/[winpt]/trunk/doc/winpt.texi

Diff of /trunk/doc/winpt.texi

Parent Directory | Revision Log | View Patch Patch

-revision 222 by twoaday,
Thu Jun  1 08:30:46 2006 UTC
+revision 224 by twoaday,
Sun Jun  4 10:13:20 2006 UTC
 Line 24 
 You need at least Windows 98/2K/XP, but
  recommend. The program also works on NT/95/ME but there is no support
  for these OS versions any longer.
+ @section A short Introduction
+ WinPT is a graphical GnuPG front-end which resides in the task bar.
+ It is divided into several, so-called, managers. There is a manager
+ for the keyring, for files and for smart cards. The aim of the program
+ is to secure email communication and to perform file encryption.
+ @subsection What is GnuPG
+ GnuPG is a tool for secure communication and data storage.
+ It can be used to encrypt data and to create digital signatures.
+ It includes an advanced key management facility and is compliant
+ with the proposed Internet standard as described in RFC2440.
+ @subsection The Web of Trust
+ For a detailled description of these and other GnuPG topics, I
+ recommend the available literature at http://www.gnupg.org. But
+ at least a general overview should be given here.
+ The certification scheme of OpenPGP does not base on a hirachical
+ approach. Instead it uses a combination of ownertrust and direct
+ key certification. Here is an example with Alice, Bob, Carol and Dave.
+ Alice knows Bob and checked the fingerprint of Bob's key when he
+ met him personally. Thus she knows that the key really belongs to
+ its owner and he trusts Bob to certify other keys. Then she issued
+ a signature on Bob's key. Bob knows Carol and also checked her identity.
+ Then he signed her key. Alice does not know Carol, but he knows Bob
+ and Bob trusts Carol. And because Alice trusts Bob, at a level she
+ decided before, he also trusts Carol. It's a transitiv relation.
+ Dave is isolated and does not know anybody from the mentioned persons,
+ thus he is not in the WoT.
+ Another very important point is, that the signer can decide,
+ after the certification, how much he trusts the key owner to
+ certify other keys.
+ It is very important to check the identify of a key owner. Mostly
+ this is done by comparing the fingerprint, which were submitted
+ by phone or written down at a personal meeting, with the fingerprint
+ of the key in the keyring. Please bear in mind that anybody can create
+ a key with an email address and a specific name. Thus it is not
+ recommend to sign keys without doing this check before!
+ The fingerprint of the key is hexadecial (160-bit) sequence divided
+ into 10 groups of 4 hex digits. You can get the fingerprint of a key
+ by opening the key property dialog. There you can mark the fingerprint
+ and copy it to the clipboard.
+ Example: 1D75 8108 5BC9 D9FB E78B  2078 ED46 81C9 BF3D F9B4
  @section Installation of the Program
-Line 32 
 can download it from http://wald.intevat
+Line 79 
 can download it from http://wald.intevat
  Download the zip file with the binaries inside and unpack them in
  a folder. All files need to be in the same folder, so if you change
  the folder don't forget to move all files.
+ You should also download and verify the signature of the packet to
+ make sure that the release is really authentic.
  To activate the program you just need to start WinPT.exe. You should
  now see a little (golden key) icon in the taskbar which indicates that
-Line 68 
 to the hotkeys.
+Line 117 
 to the hotkeys.
  To enable keyring backups, the user can either decide to use the
  GPG home directory as the backup folder or any other folder. In
- the latter case, a folder needs to be chosen. If the backup should
+ the latter case, a folder needs to be chosen.
- also include the secret keyring, please check the corresponding box.
  @section The First Start
-Line 110 
 The main keyserver dialog allows to fetc
+Line 158 
 The main keyserver dialog allows to fetc
  or to search for a given pattern.
  @subsection Retrieve a key by Key ID
+ The best way to fetch a key from the server is by the key ID.
+ Just enter the key ID, it is always a good idea to prefix it
+ with 0x and click the "Receive" button.
+ An example:
+ pattern: 0xBF3DF9B4
+ [Receive]
  @subsection Retrieve a key by its email address
+ If you only know the email address from your partner, you can
