deutsch | english | français  
Header: cdrnet - Keys: Secure Communication


Secure Communication

Encrypted Email

In the age of broad monitoring I prefer cyphered ways of communication. Regarding email, there are two concepts available: on one hand s/mine, on the other the a little bit less widespread but essentially safer PGP. So I usually sign my out going emails, in hope to get the replies encrypted using the provided public key.

s/mime

s/mime is a well accepted and practically continuously available procedure, based on public certificates (PKI, public key infrastructure). Such certificates usually aren't free, but with Thawte and SwissSign there are at least one renowned international as well as a local swiss Root Certificate Authority that issue certificates free of charge (Web.de also offers certificates for their free mail service). Thawte even goes a step forward and additionally validates the identity of the certificate owner with its Web of Trust. In the meantime I have been checked by enough different notaries and therefore become a Thawte WOT Notary myself (in the city of Lucerne and all around Zurich ETH)

I have public keys from both Thawte and SwissSign. As world-wide second largest, first one is appropriately recognized and the root certificates are provided with most of the operating systems out of the box - the second one offers stronger keys and is not depending on the united states and therefore tendential better protected against an infiltration of unfair organizations like the NSA. The SwissSign Root Certificate may be installed on demand.

The SHA1 fingerprints of my s/mime certificates:
Thawte 1: d6 71 64 97 8c d6 73 56 97 4c 0f 05 2e 0e 59 eb 7d 81 a6 6e
Thawte 2: 2f 21 7e 65 ad d4 86 03 d2 d8 45 ac 0b 83 73 3b dc 93 39 11

PGP and GnuPG

Alternatively to s/mime I also work with PGP ("Pretty Good Privacy"). GnuPG is freely available and opensource, and (beside of the commercial PGP) there's also a freeware PGP version. Both can be found at PGPi.

My public key: download public key (DH/DSS 3072 Bits asc)
Fingerprint: F66C 7E6A 8D30 5EF3 34FD 4E89 742C 542B 6A73 00EF

Extract
:. Encryption
:. Signature
:. S/mime
:. SwissSign
:. Thawte
:. PGP
:. GnuPG
:. PKI

Weblogs in english
:. Projects

Weblogs in german
:. Gedanken
:. Projekte

Contact
:. contact form

Thawte WOT Notary