Silk Road forums

Discussion => Security => Topic started by: cookie9001 on January 09, 2013, 07:05 am

Title: Quick Noob Question
Post by: cookie9001 on January 09, 2013, 07:05 am
I'm intending to purchase something from a vendor. I added it to my cart, and it says I must now enter my address. Should I send the vendor my public PGP key in a seperate message and encrypt my address in this box, or just write it all down in the address box? Thanks for the help.
Title: Re: Quick Noob Question
Post by: Nightcrawler on January 09, 2013, 07:11 am
I'm intending to purchase something from a vendor. I added it to my cart, and it says I must now enter my address. Should I send the vendor my public PGP key in a seperate message and encrypt my address in this box, or just write it all down in the address box? Thanks for the help.

Place your PGP under your address, and encrypt the entire lot with the vendor's PGP key.

Nightcrawler <Nightcrawler@SR>
PGP-Key: 4096R/BBF7433B 2012-09-22
Key fingerprint = D870 C6AC CC6E 46B0 E0C7 3955 B8F1 D88E BBF7 433B
http://dkn255hz262ypmii.onion/index.php?topic=174.msg633090#msg633090
Title: Re: Quick Noob Question
Post by: cookie9001 on January 09, 2013, 07:26 am
Wait so the vendor does not need my public key in order to decrypt the gpg encoded message i send him, he only needs it to respond? Thanks for taking the time to respond!
Title: Re: Quick Noob Question
Post by: Empathy101 on January 09, 2013, 07:53 am
Wait so the vendor does not need my public key in order to decrypt the gpg encoded message i send him, he only needs it to respond?

This is correct. Once you encrypt the message with his key, that is all that's needed unless he will also respond to you.
Title: Re: Quick Noob Question
Post by: bynter on January 09, 2013, 08:46 am
Actually, you get arrested for not reading the FAQ  ;)
Title: Re: Quick Noob Question
Post by: biteme on January 09, 2013, 10:02 am
I'm intending to purchase something from a vendor. I added it to my cart, and it says I must now enter my address. Should I send the vendor my public PGP key in a seperate message and encrypt my address in this box, or just write it all down in the address box? Thanks for the help.

Place your PGP under your address, and encrypt the entire lot with the vendor's PGP key.



I did this exactly like Nightcrawler described in a message to a vendor, but for some reason they wrote back asking for my public key. I have no idea why (since they should've already had my public key once they decrypted my message), but because of this I have started adding my public key, unencrypted, right below the encrypted message. My public key is not sensitive information so I haven't had any reservations about doing this. That's all OK, right?
Title: Re: Quick Noob Question
Post by: bynter on January 09, 2013, 10:15 am

I did this exactly like Nightcrawler described in a message to a vendor, but for some reason they wrote back asking for my public key. I have no idea why (since they should've already had my public key once they decrypted my message), but because of this I have started adding my public key, unencrypted, right below the encrypted message. My public key is not sensitive information so I haven't had any reservations about doing this. That's all OK, right?
public key
You're fine.