I'm on now
So am I, but it didn't ask for PGP verification which kind of makes me nervous. Anyone know why it didn't ask me to verify?
PGP verification is an additional security layer which is an option you will need to enable under the SETTINGS tab. Here's how to check.
Log into SR. On the SR homepage, click on SETTINGS. Then make sure you have ticked the box under Enhanced Security -
Enable two-factor authentication using your PGP key. Then click on Update User.
Two caveats: the two-factor authentication is NOT idiot-proof (not yet, anyway).
1) Paste the wrong public key into there, and you will be locked out of your account. There is no confirmation screen where someone can confirm they used the right key. (Not necessary for us, but at least one person may have pasted the wrong PGP key into the field, and been locked out of their account as a result.)
2) Keys generated by Kleopatra won't work, as they have NO encryption sub-key. Keys without an encryption sub-key will give an error.
Nightcrawler
4096R/BBF7433B 2012-09-22 Nightcrawler <Nightcrawler@SR>
PGP Key Fingerprint = D870 C6AC CC6E 46B0 E0C7 3955 B8F1 D88E BBF7 433B
Security is a bit like religion... some things have to be taken on faith.
Where security differs from religion is that security is NOT retroactive.
Unlike Christianity, where you can come to Jesus, be 'saved' and have all
your sins washed away, with security you can adopt Tails or PGP, and be
secure from that point forward, but rest assured that your previous sins
(security failings) WILL come back to haunt you and bite you in the ass.
The original DPR is the poster child for that, right now.
Folly, thou conquerest, and I must yield!
Against stupidity the very gods Themselves
contend in vain. --Friedrich Schiller