Language Selection

English French German Italian Portuguese Spanish

PGP Web of Trust: Core Concepts Behind Trusted Communication

Filed under
Security

If you've ever used Linux, you've most likely used OpenPGP without even realizing it. The open-source implementation of OpenPGP is called GnuPG (stands for "GNU Privacy Guard"), and nearly all distributions rely on GnuPG for package integrity verification. Next time you run "yum install" or "yum update", each package will be verified against its cryptographic signature before it is allowed to be installed on your system. This assures that the software has not been altered between the time it was cryptographically signed by distribution developers on the master server, and the time it was downloaded to your system.

However, far fewer people have actually used GnuPG for what it was originally designed for -- secure exchange of information in an untrusted medium (such as the internet), and even fewer have a good understanding of how the trust relationships are supposed to work.

In this mini series of articles, we'll take a look at what the web of trust is and how to use it to set up a secure and trusted communication.

Read more

More in Tux Machines

Q4OS Is an Interesting Windows Clone and Linux Distro at the Same Time

Q4OS is a Linux operating system that implements a desktop environment that is very similar with the older Windows versions. The developer have just released a new update and they are now much closer to a much stable release. Read more

New Releases

Here’s How to Create the Perfect Ubuntu Origami Unicorn - Video

After announcing last week the Ubuntu Origami Unicorn contest, which can bring an awesome new BQ Aquaris E4.5 Ubuntu Edition phone to a user that folds the best-looking Unicorn, today Canonical decided that it’s finally time to show the world how to make the perfect origami unicorn. Read more Also: Canonical Eyes Telecom, NFV Innovation with Ericsson Cloud Partnership

Docker 1.6 Coming April 7

Some of the big additions set to debut in Docker 1.6 will be a native Windows client. Building Docker images will also get a boost with the ability to building images from an image ID as well as having the ability to impose constraints (memory etc) on images. Read more Also: Could Docker replace package management?