[Enigmail] Hello Enigmail, new user here!

Robert J. Hansen rjh at sixdemonbag.org
Mon Mar 10 13:41:30 PDT 2008


Dogssup wrote:
> Open source is awesome :)

It can be.  :)  Welcome to the Enigmail list.

> Now, I don't know exactly what I'm doing but I'm including my public key
> at the bottom.

You've already received good advice on why the keyservers are a good 
idea, so I'll just add a "me, too".

> I'd think putting the public
> key on a server is safer to avoid the risk of it being altered?

Phil and Olav have given you answers that look contradictory.  They're 
not.  Both answers are correct _within their particular threat model_.

A threat model is a description of what sorts of attacks you believe 
you're likely to encounter.  Phil believes MitM attacks are unlikely to 
be used against him; Olav believes MitM attacks are possible and should 
be considered.  Which one of the two you wish to believe will depend a 
lot on your own particular threat model.

My own two cents' worth: learn what threats are possible, study things 
and decide which sorts of attacks are likely, and then you'll find most 
of your questions answer themselves.  :)




More information about the Enigmail mailing list