PGP managing Key Lecture 007

Editor's Notes

• #5: 1 Open PGP Desktop, click the PGP Keys Control box, and select My Private Keys . 2 In the PGP Keys Work area, double-click the private key to which you are adding a user name or email address. The Key Properties dialog box for the key you double-clicked is displayed. 3 Click Add Email Address . The PGP New User Name dialog box is displayed. 4 Type the new name and email address in the appropriate fields, then click OK . The PGP Enter Passphrase for Key dialog box is displayed. 5 Enter the private key passphrase of the key you are modifying, then click OK . 6 To set the new user name and address as the primary identifier for your key, click the name of the current primary keyholder in the Key Properties dialog box and select the user you just added. 7 Exit the Key Properties dialog box. In the list of keys in PGP Desktop, the new name is added to the end of the user name list associated with the key.
• #6: 1 Open PGP Desktop, click the PGP Keys Control box, and select My Private Keys . 2 In the PGP Keys Work area, double-click the private key to which you are adding a user name or email address. The Key Properties dialog box for the key you double-clicked is displayed. 3 Click Add Email Address . The PGP New User Name dialog box is displayed. 4 Type the new name and email address in the appropriate fields, then click OK . The PGP Enter Passphrase for Key dialog box is displayed. 5 Enter the private key passphrase of the key you are modifying, then click OK . 6 To set the new user name and address as the primary identifier for your key, click the name of the current primary keyholder in the Key Properties dialog box and select the user you just added. 7 Exit the Key Properties dialog box. In the list of keys in PGP Desktop, the new name is added to the end of the user name list associated with the key.
• #7: 1 Open PGP Desktop, click the PGP Keys Control box, and select My Private Keys . 2 In the PGP Keys Work area, double-click the private key to which you are adding a user name or email address. The Key Properties dialog box for the key you double-clicked is displayed. 3 Click Add Email Address . The PGP New User Name dialog box is displayed. 4 Type the new name and email address in the appropriate fields, then click OK . The PGP Enter Passphrase for Key dialog box is displayed. 5 Enter the private key passphrase of the key you are modifying, then click OK . 6 To set the new user name and address as the primary identifier for your key, click the name of the current primary keyholder in the Key Properties dialog box and select the user you just added. 7 Exit the Key Properties dialog box. In the list of keys in PGP Desktop, the new name is added to the end of the user name list associated with the key.
• #8: 1 Open PGP Desktop, click the PGP Keys Control box, and select My Private Keys . 2 In the PGP Keys Work area, double-click the private key to which you are adding a user name or email address. The Key Properties dialog box for the key you double-clicked is displayed. 3 Click Add Email Address . The PGP New User Name dialog box is displayed. 4 Type the new name and email address in the appropriate fields, then click OK . The PGP Enter Passphrase for Key dialog box is displayed. 5 Enter the private key passphrase of the key you are modifying, then click OK . 6 To set the new user name and address as the primary identifier for your key, click the name of the current primary keyholder in the Key Properties dialog box and select the user you just added. 7 Exit the Key Properties dialog box. In the list of keys in PGP Desktop, the new name is added to the end of the user name list associated with the key.
• #9: 1 Open PGP Desktop, click the PGP Keys Control box, and select My Private Keys . 2 In the PGP Keys Work area, double-click the private key to which you are adding a user name or email address. The Key Properties dialog box for the key you double-clicked is displayed. 3 Click Add Email Address . The PGP New User Name dialog box is displayed. 4 Type the new name and email address in the appropriate fields, then click OK . The PGP Enter Passphrase for Key dialog box is displayed. 5 Enter the private key passphrase of the key you are modifying, then click OK . 6 To set the new user name and address as the primary identifier for your key, click the name of the current primary keyholder in the Key Properties dialog box and select the user you just added. 7 Exit the Key Properties dialog box. In the list of keys in PGP Desktop, the new name is added to the end of the user name list associated with the key.
