Silk Road forums
Discussion => Security => Topic started by: shotbycops on November 08, 2012, 10:43 am
-
Hi Guys,
New around here.
I was just wondering if you should be using a PGP code, when placing orders in the delivery Box?
And if so, is it as simple as cut/paste the PGP code then input your details for deilvery? I assume, you probably need to install PGP APP/Software.
Sorry, I'm sure this has probably been covered, so a point in the right direction would be appreciated.
Thanks,
-
yes to PgP there are a couple programs recommended and the info you seek is in the security subforums
-
Ok, fantastic.
I have already placed one order, and did not encrypt any info - when input my delivery details.
Would this be a problem?? Or is that purely going to depend on the vendor?
Thanks again,
-
It is a security loophole that I would close for future orders what is one is done is done I would not lose sleep over it just correct it for future orders and since you overlooked this info I would recommend rereading some of the guides for buying as you wouldn't want to continue to leave loop holes. I know they seem overwhelming as some are very detailed but the more time on the Road the more they make sense
-
Thanks for your help, it is greatly appreciated.
I have a few tutorials on how to pgp i.e. send messages to users/vendors....
But I'm still unclear, sorry to be so annoying, I'm just wondering with the buying process..... when it prompts you to put in your address details, what do you do?? just cut and paste the vendors pgp ??
Again sorry for being such a noob....
-
1. Install the desired PGP software (GPG4USB, GPG4win, or the Mac or Linux version depending on what you use)
2. Import the vendor's PGP public key in your PGP software.
3. Write your delivery address in a notepad file (.txt ).
4 Encrypt the notepad file with the seller's public key, make sure to output it in ASCII format.
5. copy/paste the encrypted text from step 4 in the box for the address details.
-
Got it ...
Thanks heaps mate!!!
-
This needs to be seen by more people. A lot of people just don't get PGP.
- The Consultant
-
I can't blame them. All the online tutorials I found were overflowing with information I have no use for, and none of them just clearly stated "you use someone's public key to encrypt a message that only that person with their private key can then decrypt -- and no, you're not supposed to be able to decrypt your own letter to them after it's been encrypted. Also, ascii armor it."
Guess I should have checked the forums instead of relying on random internet searches...
-
I can't blame them. All the online tutorials I found were overflowing with information I have no use for, and none of them just clearly stated "you use someone's public key to encrypt a message that only that person with their private key can then decrypt -- and no, you're not supposed to be able to decrypt your own letter to them after it's been encrypted. Also, ascii armor it."
Guess I should have checked the forums instead of relying on random internet searches...
More or less. :)
- The Consultant
-
I've got my head around all this now, couldn't have done it without the support of the guys in this Forum...#
many thanks, now if only the site was up :P