Pgp Trust

Posted on 2004-11-16
Last Modified: 2013-12-04
how does PGP's web of trust operates, I am new at this , any good sites ?

Thanks Pete
Question by:auziepete
    LVL 8

    Expert Comment

    please clarify what you are looking for... your question is a little bit confusing...

    Author Comment

    Hi i am after , how does the trust thing work in pgp via email and authenication, plus how does the signing  inflict the procedure in this, with sending encrypted emails or messages

    LVL 8

    Expert Comment

    try looking at the following links:

    this should give you all of the information that is available regarding what you are looking for... essentially, PGP runs like regular encryption, where there is a key on both the encrypter and the decrypter's end that decypers the encription. Both sides must have a valid key to lock/unlock what is being encrypted...
    LVL 1

    Expert Comment

    Hi Pete,

    First of all PGP is a good choice. PGP at least when Phil Zimmerman was still around there is the only major crypto implementation which has been verifiably secure.

    PGP works with public key crypto which is so called a symmatrical crypto system. You have a so-called private/secret key and a public key.

    The public key you distribute in as much as possible different places (like the pgp keyserver) The secret key you keep as secure as possible (smart cards etc.. are nice options).

    The way it is mostly used. You want to send a secure message to Bob. You encrypt it with Bobs public key. Only Bob can read this message now since he has the secret key to decrypt this message. However how does Bob know whether this message came from you ??

    Besides being able to encrypt the message to Bob with Bobs public key, You can also 'encrypt' this message with your own secret key. This message can than be decrypted with your public key which everybody can get. The result of this is that everybody can verify whether this message is 'encrypted' with your secret key. This way you get a form of signature.

    Now, here comes the idea of the web of trust. Since How can Bob fully trust that your public key is really your public key ?? The idea was that other people would sign your public key. The more people would sign your key the more likely it is that you are you or that there would be somebody that Bobs know personally, etc..

    This is also the general idea behind CA concepts like Thawte and Verisign and all others.

    Hope this will help you a bit further.

    Best regards
    The web of trust is based upon the

    Author Comment

    Thanks RevelationCS AND Dustbank

    Problem solved

    Thanks Pete
    LVL 8

    Accepted Solution

    please do not forget to close out the question if the problem has been solved....

    if you have questions on how to do this, please see the following link:

    Featured Post

    Free Trending Threat Insights Every Day

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Join & Write a Comment

    Suggested Solutions

    As I write this article, I am finishing cleanup from the Qakbot virus variant found in the wild on April 18, 2011.  It was a messy beast that had varying levels of infection, speculated as being dependent on how long it resided on the infected syste…
    This is a short article about OS X KeRanger, and what people can do to get rid of it.
    Hi everyone! This is Experts Exchange customer support.  This quick video will show you how to change your primary email address.  If you have any questions, then please Write a Comment below!
    Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now