Merge pull request 'add-content' (#1) from add-content into main

Reviewed-on: #1
Reviewed-by: meaz <meaz@no-reply@disroot.org>
Reviewed-by: muppeth <muppeth@no-reply@disroot.org>
This commit is contained in:
antilopa 2022-10-27 12:43:19 +00:00
commit 45f29b03b6
53 changed files with 384 additions and 85 deletions

View file

@ -1,26 +0,0 @@
---
title: Understanding Email encryption
theme: learn4
hero_align: center
blog_url: how
sitemap:
changefreq: monthly
priority: 1.03
content:
items: @self.children
order:
by: header.date
dir: desc
limit: 10
pagination: true
feed:
title: 'Lacre How-to'
description: 'Lacre How-to'
limit: 10
pagination: true
---

View file

@ -0,0 +1,44 @@
---
title: 'Understanding Encryption'
date: '26-10-2022 0:10'
taxonomy:
category:
tag: [howto]
body_classes: 'single single-post'
---
Most important part of encryption is to understand it's basic concept. This basic understanding of how encryption works will help you avoid confusion, issues and provide a more clear picture of what is happening and how to apply it to your daily communication.
Lacre does require you to understand the basics in order to use it without compromising security. It is built in a way that hides the encryption from users. However, it is better to understand what is happening. It empowers us all when realizing that there is no magic trickery, the concept is simple and you are in the front seat.
Here is a [Video](https://invidious.snopyta.org/watch?v=E5FEqGYLL0o?target=_blank) explaining the basic concept of encryption.
GPG (GNU Privacy Guard) is one of the most popular encryption methods to secure email correspondance and files between people. GnuPG uses asymmetric encryption technology. It means you create two types of keys. Secret and public key. Public key is used by others to encrypt messages to you. You can (and should) share that key with everyone you want to secure your communication with. There are even special public servers called "keyservers" where you can post your key so that anyone could obtain it. The second key is your Secret (private) key. This key is used to decrypt emails addressed to you. Loosing or sharing this key with others will result in either loosing access to your emails or allowing others to read your private emails. It is therefore essential to never share this key with anyone and to keep a backup copy of it.
To create new pair of keys, please follow our tutorial pages at [Creating Keypairs](/user_tutorials/creating_keypair) Once you have your key pair created, it's time to start encrypting your emails. Here is a scenario:
Alice wants to write an email to Bob.
Both don't want the whole world to be able to read it.
So Alice will "hide" the email in an envelope closed with a lock that only Bob can open.
The problem is that Bob can't send the key to his lock to Alice through email, otherwise, any one could use it to open his lock and read everything inside the envelope.
So here is the solution.
Bob creates two keys: one private, one public.
Alice also creates two keys: one private, one public.
Imagine the keys like this:
- the public key is like an open lock.
- the private key is like the key to the lock.
So Bob sends his open lock (= his public key) to Alice. Bob doesn't mind about the whole world seeing that, as it is public, it is just an open lock that holds nothing!
Alice writes the email that she wants to send to Bob, puts it in an envelope and closes it with Bob's lock (it is called "encrypting" an email). No one can read it, as no one has the key to open Bob's lock. Even Alice can not read it anymore!
Bob receives Alice's email in an envelope with the lock on. Bob can not read it, unless Bob uses the key to his own lock (= private key) to open the lock (using a key on the lock is called "decrypting" the email).
If Bob wants to answer Alice back, he can use her open lock (= public key) to close the envelope. She will use her key to the lock (= private key) to open it.
That's it. Although encryption algorythms and math behind it is very complex, the key concept as you can see isn't black magic, and is quite simple to understand.

Binary file not shown.