• #10: 1 Open PGP Desktop, click the PGP Keys Control box, and select My Private Keys . 2 In the PGP Keys Work area, double-click the private key to which you are adding a user name or email address. The Key Properties dialog box for the key you double-clicked is displayed. 3 Click Add Email Address . The PGP New User Name dialog box is displayed. 4 Type the new name and email address in the appropriate fields, then click OK . The PGP Enter Passphrase for Key dialog box is displayed. 5 Enter the private key passphrase of the key you are modifying, then click OK . 6 To set the new user name and address as the primary identifier for your key, click the name of the current primary keyholder in the Key Properties dialog box and select the user you just added. 7 Exit the Key Properties dialog box. In the list of keys in PGP Desktop, the new name is added to the end of the user name list associated with the key.
• #11: Signing a Public Key When you create a keypair, the keys are automatically signed. Similarly, once you are sure a key belongs to the correct person, you can sign that person’s public key, indicating that you have verified the key. When you sign someone’s public key, a signature icon along with your user name is shown attached to that key. If you import a keypair from a backup or from a different computer, that keypair may also need to be signed. Note: If you are using PGP Desktop in a PGP Universal Server-managed environment, key signing may be disabled. To sign someone’s key 1 Open PGP Desktop, click the PGP Keys Control box, and then click All Keys in the Control box. All keys on your keyring appear. 2 Do one of the following: • From the Keys menu, select Sign. • Right-click on the key you want to sign and select Sign from the list of commands that is displayed. The PGP Sign Key dialog box is displayed with the user name/email address and hexadecimal fingerprint displayed in the text box. 3 Select the Allow signature to be exported checkbox, to allow your signature to be exported with this key. An exportable signature is one that is allowed to be sent to servers and travels with the key whenever it is exported, such as by dragging it to an email message. The checkbox provides a shorthand means of indicating that you want to export your signature so that others can rely on your signature and trust your keys as a result. 4 Click More Choices to configure options such as signature type and signature expiration. 5 Choose a signature type to sign the public key with. Your choices are: • Non-exportable. Use this signature when you believe the key is valid, but you don’t want others to rely on your certification. This signature type cannot be sent with the associated key to a keyserver or exported in any way. • Exportable. Use exportable signatures in situations where your signature is sent with the key to the keyserver, so that others can rely on your signature and trust your keys as a result. This is equivalent to selecting the Allow signature to be exported checkbox on the Sign Keys menu. • Meta-Introducer Non-Exportable. Certifies that this key and any keys signed by this key with a Trusted Introducer Validity Assertion are fully trusted introducers to you. This signature type is non-exportable. • Trusted Introducer Exportable. Use this signature in situations where you certify that this key is valid, and that the owner of the key should be completely trusted to vouch for other keys. This signature type is exportable. You can restrict the validation capabilities of the trusted introducer to a particular email domain. 6 The Maximum Trust Depth option enables you to identify how many levels deep you can nest trusted-introducers. For example, if you set this to 1, there can only be one layer of introducers below the meta-introducer key. 7 If you want to limit the trusted introducer’s key validation capabilities to a single domain, type the domain name in the Domain Restriction text box. 8 In the Expiration field, select Never if you don’t want this signature to expire or select a date on which it does expire. 9 Click OK. The PGP Enter Passphrase for Key dialog box is displayed. 10 Select the key you want to sign with from the list, then type the passphrase of the signing key, if required. (If the passphrase is already cached, you don’t need to type it again.) 11 Click OK. The key is signed.
