Silk Road forums

Discussion => Security => Topic started by: cancercandy on October 17, 2012, 11:33 pm

Title: GPG help *SOLVED Thanks Deadfuture*
Post by: cancercandy on October 17, 2012, 11:33 pm
I screwed up the PGP process in placing an order, and this particular vendor only accepts it. Here is the process as as I understand it.

    In GNU privacy assistant import vendors public code.

    In Clipboard write message (Name/shipping address)

    add my public key at end of message.

    encrypt using vendors public key. The text will now look like gibberish.

    Copy the entire section of text

    Paste into a PM to vendors SR account.

    Send message.

This is how I understand it. I've heard of signing the message. I don't understand the "signing" part and when I do it or if it is even necessary. Is this right? please correct anything I have wrong and any info/tips you might have
Title: Re: GPG help
Post by: deadfuture on October 17, 2012, 11:45 pm
Sounds like you did everything right mostly right.  Signing is verifying that you are who you say you are, they check their previous signature from you and make sure it's the same, essentially it's the same as including your public key at the end.  For our purposes this is really not necessary unless they want to send a DCN or other sensitive information.  I, for one, never sign my messages on orders or send them my public key.  Type in your address, encrypt with their public key, copy and paste.
Title: Re: GPG help
Post by: cancercandy on October 18, 2012, 12:11 am
Fantastic. I feel a lot more comfortable with this now. Thank you Thank you
Title: Re: GPG help *SOLVED Thanks Deadfuture*
Post by: deadfuture on October 18, 2012, 01:58 am
No problem, glad I could help!
Title: Re: GPG help *SOLVED Thanks Deadfuture*
Post by: psychedlik on October 18, 2012, 08:16 pm
You helped me alot man thanks!! ;D wow I can understand how that freaking PGP GPG or whatever* encryption system works ! hehe FULL THANKS!


PEACE!