netscape mail three ugly panes from hell? phooey.) and simple.

    then stop by www.pgpi.com [pgpi.com] to pick up your preferred pgp version. 6.0.2 freeware works fine for people in the us. you'll want 6.0.2i (the international version) if you want backward compatibility, though. the great 'client selection wizard' will get most people through.

    once you get these two programs up and running exchanging encrypted e-mails is a snap. just click 'encrypt/decrypt' (or sign, or whatever) right in eudora.

    good luck. i've always believed that as more and more people use pgp, the 'digital worth' of each pgp-encrypted message increases. please help as many people as possible to download, use, and support pgp. it helps us all.

    www.pgpi.com [pgpi.com]
    www.pgp.net [pgp.net]
    wwwkeys.pgp.net [pgp.net]

  • PGP (Score:1)

    by thb3 ( 19142 )
    Network Associates PGP 6.0.2 integrates with Microsoft Outlook, Outlook Express, Netscape Mail, and Eudora Mail clients. You can download it free from their webpage. This is for Windows only though, I'm not sure about Unix or the mac platform.
  • The link below will take you to what I believe to be the most extensive webpage on Encryption and Security. From free win based ssh clients to information about the Australian NSA.

    Here it is! [auckland.ac.nz]
  • a few would imply three.

    your subject should have been "here's a deluge"

    as someone else noted POST THE URL AND DON'T WASTE MY TIME AND BANDWIDTH !!

    if i just had some moderator points now, grrr

    -Anthony
  • It seems to me that exactly what Sun is doing with Java2 and JCE.
    A set of abstract classes, useless until you bought the corresponding "real" classes, from Sun is the US, or elsewhere (IAIK here in Europe).

    Correct me if I'm wrong, but what's different from pluggable encryption in a MUA ?

  • What?? having 2 or more 160bit keyID/fingerprint?

    160 bits means approx
    146000000000000000000000000000000000000000000000 0
    possible.
  • exactly; and we should encrypt the most mundane of our communications most of all, to *really* piss them off. if some agency has to use some really expensive cracking hardware and up-time to find out what time i'm meeting my girlfriend at the cinema tonight, i'm that little bit happier...
  • I'm the poster, and yes, I did post twice accidentally (/. threw an error), changing it slightly on the repost. And I moderated down someone else's duplicate the other day, so I'm not sore .. but thanks for the defence.
  • Another barrier to encryption is the use of virus sweepers; some sysadmins are now paranoid about mail viruses, and process all the mail through some filter that gives them a warm fuzzy feeling (and probably little else).

    These systems can't work with encrypted mail (obviously) .. as a result, we've just been asked to remove both encrypters and decrypters from our systems.

    Makes you wonder whether the antiencryption spooks are behind the mail viruses, doesn't it ?
  • Unfortunately the current version of mutt does not allow you to 'fake' e-mail. It only allows you to send 'real' e-mail. I sincerly hope the developers will consider add this feature in the future. Pretending to send e-mail is sure fun. If had a real computer instead of this card board box with screen dump of a VMS session taped to it, I'd send real e-mail.

    PS: If you really feel the need to send a 'fake' e-mail, you can do it the hardcore way, if your up to it... ( warning: only for the truly 3lit3) Okay, here it is, all you need to do is address a postcard to root@127.0.0.1 and drop it into the mail box. Works every time. Sounds simple doesn't it? It's really difficult to trace too!

    Hey, have you ever gotten any bounced messages doing this? ;-p

  • Netscape doesn't support PGP encryption. There's been a lot of discussion over at the mozilla crypto newsgroup [mozilla.org] on the hows and whys. Basically, AOL/Netscape's interpretation of the stupid US cryptography export regulations [doc.gov] prevents them from even exposing their API for cryptographic processing. Some folks at NAI volunteered to help out, which elicited some favorable noises on the part of Mozilla, but no visible action. They may be working on it behind the scenes however.

    Netscape Messenger owns a huge share of the Internet email client market. The lack of PGP support is a substantial impediment to the widespread adoption of PGP as a standard for Windows email. I'm not too fond of NAI, but I'd like to see this particular product succeed, since it's in such widespread use on Unix.

  • Re:Well... (Score:3)

    by gasp ( 128583 ) on Monday July 05, 1999 @02:47AM (#1818400)
    I agree that everybody should use encryption all the time. The best analogy I've heard is to snail mail:

    Encryption is an envelope. I notice that almost all snail mail is sent in envelopes instead of postcards.

    I suspect that if most users inherently understood this analogy and the technology underneath, the desire for encryption would be much more widespread.

Slashdot Top Deals

The Tao is like a glob pattern: used but never used up. It is like the extern void: filled with infinite possibilities.

Close