+ enter it instead of the key ID. It is unlikely but possible
+ that there are more keys with the same address. In this situation,
+ WinPT will warn you that multiple keys were imported. The difference
+ to the search function is, that the keys were dirctly fetched and
+ not displayed as a key result list.
+ An example:
+ pattern: name_of_friend@@gmx.net
+ [Receive]
  @subsection Search for a key by pattern
  If you want to communicate with a new mail partner and you are
-Line 120 
 email address. This address is considere
+Line 192 
 email address. This address is considere
  An example:
- pattern: twoaday@@freakmail.de
+ pattern: winpt@@windows-privacy-tray.com
  [Search]
-Line 131 
 should be clicked. Then the key will be
+Line 203 
 should be clicked. Then the key will be
  to your keyring. Now you can encrypt data with this key, for
  example an email.
- @section Adding new elements to your key
+ @subsection Sending a Key to the Keyserver
+ After you generated a new key pair, it is a good idea to send your
+ key to the keyserver to make it available for other users. If you
+ issue a signature, the key ID is part of the signature and people can
+ automatically retrieve your key when they try to verify the signature.
+ Actually, the action is performed in the Key Manager and not in the
+ keyserver dialog. Just open the Key Manager, select the key you want
+ to send right-click on it and chose "Send to Keyserver" in the popup
+ menu. Then a message box with the result is shown.
+ @subsection Add, Delete or Edit a Keyserver Entry
+ The keyserver dialog allow to change the existing keyserver entries,
+ to delete them or to add new entries. Just right click on a selected
+ item and a popup menu will be shown with ("Edit", "Remove" and "New").
+ @section Using the Clipboard
+ A major aim from the first day was, that the program does not
+ depend on a special mailer client. For this reason it uses the
+ clipboard to encrypt and/or sign data.
+ For the examples, let's assume that you want to write a new
+ mail or that you received a mail protected by GnuPG.
+ @subsection Encrypt Data in the Clipboard
+ Just copy the text from the mailer window into the clipboard.
+ This is usually done by CTRL+C, make sure you really selected
+ all portions of the text. Then right-click on the tray icon
+ and select Clipboard->Encryption. Now a dialog is shown to
+ select the recipients. This means you need to select all
+ keys which should be able to decrypt the mail. Confirm with "OK".
+ GnuPG now encrypts the data with the selected recipients. At the
+ end a message box with the result is shown. Now the clipboard should
+ contain the encrypted data. Just paste it into the mailer window.
+ The output should contain a header and a footer
+ "BEGIN PGP MESSAGE" and "END PGP MESSAGE.
+ @subsection Decrypt/Verify Data from the Clipboard
+ @subsection Sign the Clipboard
+ @section The Key Manager
+ This part of the program is propably most important for many users.
+ It contains function to manage your keyring and to perform actions
+ which are required and/or useful in the OpenPGP environment.
+ @subsection Tips
+ @itemize @bullet
+ @item
+ If you want to import quickly a key from a into the keyring, just
+ drag and drop the file into the Key Manager window. Then the import
+ procedure will be automatically started.
+ @item
+ Key which were fetched from keyservers often contain a lot of,
+ maybe obsolete, self signatures, if you want to get rid of them
+ you can use the Key Edit->Clean feature. Just start the edit
+ dialog and select the clean command. That's it.
+ @item
+ The keyserver dialog does not allow to import a key directly
+ via an URL, as an alternative you may use the "Import HTTP..."
+ feature in the Key Manager. With it you can directly fetch keys
+ from the web (Example: http://www.users.my-isp.de/~joe/gpg-keys.asc).
+ @item
+ To customize the parameters of the generated key, you can use
+ the expert key generation. It allows you to set the public key
+ algorithm and/or the size of the key directly.
+ @end itemize
  @subsection Adding a new secondary key

 Legend:



Removed from v.222
 


changed lines


 
Added in v.224
 Legend:



Removed from v.222
 


changed lines


 
Added in v.224
-Removed from v.222
+Added in v.224

[email protected]	ViewVC Help
Powered by ViewVC 1.1.26