After

Width:  |  Height:  |  Size: 51 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 81 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 76 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 87 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 29 KiB

View file

@ -0,0 +1,64 @@
---
title: 'Webmail'
date: '19-10-2022 0:10'
taxonomy:
category:
tag: [howto,mailvelope,web-browser]
body_classes: 'single single-post'
---
Creating PGP keys from your Web browser requires you to install an add-on.
So if you havent already, install Mailveloppe add-on in your web browser:
[Mailvelope for Google Chrome](https://chrome.google.com/webstore/detail/mailvelope/kajibbejlbohfaggdiogboambcijhkke?target=_blank)
<br>
[Mailvelope for Mozilla Firefox](https://addons.mozilla.org/en/firefox/addon/mailvelope/?target=_blank)
<br>
[Mailvelope for Microsoft Edge](https://microsoftedge.microsoft.com/addons/detail/mailvelope/dgcbddhdhjppfdfjpciagmmibadmoapc?target=_blank)
To create new keypair for your email you need to:
1. open your web browser then click on the Mailvelope icon in the top right corner of your browser to start setting up your encryption keys. Choose "Keyring".
![](Mailvelope01.png?lightbox)
2. select “Generate”.
![](Mailvelope02.png?lightbox)
3. Fill in the needed information
- give a name associated with the key (usually the name of the key owner, but can be what you want)
- enter your email address that you want to use with the key. For Lacre, It should be the address you want to use with Lacre.
- you can change additional settings by clicking on "Advanced", like changing key type to Ecliptic Curve as it is considered more secure and efficient then RSA keys.
- enter a password for your private key. You'll be asked for it when you want to decrypt an email with your private key.
- Uncheck the "Upload public key to Mailvelope Key Server" box, unless you want it to be published online (it allows people to find your public key and send you encrypted emails, even if you didn't directly send you public key to them).
![](Mailvelope03.png?lightbox)
4. Click on "Generate".
5. Congratulations! Your new encryption key is created and ready to be used.
Although you are technically done, always backup your keys. Loosing important data is devastating. Loosing the key to open all your email communication can be even worse. Have a backup stored safely offline, just in case.
- Select “Export” from the Key Management page.
![](Mailvelope04.png?lightbox)
- Choose "Public" and give your public key backup file a name (it is good practice to have "_pub" in the file name to indicate that this is the public key, and "_priv" to indicate this is the private key).
![](Mailvelope05.png?lightbox)
- Then click on "Save" and choose where to save the file. Do the same thing for your "Private" key.
With proper end to end encryption, you are responsible yourself for your data security. So the only person to blame for lost key or password is you! With great security comes great responsibility.

View file

@ -1,10 +0,0 @@
---
title: 'Welcome to Lacre'
date: '23-07-2022 0:10'
taxonomy:
category:
tag: [howto]
body_classes: 'single single-post'
---

View file

@ -0,0 +1,49 @@
---
title: 'Desktop'
date: '19-10-2022 0:10'
taxonomy:
category:
tag: [howto,thunderbird]
body_classes: 'single single-post'
---
Thunderbird is one of the most widely used email client thats works on most of the desktop platforms such as Linux, MacOS and Windows.
As of version 78.2.1 OpenPGP has been integrated into Thunderbird so no additional plugins are needed to make it work. If you don't have Thunderbird installed yet, please visit: [Thunderbird's website](https://www.thunderbird.net?target=_blank)
To create a new keypair for your email you need to:
1. Select "end to end ecryption" option from your account's overview page:
![](tb-e2e-1.png?lightbox)
2. In "End-to-End Encryption" settings you can see whether you have already a keypair assigned to your account. Assuming you don't go ahead and select "+Add key" option
![](tb-e2e-2.png?lightbox)
3. Unless you have a keypair (on another device) and wish to import it, select "Create a new OpenPGP Key" option
![](tb-e2e-3.png?lightbox)
4. Before your computer generates your key make sure you have selected correct email address to which your key pair will be assigned.
![](tb-e2e-4.png?lightbox)
We recommend changing key type to Ecliptic Curve as it is considered more secure and efficient then RSA keys.
5. Next, confirm your choices and read the warning carefully. Key generation depending on entrophy generated by your comuter at the time of work may take a whie. Do not close thunderbird and let it do it's work even if it may seem "stuck".
6. Congratulations! Your new encryption key is created and ready to be used.
![](tb-e2e-5.png?lightbox)
7. Although you are technically done, please consider backing up the key. It happened to us all in the past. Loosing important data is devastating. Loosing key to open all your email communication can be even worse. Always have a backup stored safely offline, just in case.
Select option to backup your key to a file:
![](tb-e2e-6.png?lightbox)
When creating a file backup it is important to secure it with a good password. Otherwise, anyone who obtains access to the backed up key could potantially decrypt all your email communication. Don't overthink it though. If you forget your password to unlock your key, you will loose access to the key and thus communication in case you need to restore your key. Either keep the password somewhere safe (post-it sticker stuck on your computer screen is not recommended) for example a password manager or use something you are sure you will remember.
With proper end to end encryption, you are your service provider so the only person to blame for lost key or password is you! With great security comes great responsibility.

