{"action":"created","comment":{"url":"https://api.github.com/repos/freedomofpress/encryption-works/pulls/comments/35614265","id":35614265,"diff_hunk":"@@ -220,37 +220,28 @@ With the release of OTR 4.0 in September 2012, Pidgin stopped logging OTR conver\n \n ## \"Pretty Good Privacy\" (PGP) Email Encryption\n \n-In 1991, Phil Zimmermann developed email encryption software called [Pretty Good Privacy](https://en.wikipedia.org/wiki/Pretty_Good_Privacy), or PGP, which he intended peace activists to use while organizing in the anti-nuclear movement.\n+PGP stands for \"Pretty Good Privacy,\" software you can use to encrypt your e-mail messages. GPG is a free, open-source version of this software. The terms PGP and GPG are often used interchangeably. Unfortunately, the process is notoriously hard to use, as evidenced by Glenn Greenwald initially being \n+[unable](http://www.huffingtonpost.com/2013/06/10/edward-snowden-glenn-greenwald_n_3416978.html?1370895818) to set it up and talk security with Edward Snowden.\n \n-Today, PGP is a company that sells a proprietary encryption program by the same name. [OpenPGP](http://openpgp.org/) is the open protocol that defines how PGP encryption works, and [GnuPG](http://www.gnupg.org/) (GPG for short) is free software, and is 100% compatible with the proprietary version. GPG is much more popular than PGP today because it's free for everyone to download, and cypherpunks trust it more because it's open source. The terms PGP and GPG are often used interchangably.\n+If you use PGP encryption, you will have to make some changes about how you use e-mail. For example, if you use PGP on your computer but receive an encrypted e-mail on your phone, you won't be able to decrypt the e-mail and read it until you get back to your computer.\n \n-Unfortunately, PGP is notoriously hard to use, as exemplified by [Greenwald explaining how he could not initially talk to Edward Snowden because it was so difficult to set up](http://www.huffingtonpost.com/2013/06/10/edward-snowden-glenn-greenwald_n_3416978.html?1370895818).\n+PGP is used in two ways with e-mail: a sender can encrypt the content of e-mail messages, and sign messages, proving that the message the sender sent is the same one the receiver reads, and that it wasn't tampered with in transit. (Assuming you trust the public key -- more on this later.)\n \n-### Keypairs and Keyrings\n+On the other end, the receiver uses PGP to decrypt the message and verify the e-mail's digital signature.\n \n-As with OTR, each person who wishes to send or receive encrypted email needs to generate their own PGP key, called a keypair. PGP keypairs are split into two parts, the public key and the secret key.\n+### What's a key? \n \n-If you have someone's public key, you can do two things: **encrypt messages** that can only be decrypted with their secret key, and **verify signatures** that were generated with their secret key. It's safe to give your public key to anyone who wants it. The worst anyone can do with it is encrypt messages that only you can decrypt.\n+PGP uses a public key and a private key, both strings of randomly-generated numbers and letters unique to each person. Information about the public key is stored on something called a public key server, which is a bit like a phonebook. When people want to e-mail you securely, they can look up your public key and send you an encrypted e-mail. \n \n-With your secret key you can do two things: **decrypt messages** that were encrypted using your public key, and **digitally sign messages**. It's important to keep your secret key secret. An attacker with your secret key can decrypt messages intended only for you, and he can forge messages on your behalf. Secret keys are generally encrypted with a passphrase, so even if your computer gets compromised and your secret key gets stolen, the attacker would need to get your passphrase before he would have access to it. Unlike OTR, PGP does not have forward secrecy. If your PGP secret key is compromised and the attacker has copies of any historical encrypted emails you have received, he can go back and retro-actively decrypt them all.