[SPAM -0.7] Re: PGP

From: Tom Keays <tomkeays_at_nyob>
Date: Fri, 28 Oct 2016 21:05:09 -0400
To: CODE4LIB_at_LISTS.CLIR.ORG
Spam detection software, running on the system "avery.infomotions.com",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
eric_morgan_at_infomotions.com for details.

Content preview:  I've been using the Mailvelope plugin for Chrome (there's
  also one for Firefox) to manage PGP keys. It integrates with Gmail (and other
   webmail clients) and, in my opinion, has quite good usability. https://www.mailvelope.com/
   [...] 

Content analysis details:   (-0.7 points, -1.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                            (tomkeays[at]gmail.com)
-0.6 RP_MATCHES_RCVD        Envelope sender domain matches handover relay domain
 1.5 SUBJ_ALL_CAPS          Subject is all capitals
-0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 0.0 T_HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                            domains are different
 0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                            domains are different
-0.0 SPF_PASS               SPF: sender matches SPF record
 0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
                            CUSTOM_MED
-1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                            [score: 0.0000]
 0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
                             freemail headers are different
 0.0 T_FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
                            EnvelopeFrom freemail headers are different



attached mail follows:


I've been using the Mailvelope plugin for Chrome (there's also one for
Firefox) to manage PGP keys. It integrates with Gmail (and other webmail
clients) and, in my opinion, has quite good usability.

https://www.mailvelope.com/

The problem then becomes finding others who also have PGP keys and
encouraging your friends and colleagues to encrypt. You need a certain
critical mass of people who use the technology for it to be anything but a
curiosity.

I also have a Protonmail mail account, which does end-to-end PGP encryption
with other Protonmail users. Emails sent within the system are
automatically encrypted, since Protonmail itself manages and applies the
public PGP keys. Private keys are supposed to be encrypted within your
individual account using a passcode you have to enter when you first login
and therefore not accessible by Protonmail employees.

https://protonmail.com/

Again, the problem is that I don't correspond with anybody else who uses
the service.

You can also share your Protonmail PGP key so people not using that mail
system can send you encrypted messages. The big omission is that they have
not provided a built-in keychain in Protonmail so you can send encrypted
messages back.

Back in June of 2014, Google announced its End-to-End encryption plugin for
Chrome, which was intended to add Protonmail-like encryption to Gmail, but
two years later it is still not released.

https://github.com/google/end-to-end

Tom Keays
tomkeays_at_gmail.com

*Key*: http://tomkeays.com/files/pgp/gmail_public_tomkeays.txt
*Fingerprint*: 7DEB D2DE B079 EE61 5401 784D D741 00E2 BAE9 03A7
Received on Fri Oct 28 2016 - 21:06:15 EDT