Two
great things about PGP software is that the privacy is a whole lot better than
"pretty good", and it's free. Here are a couple of options:
- You can get the PGP.com
freeware for Windows and Macintosh; or
- You can use the GNU Privacy Guard from the Free Software Foundation, which is available on a wide variety of platforms.
I can recommend the basic book on PGP, PGP: Pretty Good Privacy by Simson Garfinkel, although there are many more available that are more recent. There's also lots of information on the Web.
If you're looking for something more advanced on the whole topic of digital certificates, encryption, and Internet security in general, I can very highly recommend the outstanding Web Security, Privacy, and Commerce by Simson Garfinkel and Gene Spafford.
Look up anyone's PGP public key on MIT's public key server.
My PGP Public Keys
The Internet is a great medium for keeping in touch with one another, but it is also inherently insecure. In other words, a clever snoop can eavesdrop on your communications if you don't take precautions. E-mail is particularly vulnerable, but fortunately, there is an easy solution.
Back in the early 1970's, the technique of public key cryptography was invented, and now it is easily available to you through Pretty Good Privacy, or PGP. Public key cryptography is based on my having two keys: a public key that I make available to the world, and a private key that I keep secret. Anyone who wishes to send me private e-mail, has an e-mail program that can understand PGP, and has my PGP public key, can encrypt the message and send it to me in the knowledge that it won't be read by anyone else as it travels across the Net. Another nice feature is that I can digitally sign any e-mail I send to you using my private key and you can verify that it did, in fact, come from me.
Once you get the PGP software installed and running, you'll then need to download my public keys. I have two public keys: one for e-mail to me at the White Spot (North) and another for e-mail to me at Sun Microsystems. If you have recent versions of either the PGP.com freeware or the GNU Privacy Guard, download the versions below that use the PGP 6.x extensions.
| My wspot.net Public Key | |
| Key ID: | 7D46039A |
| Get It: |
My wspot.net public key, with PGP 6.x
extensions [ View It ] My wspot.net public key, for older versions of PGP [ View It ] |
| PGP Fingerprint: | EA2C 43E3 C408 D755 3803 26D8 CE88 71B3 7D46 039A |
| My sun.com Public Key | |
| Key ID: | DB49A4FE |
| Get It: |
My sun.com public key, with PGP 6.x
extensions [ View It ] My sun.com public key, for older versions of PGP [ View It ] |
| PGP Fingerprint: | 228C 26DE 8AAF E150 B3DC 26F4 FE90 34DA DB49 A4FE |
White Spot (North) x.509 Certificates
Since I run several different web services on my server, and I do try to make the server as secure as possible (and I'm too cheap to spring for a commercial signature), I have also established my own little certificate authority (CA) and x.509 certificates for the White Spot (North). If you come across the need to add these certificates to your keychain, just to make sure the information is truly coming from me, here they are.
| CA Root Certificate | |
| Get It: | White Spot (North) CA Root Certificate [ View It ] |
| MD5 Digest: | 1D:55:DC:9F:D7:5D:F8:1C:96:09:E7:C5:21:F4:67:AF |
| SHA1 Digest: | 38:FB:02:91:FF:FD:4A:A4:5F:36:82:09:F7:85:C9:AE:58:11:E3:CD |
| HTTP Server Certificate | |
| Get It: | White Spot (North) HTTP Server Certificate [ View It ] |
| MD5 Digest: | DA:1A:9E:2F:32:3D:55:52:70:0C:F8:69:FD:F0:7B:31 |
| SHA1 Digest: | 64:74:0F:D6:C1:92:CB:E7:00:EB:9A:5E:E9:3A:35:D8:20:71:61:88 |
| Mail Server Certificate | |
| Get It: | White Spot (North) Mail Server Certificate [ View It ] |
| MD5 Digest: | C6:67:E3:D3:88:40:B6:B7:1E:37:31:94:E4:E4:EE:3B |
| SHA1 Digest: | 97:59:8F:BB:01:79:8A:C0:0F:09:2A:8B:9D:89:68:89:5F:B2:CD:CA |