\n+Like OTR, each PGP key has a unique fingerprint. You can find a copy of my public key on [MIT's keyserver](https://pgp.mit.edu/pks/lookup?op=get&search=0xE7E8E7D097604F9D), and my fingerprint is 696E C53E 8535 6DE8 10C3 75D2 E7E8 E7D0 9760 4F9D. If you look at my public key, you'll see that it's long and would be difficult to verbally confirm with another person. A fingerprint is a short and more convenient way to uniquely represent a key. ","path":"encryption_works.md","position":24,"original_position":24,"commit_id":"4f2995bb975eea72f6c7d4181234ece7654941d2","original_commit_id":"4f2995bb975eea72f6c7d4181234ece7654941d2","user":{"login":"trevortimm","id":5478801,"avatar_url":"https://avatars.githubusercontent.com/u/5478801?v=3","gravatar_id":"","url":"https://api.github.com/users/trevortimm","html_url":"https://github.com/trevortimm","followers_url":"https://api.github.com/users/trevortimm/followers","following_url":"https://api.github.com/users/trevortimm/following{/other_user}","gists_url":"https://api.github.com/users/trevortimm/gists{/gist_id}","starred_url":"https://api.github.com/users/trevortimm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/trevortimm/subscriptions","organizations_url":"https://api.github.com/users/trevortimm/orgs","repos_url":"https://api.github.com/users/trevortimm/repos","events_url":"https://api.github.com/users/trevortimm/events{/privacy}","received_events_url":"https://api.github.com/users/trevortimm/received_events","type":"User","site_admin":false},"body":"Since we're going to keep this from being in the first person, you should say, \"Here's an example of a public key from one of the authors of this guide.\"","created_at":"2015-07-28T05:00:54Z","updated_at":"2015-07-28T05:00:54Z","html_url":"https://github.com/freedomofpress/encryption-works/pull/77#discussion_r35614265","pull_request_url":"https://api.github.com/repos/freedomofpress/encryption-works/pulls/77","_links":{"self":{"href":"https://api.github.com/repos/freedomofpress/encryption-works/pulls/comments/35614265"},"html":{"href":"https://github.com/freedomofpress/encryption-works/pull/77#discussion_r35614265"},"pull_request":{"href":"https://api.github.com/repos/freedomofpress/encryption-works/pulls/77"}}},"pull_request":{"url":"https://api.github.com/repos/freedomofpress/encryption-works/pulls/77","id":40054827,"html_url":"https://github.com/freedomofpress/encryption-works/pull/77","diff_url":"https://github.com/freedomofpress/encryption-works/pull/77.diff","patch_url":"https://github.com/freedomofpress/encryption-works/pull/77.patch","issue_url":"https://api.github.com/repos/freedomofpress/encryption-works/issues/77","number":77,"state":"open","locked":false,"title":"Updating PGP intro, adding web of trust section","user":{"login":"tommycollison","id":398046,"avatar_url":"https://avatars.githubusercontent.com/u/398046?v=3","gravatar_id":"","url":"https://api.github.com/users/tommycollison","html_url":"https://github.com/tommycollison","followers_url":"https://api.github.com/users/tommycollison/followers","following_url":"https://api.github.com/users/tommycollison/following{/other_user}","gists_url":"https://api.github.com/users/tommycollison/gists{/gist_id}","starred_url":"https://api.github.com/users/tommycollison/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tommycollison/subscriptions","organizations_url":"https://api.github.com/users/tommycollison/orgs","repos_url":"https://api.github.com/users/tommycollison/repos","events_url":"https://api.github.com/users/tommycollison/events{/privacy}","received_events_url":"https://api.github.com/users/tommycollison/received_events","type":"User","site_admin":false},"body":"As per #76.\r\n\r\n- simplifying language \r\n- shortening the section on keypairs and keyrings, moved it to a different section in PGP. (See https://github.com/freedomofpress/encryption-works/issues/39)\r\n- removed the password section, moved to the threat modeling section (see