|
|
Privacy and Security |
|
|
Contact Information | Scrapbook | John's Diving Adventures | fun@sun Registry | The Real White Spot | Privacy & Security | About This Server |
||
| White Spot Home » Privacy & Security |
Updated: June 10, 2005
|
|
| Getting Started with Security |
|
I can recommend the basic book on PGP, PGP: Pretty Good Privacy by Simson Garfinkel, although there are many more available that are more recent. There's also lots of information on the Web. If you're looking for something more advanced on the whole topic of digital certificates, encryption, and Internet security in general, I can very highly recommend the outstanding Web Security, Privacy, and Commerce by Simson Garfinkel and Gene Spafford. Look up anyone's PGP public key on MIT's public key server. |
The Internet is a great medium for keeping in touch with one another, but it is also inherently insecure. In other words, a clever snoop can eavesdrop on your communications if you don't take precautions. E-mail is particularly vulnerable, but fortunately, there is an easy solution.
Back in the early 1970's, the technique of public key cryptography was invented, and now it is easily available to you through Pretty Good Privacy, or PGP. Public key cryptography is based on my having two keys: a public key that I make available to the world, and a private key that I keep secret. Anyone who wishes to send me private e-mail, has an e-mail program that can understand PGP, and has my PGP public key, can encrypt the message and send it to me in the knowledge that it won't be read by anyone else as it travels across the Net. Another nice feature is that I can digitally sign any e-mail I send to you using my private key and you can verify that it did, in fact, come from me.
Once you get the PGP software installed and running, you'll then need to download my public keys. I have two public keys: one for e-mail to me at the White Spot (North) and another for e-mail to me at Sun Microsystems. If you have recent versions of either the PGP.com freeware or the GNU Privacy Guard, download the versions below that use the PGP 6.x extensions.
| My wspot.net Public Key | |
| Key ID: | 7D46039A |
| Get It: |
My wspot.net public key, with PGP 6.x extensions
[ View It ] My wspot.net public key, for older versions of PGP [ View It ] |
| PGP Fingerprint: | EA2C 43E3 C408 D755 3803 26D8 CE88 71B3 7D46 039A |
| My sun.com Public Key | |
| Key ID: | DB49A4FE |
| Get It: |
My sun.com
public key, with PGP 6.x extensions [ View It ] My sun.com public key, for older versions of PGP [ View It ] |
| PGP Fingerprint: | 228C 26DE 8AAF E150 B3DC 26F4 FE90 34DA DB49 A4FE |
Since I run several different web services on my server, and I do try to make the server as secure as possible (and I'm too cheap to spring for a commercial signature), I have also established my own little certificate authority (CA) and x.509 certificates for the White Spot (North). If you come across the need to add these certificates to your keychain, just to make sure the information is truly coming from me, here they are.
| CA Root Certificate | |
| Get It: | White Spot (North) CA Root Certificate [ View It ] |
| MD5 Digest: | 1D:55:DC:9F:D7:5D:F8:1C:96:09:E7:C5:21:F4:67:AF |
| SHA1 Digest: | 38:FB:02:91:FF:FD:4A:A4:5F:36:82:09:F7:85:C9:AE:58:11:E3:CD |
| HTTP Server Certificate | |
| Get It: | White Spot (North) HTTP Server Certificate [ View It ] |
| MD5 Digest: | DA:1A:9E:2F:32:3D:55:52:70:0C:F8:69:FD:F0:7B:31 |
| SHA1 Digest: | 64:74:0F:D6:C1:92:CB:E7:00:EB:9A:5E:E9:3A:35:D8:20:71:61:88 |
| IMAP Server Certificate | |
| Get It: | White Spot (North) IMAP Server Certificate [ View It ] |
| MD5 Digest: | C6:67:E3:D3:88:40:B6:B7:1E:37:31:94:E4:E4:EE:3B |
| SHA1 Digest: | 97:59:8F:BB:01:79:8A:C0:0F:09:2A:8B:9D:89:68:89:5F:B2:CD:CA |
|
Copyright © 1996-2005 John Meyer. All rights reserved.
|