• #12: Signing a Public Key When you create a keypair, the keys are automatically signed. Similarly, once you are sure a key belongs to the correct person, you can sign that person’s public key, indicating that you have verified the key. When you sign someone’s public key, a signature icon along with your user name is shown attached to that key. If you import a keypair from a backup or from a different computer, that keypair may also need to be signed. Note: If you are using PGP Desktop in a PGP Universal Server-managed environment, key signing may be disabled. To sign someone’s key 1 Open PGP Desktop, click the PGP Keys Control box, and then click All Keys in the Control box. All keys on your keyring appear. 2 Do one of the following: • From the Keys menu, select Sign. • Right-click on the key you want to sign and select Sign from the list of commands that is displayed. The PGP Sign Key dialog box is displayed with the user name/email address and hexadecimal fingerprint displayed in the text box. 3 Select the Allow signature to be exported checkbox, to allow your signature to be exported with this key. An exportable signature is one that is allowed to be sent to servers and travels with the key whenever it is exported, such as by dragging it to an email message. The checkbox provides a shorthand means of indicating that you want to export your signature so that others can rely on your signature and trust your keys as a result. 4 Click More Choices to configure options such as signature type and signature expiration. 5 Choose a signature type to sign the public key with. Your choices are: • Non-exportable. Use this signature when you believe the key is valid, but you don’t want others to rely on your certification. This signature type cannot be sent with the associated key to a keyserver or exported in any way. • Exportable. Use exportable signatures in situations where your signature is sent with the key to the keyserver, so that others can rely on your signature and trust your keys as a result. This is equivalent to selecting the Allow signature to be exported checkbox on the Sign Keys menu. • Meta-Introducer Non-Exportable. Certifies that this key and any keys signed by this key with a Trusted Introducer Validity Assertion are fully trusted introducers to you. This signature type is non-exportable. • Trusted Introducer Exportable. Use this signature in situations where you certify that this key is valid, and that the owner of the key should be completely trusted to vouch for other keys. This signature type is exportable. You can restrict the validation capabilities of the trusted introducer to a particular email domain. 6 The Maximum Trust Depth option enables you to identify how many levels deep you can nest trusted-introducers. For example, if you set this to 1, there can only be one layer of introducers below the meta-introducer key. 7 If you want to limit the trusted introducer’s key validation capabilities to a single domain, type the domain name in the Domain Restriction text box. 8 In the Expiration field, select Never if you don’t want this signature to expire or select a date on which it does expire. 9 Click OK. The PGP Enter Passphrase for Key dialog box is displayed. 10 Select the key you want to sign with from the list, then type the passphrase of the signing key, if required. (If the passphrase is already cached, you don’t need to type it again.) 11 Click OK. The key is signed.
• #13: Signing a Public Key When you create a keypair, the keys are automatically signed. Similarly, once you are sure a key belongs to the correct person, you can sign that person’s public key, indicating that you have verified the key. When you sign someone’s public key, a signature icon along with your user name is shown attached to that key. If you import a keypair from a backup or from a different computer, that keypair may also need to be signed. Note: If you are using PGP Desktop in a PGP Universal Server-managed environment, key signing may be disabled. To sign someone’s key 1 Open PGP Desktop, click the PGP Keys Control box, and then click All Keys in the Control box. All keys on your keyring appear. 2 Do one of the following: • From the Keys menu, select Sign. • Right-click on the key you want to sign and select Sign from the list of commands that is displayed. The PGP Sign Key dialog box is displayed with the user name/email address and hexadecimal fingerprint displayed in the text box. 3 Select the Allow signature to be exported checkbox, to allow your signature to be exported with this key. An exportable signature is one that is allowed to be sent to servers and travels with the key whenever it is exported, such as by dragging it to an email message. The checkbox provides a shorthand means of indicating that you want to export your signature so that others can rely on your signature and trust your keys as a result. 4 Click More Choices to configure options such as signature type and signature expiration. 5 Choose a signature type to sign the public key with. Your choices are: • Non-exportable. Use this signature when you believe the key is valid, but you don’t want others to rely on your certification. This signature type cannot be sent with the associated key to a keyserver or exported in any way. • Exportable. Use exportable signatures in situations where your signature is sent with the key to the keyserver, so that others can rely on your signature and trust your keys as a result. This is equivalent to selecting the Allow signature to be exported checkbox on the Sign Keys menu. • Meta-Introducer Non-Exportable. Certifies that this key and any keys signed by this key with a Trusted Introducer Validity Assertion are fully trusted introducers to you. This signature type is non-exportable. • Trusted Introducer Exportable. Use this signature in situations where you certify that this key is valid, and that the owner of the key should be completely trusted to vouch for other keys. This signature type is exportable. You can restrict the validation capabilities of the trusted introducer to a particular email domain. 6 The Maximum Trust Depth option enables you to identify how many levels deep you can nest trusted-introducers. For example, if you set this to 1, there can only be one layer of introducers below the meta-introducer key. 7 If you want to limit the trusted introducer’s key validation capabilities to a single domain, type the domain name in the Domain Restriction text box. 8 In the Expiration field, select Never if you don’t want this signature to expire or select a date on which it does expire. 9 Click OK. The PGP Enter Passphrase for Key dialog box is displayed. 10 Select the key you want to sign with from the list, then type the passphrase of the signing key, if required. (If the passphrase is already cached, you don’t need to type it again.) 11 Click OK. The key is signed.