https://github.com/tommycollison/encryption-works/commit/bd11c7a07986b48db28775d8e97a258f1e85eba0)","created_at":"2015-07-15T18:38:40Z","updated_at":"2015-07-28T05:00:54Z","closed_at":null,"merged_at":null,"merge_commit_sha":"0d4af6d1361012bdf451a2ee5cfe44cd37d12c8e","assignee":null,"milestone":null,"commits_url":"https://api.github.com/repos/freedomofpress/encryption-works/pulls/77/commits","review_comments_url":"https://api.github.com/repos/freedomofpress/encryption-works/pulls/77/comments","review_comment_url":"https://api.github.com/repos/freedomofpress/encryption-works/pulls/comments{/number}","comments_url":"https://api.github.com/repos/freedomofpress/encryption-works/issues/77/comments","statuses_url":"https://api.github.com/repos/freedomofpress/encryption-works/statuses/4f2995bb975eea72f6c7d4181234ece7654941d2","head":{"label":"tommycollison:issue_76_pgp_intro","ref":"issue_76_pgp_intro","sha":"4f2995bb975eea72f6c7d4181234ece7654941d2","user":{"login":"tommycollison","id":398046,"avatar_url":"https://avatars.githubusercontent.com/u/398046?v=3","gravatar_id":"","url":"https://api.github.com/users/tommycollison","html_url":"https://github.com/tommycollison","followers_url":"https://api.github.com/users/tommycollison/followers","following_url":"https://api.github.com/users/tommycollison/following{/other_user}","gists_url":"https://api.github.com/users/tommycollison/gists{/gist_id}","starred_url":"https://api.github.com/users/tommycollison/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tommycollison/subscriptions","organizations_url":"https://api.github.com/users/tommycollison/orgs","repos_url":"https://api.github.com/users/tommycollison/repos","events_url":"https://api.github.com/users/tommycollison/events{/privacy}","received_events_url":"https://api.github.com/users/tommycollison/received_events","type":"User","site_admin":false},"repo":{"id":36692012,"name":"encryption-works","full_name":"tommycollison/encryption-works","owner":{"login":"tommycollison","id":398046,"avatar_url":"https://avatars.githubusercontent.com/u/398046?v=3","gravatar_id":"","url":"https://api.github.com/users/tommycollison","html_url":"https://github.com/tommycollison","followers_url":"https://api.github.com/users/tommycollison/followers","following_url":"https://api.github.com/users/tommycollison/following{/other_user}","gists_url":"https://api.github.com/users/tommycollison/gists{/gist_id}","starred_url":"https://api.github.com/users/tommycollison/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tommycollison/subscriptions","organizations_url":"https://api.github.com/users/tommycollison/orgs","repos_url":"https://api.github.com/users/tommycollison/repos","events_url":"https://api.github.com/users/tommycollison/events{/privacy}","received_events_url":"https://api.github.com/users/tommycollison/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/tommycollison/encryption-works","description":"Encryption Works: How to Protect Your Privacy in the Age of NSA Surveillance","fork":true,"url":"https://api.github.com/repos/tommycollison/encryption-works","forks_url":"https://api.github.com/repos/tommycollison/encryption-works/forks","keys_url":"https://api.github.com/repos/tommycollison/encryption-works/keys{/key_id}","collaborators_url":"https://api.github.com/repos/tommycollison/encryption-works/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/tommycollison/encryption-works/teams","hooks_url":"https://api.github.com/repos/tommycollison/encryption-works/hooks","issue_events_url":"https://api.github.com/repos/tommycollison/encryption-works/issues/events{/number}","events_url":"https://api.github.com/repos/tommycollison/encryption-works/events","assignees_url":"https://api.github.com/repos/tommycollison/encryption-works/assignees{/user}","branches_url":"https://api.github.com/repos/tommycollison/encryption-works/branches{/branch}","tags_url":"https://api.github.com/repos/tommycollison/encryption-works/tags","blobs_url":"https://api.github.com/repos/tommycollison/encryption-works/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/tommycollison/encryption-works/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/tommycollison/encryption-works/git/refs{/sha}","trees_url":"https://api.github.com/repos/tommycollison/encryption-works/git/trees{/sha}","statuses_url":"https://api.github.com/repos/tommycollison/encryption-works/statuses/{sha}","languages_url":"https://api.github.com/repos/tommycollison/encryption-works/languages","stargazers_url":"https://api.github.com/repos/tommycollison/encryption-works/stargazers","contributors_url":"https://api.github.com/repos/tommycollison/encryption-works/contributors","subscribers_url":"https://api.github.com/repos/tommycollison/encryption-works/subscribers","subscription_url":"https://api.github.com/repos/tommycollison/encryption-works/subscription","commits_url":"https://api.github.com/repos/tommycollison/encryption-works/commits{/sha}","git_commits_url":"https://api.github.com/repos/tommycollison/encryption-works/git/commits{/sha}","comments_url":"https://api.github.com/repos/tommycollison/encryption-works/comments{/number}","issue_comment_url":"https://api.github.com/repos/tommycollison/encryption-works/issues/comments{/number}","contents_url":"https://api.github.com/repos/tommycollison/encryption-works/contents/{+path}","compare_url":"https://api.github.com/repos/tommycollison/encryption-works/compare/{base}...