Binary file not shown.

After

Width:  |  Height:  |  Size: 123 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 120 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 147 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 133 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 102 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 120 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 200 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 100 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 88 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 145 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 153 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 228 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 145 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 150 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 108 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 113 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 71 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 124 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 118 KiB

View file

@ -0,0 +1,77 @@
---
title: 'Android'
date: '25-10-2022 0:10'
taxonomy:
category:
tag: [howto, android, mobile]
body_classes: 'single single-post'
---
Creating a PGP keys on your Android device requires you to install additional software. Android unfortunately isn't equipped with PGP.
So if you havent already, install OpenKeychain from [F-droid](https://f-droid.org/en/packages/org.sufficientlysecure.keychain/?target=_blank) or [Google Playstore](https://play.google.com/store/apps/details?id=org.sufficientlysecure.keychain?target=_blank)
To create new keypair for your email you need to:
1. Open OpenKeychain and select “CREATE MY KEY” on start page.
![](image-openkeychain/01-create-andrd-start.png?lightbox)
(If u already have keys you can get there also via the hamburger menu (three bars) at the top right → manage my keys)
2. Choose a name to associate with the key
![](image-openkeychain/02-create-andrd-username.png?lightbox)
3. Enter the email address that you want to use with the key. For Lacre you will need to enter the same email address you plan to use with Lacre.
![](image-openkeychain/03-create-andrd-email.png?lightbox)
4. you can change additional settings from the hamburger menu at the top right → “change key configuration”. You can change the key type to Ecliptic Curve as it is considered more secure and efficient then RSA keys, or you may directly go on with "CREATE KEY" if you are fine with the defaults.
![](image-openkeychain/04-create-andrd-create.png?lightbox)
![](image-openkeychain/05-create-andrd-additional-settings.png?lightbox)
5. Congratulations! Your new encryption key is created and ready to be used.
![](image-openkeychain/06-create-andrd-finished.png?lightbox)
6. Although you are technically done, always backup your keys. Loosing important data is devastating. Loosing the key to open all your email communication can be even worse. Have a backup stored safely offline, just in case.
Select “Backup key” from the hamburger menu at the top right within the key you just created.
![](image-openkeychain/07-create-andrd-backup-start.png?lightbox)
7. Note down password. If you loose the password to unlock your key, you will loose access to the key. So keep the password somewhere safe, for example use password manager.
![](image-openkeychain/08-create-andrd-backup-password.png?lightbox)
Now click “SAVE BACKUP” and save on location of your choice.
With proper end to end encryption, you are responsible yourself for your data security. So the only person to blame for lost key or password is you! With great security comes great responsibility.
Final step will be to enable PGP within email client. Only few email clients on android support that. In this tutorial Ill show you how to do it with K9.
If you are not using it already, install K9 from [F-Droid](https://f-droid.org/app/com.fsck.k9?target=_blank) or [Google Playstore](https://play.google.com/store/apps/details?id=com.fsck.k9?target=_blank)
1. Start K9, open the drawer and go to “Settings”.
![](image-k9/01-k9-start.png?lightbox)
2. Select the account you created the key for.
![](image-k9/02-k9-choose-account.png?lightbox)
3. Click “End-to-end encryption”.
![](image-k9/03-k9-account-settings.png?lightbox)
4. Tick the slider button “Enable OpenPGP support” and select “Configure end-to-end key” afterwards.
![](image-k9/04-k9-enable-e2ee.png?lightbox)
5. Finally click “use key: username@lacre.io” and you are all set up.
![](image-k9/05-k9-select-key.png?lightbox)

