Silk Road forums
Support => Customer support => Topic started by: tnemnethgilne on June 12, 2013, 01:03 pm
-
Hello there, I've just become a seller on The Silk Road Marketplace. I've come across a couple of people asking me to post a PGP public key for message encryption on my listing. I believe that this thing is for extra security. (although why I would need it I don't know as I was led to believe Silk Road is safe from law enforcement or whoever)
Anyway, I don't know what this PGP public key is, I don't know how to get it, and I don't how to use it, please could you give me some advice & links to setting this thing up as I have a feeling I'm not going to get much business otherwise.
Thank you for your time regards A
-
PGP is quite important when it comes to sending names and address's! it ensures that only the vendor that the address is meant for can see it meaning that even if any communication was intercepted no one could retrieve personal information about the buyer.
If you use windows like me you can download Gpg4win from here:
**clearnet** http://www.gpg4win.org/
And there is a good youtube video on how to create you public and private key here:
**c;earnet** http://www.youtube.com/watch?v=R-FyJXUxVQ0
When you are installing gpg4win you will come to screen asking which components you would like to install. By default GPA is not checked and you need to make sure to check this!
-
PGP is quite important when it comes to sending names and address's! it ensures that only the vendor that the address is meant for can see it meaning that even if any communication was intercepted no one could retrieve personal information about the buyer.
If you use windows like me you can download Gpg4win from here:
**clearnet** http://www.gpg4win.org/
And there is a good youtube video on how to create you public and private key here:
**c;earnet** http://www.youtube.com/watch?v=R-FyJXUxVQ0
When you are installing gpg4win you will come to screen asking which components you would like to install. By default GPA is not checked and you need to make sure to check this!
Thank You Luvs2Trip (.....so do I as it happens) :)
However I'm a little confused.
In the youtube video, the fella mentions sending the public key to accounts@interpayroll.co.uk
is this right???????
I attempted to e-mail them at accounts@interpayroll.co.uk but an e-mail came back saying failure Delivery Status Notification, Delivery to the following recipients failed. this happened twice!
please could you give me a little advice on where I'm going wrong here
Best regards A
-
Please refer to the SR wiki, the link is in the sticky at the top of this board, you can read about PGP there. Also there are many very helpful threads in the forums including pines PGP club and PGP for newbies in the newbie sub forum.
You should take some time to familiarize yourself with how it works, it really is all quite simple though and just seems a bit onerous to begin with.
Good luck!
-
Thank You Luvs2Trip (.....so do I as it happens) :)
However I'm a little confused.
In the youtube video, the fella mentions sending the public key to accounts@interpayroll.co.uk
is this right???????
I attempted to e-mail them at accounts@interpayroll.co.uk but an e-mail came back saying failure Delivery Status Notification, Delivery to the following recipients failed. this happened twice!
please could you give me a little advice on where I'm going wrong here
Best regards A
Sorry for taking so long to reply but at that bit you don't enter 'accounts@interpayroll.co.uk' you enter your own email address. If you haven't already.... you need to set up a tormail address becuase this email will show up when people enter you pgp key and you want to make sure you remain anonymous! To help you a little more i have added a link to another page that will guide you through the steps also:
**clearnet** http://gpg4win.de/handbuecher/novices_6.html
-
Thank you Luvs2Trip,
that tutorial link was very helpful.
Just a couple more brief questions if I may.
I seem to have made a private key & a public key using this program,
however no program seems to have been assigned to them once they were created.
The private key is a .asc file (whatever that is?) the public key does not identify what type of file it is.
Please could you tell me what program will open these two files?
My second question is: ....... am I right in saying that.....
There will be a big long line of code in there which I post on my silk road listing?
Then what happens? I just don't see how this long line of code protects my communications
Thanks for your help much appreciated A
-
First I just want to make you aware that once you give out your public key and people import it into there pgp program they will see the email address that you have used. If you have used a personal email from something like hotmail I would scrap it and start again and make sure you have a tormail account as these are anonymous!
Go into GPA and you should see your key in the key manager. Right click on the key and select send key this will send you key to the servers so people will be able to use it.
Right click on you key again and select export key. It will bring up a box asking where you want to save it so select somewhere you will be able to locate afterwards. Where is says name at the top just type in anything you want to call it followed by .txt e.g mykey.txt
This will create a text document with you public key in it. This is what you need to post in your listings.
What people then do with you public key is copy it into a text file and save it on there computer. They then click import and locate the text file which will add your key to there key manager (this is the bit where they will see you email as well) Now if they click on clipboard in GPA they can type a message and select encrypt. It will then ask them which key to use and they will select yours. This will then encrypt the message making it unreadable.
They then send you the message and you go into GPA and open the clipboard yourself. You copy the message they sent you into there and select decrypt. It will ask you for your password and after you have typed it in it will decrypt the message for you making it readable again. Thats how it protects you communications.
If you want to test this out you can send me a PM with you public key once you have exported it and i will encrypt a message with it and send it back. Then you can make sure that you can decrypt the message and you will be set up and ready to go!