{head}","merges_url":"https://api.github.com/repos/tommycollison/encryption-works/merges","archive_url":"https://api.github.com/repos/tommycollison/encryption-works/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/tommycollison/encryption-works/downloads","issues_url":"https://api.github.com/repos/tommycollison/encryption-works/issues{/number}","pulls_url":"https://api.github.com/repos/tommycollison/encryption-works/pulls{/number}","milestones_url":"https://api.github.com/repos/tommycollison/encryption-works/milestones{/number}","notifications_url":"https://api.github.com/repos/tommycollison/encryption-works/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/tommycollison/encryption-works/labels{/name}","releases_url":"https://api.github.com/repos/tommycollison/encryption-works/releases{/id}","created_at":"2015-06-01T22:11:53Z","updated_at":"2015-05-23T04:56:26Z","pushed_at":"2015-07-27T19:27:26Z","git_url":"git://github.com/tommycollison/encryption-works.git","ssh_url":"git@github.com:tommycollison/encryption-works.git","clone_url":"https://github.com/tommycollison/encryption-works.git","svn_url":"https://github.com/tommycollison/encryption-works","homepage":null,"size":3662,"stargazers_count":0,"watchers_count":0,"language":null,"has_issues":false,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"open_issues_count":0,"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"freedomofpress:master","ref":"master","sha":"b3d8fcaa56ae77170fed2aa0288a1579343f99ac","user":{"login":"freedomofpress","id":5388147,"avatar_url":"https://avatars.githubusercontent.com/u/5388147?v=3","gravatar_id":"","url":"https://api.github.com/users/freedomofpress","html_url":"https://github.com/freedomofpress","followers_url":"https://api.github.com/users/freedomofpress/followers","following_url":"https://api.github.com/users/freedomofpress/following{/other_user}","gists_url":"https://api.github.com/users/freedomofpress/gists{/gist_id}","starred_url":"https://api.github.com/users/freedomofpress/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/freedomofpress/subscriptions","organizations_url":"https://api.github.com/users/freedomofpress/orgs","repos_url":"https://api.github.com/users/freedomofpress/repos","events_url":"https://api.github.com/users/freedomofpress/events{/privacy}","received_events_url":"https://api.github.com/users/freedomofpress/received_events","type":"Organization","site_admin":false},"repo":{"id":12095323,"name":"encryption-works","full_name":"freedomofpress/encryption-works","owner":{"login":"freedomofpress","id":5388147,"avatar_url":"https://avatars.githubusercontent.com/u/5388147?v=3","gravatar_id":"","url":"https://api.github.com/users/freedomofpress","html_url":"https://github.com/freedomofpress","followers_url":"https://api.github.com/users/freedomofpress/followers","following_url":"https://api.github.com/users/freedomofpress/following{/other_user}","gists_url":"https://api.github.com/users/freedomofpress/gists{/gist_id}","starred_url":"https://api.github.com/users/freedomofpress/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/freedomofpress/subscriptions","organizations_url":"https://api.github.com/users/freedomofpress/orgs","repos_url":"https://api.github.com/users/freedomofpress/repos","events_url":"https://api.github.com/users/freedomofpress/events{/privacy}","received_events_url":"https://api.github.com/users/freedomofpress/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/freedomofpress/encryption-works","description":"Encryption Works: How to Protect Your Privacy in the Age of NSA