View file

@ -1,10 +0,0 @@
---
title: 'Welcome to Lacre'
date: '23-07-2022 0:10'
taxonomy:
category:
tag: [howto]
body_classes: 'single single-post'
---

View file

@ -1,12 +1,11 @@
---
title: 'Desktop'
title: 'iOS'
date: '19-10-2022 0:10'
taxonomy:
category:
tag: [howto,thunderbird]
tag: [howto, ios, mobile]
body_classes: 'single single-post'
---
## Coming soon!

View file

@ -9,18 +9,29 @@ sitemap:
priority: 1.03
content:
items: @self.children
items:
order:
by: header.date
dir: desc
limit: 10
pagination: true
by: default
dir: asc
limit: 0
pagination: false
feed:
title: 'Creating keypair'
description: 'How to create keypair using mail client'
limit: 10
limit: 0
pagination: true
---
*To be able to decrypt your mailbox, you have to makeBelow section will guide you through the pro
## Creating Keypairs
**To be able to decrypt your mailbox, you have to create youe set of keys. The following section will guide you through the process.**
[Webmail - Mailvelope](webmail)
[Desktop - Thunderbird](desktop)
[Android - K9 and OpenKeychain](android)
[iOS - COMING SOON...](ios)

Binary file not shown.

After

Width:  |  Height:  |  Size: 51 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 64 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 53 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 88 KiB

View file

@ -0,0 +1,28 @@
---
title: 'Webmail'
date: '23-10-2022 0:10'
taxonomy:
category:
tag: [howto]
body_classes: 'single single-post'
---
Exporting your public key to upload it to lacre.io is super easy.
1. Open your web browser then click on the Mailvelope icon in the top right corner of your browser. Choose "Keyring".
![](Mailvelope01.png?lightbox)
2. Click on your key.
![](Mailvelope06.png?lightbox)
3. From the overview click on "Export".
![](Mailvelope07.png?lightbox)
4. Select "Public" and click on "Copy to cliboard".
![](Mailvelope07.png?lightbox)
Your public key is now added to the clipboard so you can paste it on [Lacre Keyserver](https://keys.lacre.io/?target=_blank).

View file

@ -1,5 +1,5 @@
---
title: 'Export public key using Thunderbird mail client'
title: 'Desktop'
date: '23-07-2022 0:10'
taxonomy:
category:
@ -11,11 +11,11 @@ Exporting your public key using thunderbird is a very easy process. If you Have
1. Open up your account settings and head over to "End 2 end Ecryption" Section.
<image tb-e2e-1>
![](tb-e2e-1.png?lightbox)
2. From the overview select key you want to export
< image tb-export-1>
![](tb-export-1.png?lightbox)
As you can see you can decide to either save the exported public key to a file or "Copy" the key to your Clipboard. You can do either one, but if you don't plan on uploading your public key directly, it's better to export to a file.

Binary file not shown.

