Language Selection

English French German Italian Portuguese Spanish

PGP Web of Trust: Core Concepts Behind Trusted Communication

Filed under
Security

If you've ever used Linux, you've most likely used OpenPGP without even realizing it. The open-source implementation of OpenPGP is called GnuPG (stands for "GNU Privacy Guard"), and nearly all distributions rely on GnuPG for package integrity verification. Next time you run "yum install" or "yum update", each package will be verified against its cryptographic signature before it is allowed to be installed on your system. This assures that the software has not been altered between the time it was cryptographically signed by distribution developers on the master server, and the time it was downloaded to your system.

However, far fewer people have actually used GnuPG for what it was originally designed for -- secure exchange of information in an untrusted medium (such as the internet), and even fewer have a good understanding of how the trust relationships are supposed to work.

In this mini series of articles, we'll take a look at what the web of trust is and how to use it to set up a secure and trusted communication.

Read more

More in Tux Machines

Security News

New Input Drivers and TinyDRM in Linux 4.11 Kernel

  • New Input Drivers For The Linux 4.11 Kernel
    Dmitry Torokhov has submitted the input feature updates for the Linux 4.11 kernel merge window. One of the new input drivers for Linux 4.11 is the Zeitech touchscreen controller. The new Zeitec driver is zet6223 and supports the ZET6223 I2C touchscreen controller. Another new driver is for Samsung "touchkeys." The Samsung Touchkey support is the new tm2-touchkey driver and allows for touch key and LED functionality on the Exynos 5433 TM2 development board.
  • TinyDRM Queued For Linux 4.11
    TinyDRM has been queued in DRM-Next for landing with the in-development Linux 4.11 kernel. TinyDRM aims to provide "a very simplified view of DRM for displays that has onboard video memory and is connected through a slow bus like SPI/I2C." TinyDRM includes SPI and MIPI-DBI support.

Latvian Ventspils controls costs with open source

The administration of Ventspils, Latvia’s sixth largest city, is an avid user of free and open source software. The main benefits: cost and resource optimisation. Read more

Ubuntu Touch finds a home on a conflict-free, fair-trade, user-maintainable handset

Handset maker Fairphone is teaming up with the community project UBports, which seeks to get Ubuntu Touch on mobile devices. They will be showing off Ubuntu Touch running on the Fairphone 2 during Mobile World Congress, which starts February 27 in Barcelona. While Ubuntu is probably not the first name that comes to mind when you think of mobile devices, the phone in question offers some compelling features. “UBports Foundation will be showcasing its work at the Canonical booth, the company behind Ubuntu. Canonical is planning to tell about the latest developments around the convergence of its devices and UBports Foundation will share its mission ‘Ubuntu On Every Device’ with the visitors,” UBports said in a February 8 press release. Currently, UBports’ website lists three devices as “fully working as daily drivers:” The OnePlus One, Nexus 5, and the Fairphone 2, with the latter showing all parts as functioning with Ubuntu Touch, save the GPS radio. (Interestingly, the UBports project website for the Fairphone 2 still lists the GSM radio [in addition to the GPS] as a work in progress. However there is a video of two people talking with the handset, so it’s likely the Fairphone 2 project website is out of date.) The website also has instructions for flashing Ubuntu to the Fairphone 2. Read more