[LUG] Draft Instruction Manual for installing Thunderbird/GPG/Enigmail

[debian@xxxxxxxxx]

I do not use Thunderbird or Enigmail but I am trying to set up a "fools
guide" for installing GPG on a winXP home machine for some colleagues at
work who are currently happy with Outlook Express

Does anyone have any suggestions? 


Henry

Steps

1      go to www.mozilla.org and install thunderbird 1.0.6. This is similar to
       Outlook express but more secure and offers more features. You can accept
       all the default settings but most importantly it will import all your
       mail settings and your email from outlook express

       (If you already have an earlier version, then go to the control panel
       and uninstall the old version first)
       
       Thunderbird should be your default email program
       
       Once installed and working you should remove outlook express (
       control panel and remove outlook express)

2      get GPG for Windows
        http://www.gnupg.org/download/index.html
        ftp://ftp.gnupg.org/gcrypt/binary/gnupg-w32cli-1.4.2.exe

       run the setup of GPG (when prompted to change the default installation
       directory, simply leave it, do not change the location)

3      Download enigmail. Available at 
        http://www.mozilla-enigmail.org/downloads/enigmail-0.92.0-tb-win32.xpi

       This will save a file ending .xpi

       Open Mozilla Thunderbird, select Tools > Extensions > Install and browse
       for the previously saved XPI file(s) and install it

4      Close and reopen Thunderbird
        
5      Now you need to create and public and private key

       As a slight degression please see http://www.mccune.cc/PGPpage2.htm under
       - Privacy and Authenticity
       - Windows XP issues

       I would like to stress that:
       -        Only you should have access to the private key. NO-ONE else.,
                and this stays with you
       -        You should publish your public key as widely as possible

6       Open Moxilla Thunderbird
        Go to Account Settings
        Click on OpenPGP security
        Close Thunderbird

7       Please read http://enigmail.mozdev.org/keyman.html

        Open Thunderbird. Go to Enigmail > OpenPGP Key Management which the screen 
you see there

8       Create keys

        Generate
        New Key Pair

        The system will then ask you for a passphrase. This is not shared with
        ANYONE so please remember it. Each time you want to sign an email then the
        system will ask for this phrase

        Other data that the system will ask for
        -       Key expires in 5 years. This is fine. You can renew the key if
                you want but if you lose it then it will expire automatically
                in 5 years time. You can have it for a shorter time, you
                can have it for a longer time
        -       Key size 2048
        -       Generate key
        
9       Create a revocation certificate. Store this safely

Using system

a       Compose message
b       Click on icon open PGP
c)      Encrypt messaage

Share PUBLIC key (NOT repeat NOT private key) 
-       Compose screen menu: enigmail >
-       Insert Public key Email it to whomever
-       Then that person can` send encrypted emails to you. You need that
        person public key to send encrypted emails to them

If you have not received the other persons public key then all you can do is
"sign" the email. This is equivalent to signing your name on a memo: ie you
sent the memo and not anyone else


--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe. FAQ: www.dcglug.org.uk/linux_adm/list-faq.html