-
Yay!!! Thank you Luvs2Trip,
lots of sound help and advice, I really appreciate all your help.
I think I've got everything sorted now.
just one more thing, ...... as it happens I did set up my PGP encryption using a tormail e-mail address.
However I was wondering ....... if Tor mail is anonymous so that no one can read my e-mails, ..... Why don't people just use
their tormail e-mail address to communicate with one another?
Otherwise what's the point of a tormail e-mail address??? I mean what use is it to me other than a way of setting up PGP encryption???
in other words what's it's unique selling point over say gmail or hotmail etc?
Probably another dumb question I know.
Best regards A
PS.
Here is my key, come and see me on SR & maybe I can repay you ;)
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2.0.20 (MingW32)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=yLYr
-----END PGP PUBLIC KEY BLOCK-----
-
Yay!!! Thank you Luvs2Trip,
lots of sound help and advice, I really appreciate all your help.
I think I've got everything sorted now.
just one more thing, ...... as it happens I did set up my PGP encryption using a tormail e-mail address.
However I was wondering ....... if Tor mail is anonymous so that no one can read my e-mails, ..... Why don't people just use
their tormail e-mail address to communicate with one another?
Otherwise what's the point of a tormail e-mail address??? I mean what use is it to me other than a way of setting up PGP encryption???
in other words what's it's unique selling point over say gmail or hotmail etc?
Probably another dumb question I know.
Best regards A
Its not about making the actual emails more secure. Its more about making it harder to be traced back to you. Email accounts on the regular internet are a lot easier to be traced back to you because of the details required to set them up plus the likely hood that you have accessed these emails through the clearnet, or used them on legtimate sites, it very high meaning that a trail will be left so if that email was ever to be investigated it would make it a lot easier to link it back to you than a tormail address.
Good to see you got it all working and I have imported you key successfully! I love the breaking bad reference in you email!! lol Just in case you havn't had chance to test your key yet i have encrypted something with it below.
-----BEGIN PGP MESSAGE-----
Version: GnuPG v2.0.17 (MingW32)
hQEMA7I4Jowpy4uKAQgAgPAHbzJ4uCrLNpC+4iBlWw9Mxcmodm6KooAWCL0W+nFA
11npn45hyDHGuQrO2WGK5fXiq2y8VElghg9qpPSYGjjHV67Sgh0EzvShRpRZL+Xb
XPeb0QDnPMBNJjz3WStTsjt/xX9hbcGiIeKik4NV/evBbPb/MDonC3ZytKGiQwNE
a51X+S/i2qMuNnk0zeiUG8V8vsDjGOYuqAzuD+wJga4DZWdZlEqoXNXi90sma9tg
ai5df1fbD1kZHi5OtLqSTZHhIkvWG4YB4fXcY9rZGzUlyjkAWEXg2mAqWV/wUwXK
Tnp0JeIgexVqVX2O+Xa02p5Rz3cagY2UMgmYETor9tJOARjKH8TSZ8S0Ti4THAXV
kNLHDA/IHjGrB75w2kS4VmN8JUp/l11azS4TCDA0SF0VHqvkNIVlAXr95vOlpLqr
ni9FidgyGQmzhAF2IKKQ
=Thjv
-----END PGP MESSAGE-----
I will be sure to check you vendors page out on the main site!!
-
Anyway, I don't know what this PGP public key is, I don't know how to get it, and I don't how to use it, please could you give me some advice & links to setting this thing up as I have a feeling I'm not going to get much business otherwise.
If you've never heard of PGP, I seriously question whether you are knowledgeable enough to be a seller.
-
Anyway, I don't know what this PGP public key is, I don't know how to get it, and I don't how to use it, please could you give me some advice & links to setting this thing up as I have a feeling I'm not going to get much business otherwise.
If you've never heard of PGP, I seriously question whether you are knowledgeable enough to be a seller.
I see what your saying but many people probably are not aware of PGP until they actually come across something that requires it! The OP could have just started selling without using PGP but decided to actually take the time to learn it first which is surely the correct approach!
Everybody had to learn it at somepoint!
-
Hi
(I love the breaking bad reference in you email!! lol)
Well we have to keep ourselves amused! I couldn't Encrypt back as I don't have your key but anyway hopefully I passed the test ;)
Thanks A
-
Lol it was more just for your benefit so you had a message to decrypt in case you had never done this side of it before!
but seems your all good!!
-
There's 2 hyphens missing at the end of the key on your vendor profile by the way.
-
There's 2 hyphens missing at the end of the key on your vendor profile by the way.
thanks for the heads up, have fixed it.
Regards A
-
PGP is quite important when it comes to sending names and address's! it ensures that only the vendor that the address is meant for can see it meaning that even if any communication was intercepted no one could retrieve personal information about the buyer.
When you are installing gpg4win you will come to screen asking which components you would like to install. By default GPA is not checked and you need to make sure to check this!
What Luvs2Trip said! Solid advice