Bitcoin Forum

Other => Beginners & Help => Topic started by: o on June 23, 2011, 07:28:21 PM



Title: How to verify the PGP signed message in the forum?
Post by: o on June 23, 2011, 07:28:21 PM
People sometimes sign their message in this forum, so I wonder how you guys verifying their signature with the message? It is tedious to copy and paste message to the gpg program and it even does not prompt for importing any key so how can it verify the signature? I am just curious that is there some plugin that are easy to use like the enigmail for thunderbird?


Title: Re: How to verify the PGP signed message in the forum?
Post by: ElHajjaj on June 23, 2011, 08:23:16 PM
I did some checking into this and there is a Firefox plugin project called FireGPG which was intended to integrate GPG functions into Firefox.

http://getfiregpg.org/s/home

Unfortunately, the project has been discontinued by the owner because he said he didn't have time to maintain it.


Title: Re: How to verify the PGP signed message in the forum?
Post by: zipxavier on June 23, 2011, 09:18:57 PM
Man wish that thing was still being worked on for newer verisons


Title: Re: How to verify the PGP signed message in the forum?
Post by: BitCoinBarter on June 23, 2011, 10:32:33 PM
People sometimes sign their message in this forum, so I wonder how you guys verifying their signature with the message? It is tedious to copy and paste message to the gpg program and it even does not prompt for importing any key so how can it verify the signature? I am just curious that is there some plugin that are easy to use like the enigmail for thunderbird?

o,

Curious  ???.

What does a signed message look like in this forum.

Could you please link to one.


Title: Re: How to verify the PGP signed message in the forum?
Post by: grue on June 23, 2011, 10:43:28 PM
People sometimes sign their message in this forum, so I wonder how you guys verifying their signature with the message? It is tedious to copy and paste message to the gpg program and it even does not prompt for importing any key so how can it verify the signature? I am just curious that is there some plugin that are easy to use like the enigmail for thunderbird?

o,

Curious  ???.

What does a signed message look like in this forum.

Could you please link to one.

MacOSX uploaded.

checksums:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

5ca82c5b694fc432b4b342dde5cd1b145e265f13  bitcoin-0.3.23-linux.tar.gz
42e8a86a97edcafb12d09fa69b56ad0451baa140  bitcoin-0.3.23-macosx.zip
779c6bb227801a51084be9594dc185d0a054ed53  bitcoin-0.3.23-src.tar.gz
12952b1c4a15ce55564500dace18ee22eb2feaa8  bitcoin-0.3.23-win32-setup.exe
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=PEok
-----END PGP SIGNATURE-----



Title: Re: How to verify the PGP signed message in the forum?
Post by: o on June 23, 2011, 11:09:52 PM
Man wish that thing was still being worked on for newer verisons

Poor. Maybe the popularity of the cryptocurrency can raise the awareness of cryptography for some new developer so that there is a higher motivation for them to make a firefox plugin :)


People sometimes sign their message in this forum, so I wonder how you guys verifying their signature with the message? It is tedious to copy and paste message to the gpg program and it even does not prompt for importing any key so how can it verify the signature? I am just curious that is there some plugin that are easy to use like the enigmail for thunderbird?

o,

Curious  ???.

What does a signed message look like in this forum.

Could you please link to one.

People here is familiar with using signature so you can occasionally see people signing message when posting important messages or just want to tell them apart from anonymous.

An example is already cited above, see the release of the 0.3.23, http://forum.bitcoin.org/index.php?topic=16553.msg215481#msg215481

To verify the whether the downloaded Bitcoin client is the original one, you are supposed to check the check the signature first to ensure the shasum is unchanged and then compare the shasum of the Bitcoin client. It is not that important now, but likely there will be many fake client with virus flowing in the Internet so that you may want to verify them.


Title: Re: How to verify the PGP signed message in the forum?
Post by: BitCoinBarter on June 24, 2011, 12:10:49 AM
grue,

Thanx  :)


Title: Re: How to verify the PGP signed message in the forum?
Post by: ElHajjaj on June 26, 2011, 03:48:35 PM
I'm somewhat tempted to see if I can revitalize the FireGPG project. From what I read, one of the roadblocks is that it needs a feature for Inter-process Communication (IPC) in Firefox that is still under development. Aside from the convenience factor, I can imagine how this plugin would make it easier to set up a web of trust based on cryptographic keys that you could use on any forum to link back to a reputation site and people would know by your digital sig that you are who you say you are.

There's already a reputation system like this in bitcoin trading channels on IRC, but having something on the web and the tools to make it easy to use would be much better for everyday folk.


Title: Re: How to verify the PGP signed message in the forum?
Post by: ElHajjaj on June 26, 2011, 04:07:34 PM
I found a newer browser extention that is being actively developed: http://gpgauth.org/projects/gpgauth-chrome/
It's in the Beta stage and I'm trying to get it installed for testing. I'll report back my findings.

Edit: After a second look, it looks like all this project does is authenticate a user to a web site. I guess I'm back to looking at FireGPG code.


Title: Re: How to verify the PGP signed message in the forum?
Post by: Slimquick on July 20, 2011, 10:31:08 PM
Any updates on this?


Title: Re: How to verify the PGP signed message in the forum?
Post by: ElHajjaj on July 23, 2011, 11:02:34 PM
I don't really need this plugin, so I've lost interest. It's not worth the trouble to wrap my head around 20,000 lines of Javascript unless I were getting paid well for it.