After

Width:  |  Height:  |  Size: 123 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 121 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 79 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 107 KiB

View file

@ -0,0 +1,21 @@
---
title: 'Android'
date: '23-10-2022 0:10'
taxonomy:
category:
tag: [howto]
body_classes: 'single single-post'
---
Exporting your public key to upload it to lacre.io is super easy.
1. Open OpenKeychain and select your account.
![](01-copy-pub-andrd-start.png?lightbox)
2. From the overview click on the "copy"-Symbol.
![](02-copy-pub-andrd-choose-key.png?lightbox)
3. your public key is now added to the clipboard so you can paste it on [Lacre Keyserver](https://keys.lacre.io/?target=_blank).

View file

@ -1,10 +0,0 @@
---
title: 'Welcome to Lacre'
date: '23-07-2022 0:10'
taxonomy:
category:
tag: [howto]
body_classes: 'single single-post'
---

View file

@ -1,6 +1,6 @@
---
title: 'Welcome to Lacre'
date: '23-07-2022 0:10'
title: 'iOS'
date: '23-10-2022 0:10'
taxonomy:
category:
tag: [howto]
@ -8,3 +8,4 @@ taxonomy:
---
## Coming soon!

View file

@ -1,5 +1,5 @@
---
title: Understanding Email encryption
title: Exporting Keys
theme: learn4
hero_align: center
blog_url: how
@ -9,10 +9,10 @@ sitemap:
priority: 1.03
content:
items: @self.children
items:
order:
by: header.date
dir: desc
by: default
dir: asc
limit: 10
pagination: true
@ -24,3 +24,14 @@ feed:
pagination: true
---
##Exporting Keypair
**In order to upload your key to Lacre's key server, you will first need to export it. See in this section how to do it on your device.**
[Webmail - Mailvelope](webmail)
[Desktop - Thunderbird](desktop)
[Android - K9 and OpenKeychain](android)
[iOS - COMING SOON...](ios)

Binary file not shown.

After

Width:  |  Height:  |  Size: 91 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 46 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 72 KiB

View file

@ -0,0 +1,41 @@
---
title: 'Upload to Lacre key server'
date: '23-10-2022 0:10'
taxonomy:
category:
tag: [howto]
body_classes: 'single single-post'
---
Uploading a public key to the Lacre Key-Server is a fairly easy process:
1. Visit [keys.lacre.io](https://keys.lacre.io?target=_blank)
![](01-website.png?lightbox)
2. Enter the email address you want to register. It should be the one you have created keys for.
![](02-email.png?lightbox)
3. Paste the public key for that email address
![](03-pub-key.png?lightbox)
4. Hit “submit key”
5. Wait for confirmation request to be sent to your address inbox and click on the received link.
6. Wait for confirmation of the registration to be sent to your address box
7. All done. From now on you will receive all emails to your inbox encrypted.
Change key on Lacre Key-Server:
→ upload your new public key the same way as you did on initial setup.
Remove key on Lacre Key-Server:
→ same as changing a key, but instead of adding a new key in the "ASCII-armored PGP public key" box, let it empty.

View file

@ -9,11 +9,11 @@ sitemap:
priority: 1.03
content:
items: @self.children
items:
order:
by: header.date
dir: desc
limit: 10
by: default
dir: asc
limit: 0
pagination: true
feed:
@ -23,6 +23,13 @@ feed:
pagination: true
---
# User Documentation
**Below Tutorials will guide you through the process of setting up encryption keys and uploading them to Lacre. Successing will alow you .**
## User Documentation
**The following Tutorials will guide you through the process of setting up encryption keys and uploading them to Lacre. Successing will alow you.**
[Creating Keypairs](creating_keypair)
[Exporting Your Keys](exporting_key)
[Uploading Your Key to Lacre's Keyserver](upload_keyserver)

View file

@ -1,5 +1,6 @@
---
title: Understanding Email encryption
title: Admin Docs
theme: learn4
hero_align: center
blog_url: how
@ -9,7 +10,7 @@ sitemap:
priority: 1.03
content:
items: @self.children
items:
order:
by: header.date
dir: desc
@ -24,3 +25,4 @@ feed:
pagination: true
---
##Coming soon!