Surveillance","fork":false,"url":"https://api.github.com/repos/freedomofpress/encryption-works","forks_url":"https://api.github.com/repos/freedomofpress/encryption-works/forks","keys_url":"https://api.github.com/repos/freedomofpress/encryption-works/keys{/key_id}","collaborators_url":"https://api.github.com/repos/freedomofpress/encryption-works/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/freedomofpress/encryption-works/teams","hooks_url":"https://api.github.com/repos/freedomofpress/encryption-works/hooks","issue_events_url":"https://api.github.com/repos/freedomofpress/encryption-works/issues/events{/number}","events_url":"https://api.github.com/repos/freedomofpress/encryption-works/events","assignees_url":"https://api.github.com/repos/freedomofpress/encryption-works/assignees{/user}","branches_url":"https://api.github.com/repos/freedomofpress/encryption-works/branches{/branch}","tags_url":"https://api.github.com/repos/freedomofpress/encryption-works/tags","blobs_url":"https://api.github.com/repos/freedomofpress/encryption-works/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/freedomofpress/encryption-works/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/freedomofpress/encryption-works/git/refs{/sha}","trees_url":"https://api.github.com/repos/freedomofpress/encryption-works/git/trees{/sha}","statuses_url":"https://api.github.com/repos/freedomofpress/encryption-works/statuses/{sha}","languages_url":"https://api.github.com/repos/freedomofpress/encryption-works/languages","stargazers_url":"https://api.github.com/repos/freedomofpress/encryption-works/stargazers","contributors_url":"https://api.github.com/repos/freedomofpress/encryption-works/contributors","subscribers_url":"https://api.github.com/repos/freedomofpress/encryption-works/subscribers","subscription_url":"https://api.github.com/repos/freedomofpress/encryption-works/subscription","commits_url":"https://api.github.com/repos/freedomofpress/encryption-works/commits{/sha}","git_commits_url":"https://api.github.com/repos/freedomofpress/encryption-works/git/commits{/sha}","comments_url":"https://api.github.com/repos/freedomofpress/encryption-works/comments{/number}","issue_comment_url":"https://api.github.com/repos/freedomofpress/encryption-works/issues/comments{/number}","contents_url":"https://api.github.com/repos/freedomofpress/encryption-works/contents/{+path}","compare_url":"https://api.github.com/repos/freedomofpress/encryption-works/compare/{base}...{head}","merges_url":"https://api.github.com/repos/freedomofpress/encryption-works/merges","archive_url":"https://api.github.com/repos/freedomofpress/encryption-works/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/freedomofpress/encryption-works/downloads","issues_url":"https://api.github.com/repos/freedomofpress/encryption-works/issues{/number}","pulls_url":"https://api.github.com/repos/freedomofpress/encryption-works/pulls{/number}","milestones_url":"https://api.github.com/repos/freedomofpress/encryption-works/milestones{/number}","notifications_url":"https://api.github.com/repos/freedomofpress/encryption-works/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/freedomofpress/encryption-works/labels{/name}","releases_url":"https://api.github.com/repos/freedomofpress/encryption-works/releases{/id}","created_at":"2013-08-13T23:18:30Z","updated_at":"2015-07-20T14:40:58Z","pushed_at":"2015-07-27T19:27:26Z","git_url":"git://github.com/freedomofpress/encryption-works.git","ssh_url":"git@github.com:freedomofpress/encryption-works.git","clone_url":"https://github.com/freedomofpress/encryption-works.git","svn_url":"https://github.com/freedomofpress/encryption-works","homepage":null,"size":3827,"stargazers_count":171,"watchers_count":171,"language":null,"has_issues":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":26,"mirror_url":null,"open_issues_count":68,"forks":26,"open_issues":68,"watchers":171,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/freedomofpress/encryption-works/pulls/77"},"html":{"href":"https://github.com/freedomofpress/encryption-works/pull/77"},"issue":{"href":"https://api.github.com/repos/freedomofpress/encryption-works/issues/77"},"comments":{"href":"https://api.github.com/repos/freedomofpress/encryption-works/issues/77/comments"},"review_comments":{"href":"https://api.github.com/repos/freedomofpress/encryption-works/pulls/77/comments"},"review_comment":{"href":"https://api.github.com/repos/freedomofpress/encryption-works/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/freedomofpress/encryption-works/pulls/77/commits"},"statuses":{"href":"https://api.github.com/repos/freedomofpress/encryption-works/statuses/4f2995bb975eea72f6c7d4181234ece7654941d2"}}}}