• #14: Signing a Public Key When you create a keypair, the keys are automatically signed. Similarly, once you are sure a key belongs to the correct person, you can sign that person’s public key, indicating that you have verified the key. When you sign someone’s public key, a signature icon along with your user name is shown attached to that key. If you import a keypair from a backup or from a different computer, that keypair may also need to be signed. Note: If you are using PGP Desktop in a PGP Universal Server-managed environment, key signing may be disabled. To sign someone’s key 1 Open PGP Desktop, click the PGP Keys Control box, and then click All Keys in the Control box. All keys on your keyring appear. 2 Do one of the following: • From the Keys menu, select Sign. • Right-click on the key you want to sign and select Sign from the list of commands that is displayed. The PGP Sign Key dialog box is displayed with the user name/email address and hexadecimal fingerprint displayed in the text box. 3 Select the Allow signature to be exported checkbox, to allow your signature to be exported with this key. An exportable signature is one that is allowed to be sent to servers and travels with the key whenever it is exported, such as by dragging it to an email message. The checkbox provides a shorthand means of indicating that you want to export your signature so that others can rely on your signature and trust your keys as a result. 4 Click More Choices to configure options such as signature type and signature expiration. 5 Choose a signature type to sign the public key with. Your choices are: • Non-exportable. Use this signature when you believe the key is valid, but you don’t want others to rely on your certification. This signature type cannot be sent with the associated key to a keyserver or exported in any way. • Exportable. Use exportable signatures in situations where your signature is sent with the key to the keyserver, so that others can rely on your signature and trust your keys as a result. This is equivalent to selecting the Allow signature to be exported checkbox on the Sign Keys menu. • Meta-Introducer Non-Exportable. Certifies that this key and any keys signed by this key with a Trusted Introducer Validity Assertion are fully trusted introducers to you. This signature type is non-exportable. • Trusted Introducer Exportable. Use this signature in situations where you certify that this key is valid, and that the owner of the key should be completely trusted to vouch for other keys. This signature type is exportable. You can restrict the validation capabilities of the trusted introducer to a particular email domain. 6 The Maximum Trust Depth option enables you to identify how many levels deep you can nest trusted-introducers. For example, if you set this to 1, there can only be one layer of introducers below the meta-introducer key. 7 If you want to limit the trusted introducer’s key validation capabilities to a single domain, type the domain name in the Domain Restriction text box. 8 In the Expiration field, select Never if you don’t want this signature to expire or select a date on which it does expire. 9 Click OK. The PGP Enter Passphrase for Key dialog box is displayed. 10 Select the key you want to sign with from the list, then type the passphrase of the signing key, if required. (If the passphrase is already cached, you don’t need to type it again.) 11 Click OK. The key is signed.
• #15: Creating New Subkeys Most likely you will create new subkeys in the manner described in this section. However, you can also create subkeys when you first install PGP Desktop and are using the New Key wizard. For more information, see Using PGP Desktop for the First Time (on page 17). To create new subkeys 1 In the Subkeys section of the Key Properties dialog, click the Add button. The New Subkey dialog box is displayed. 2 In the Use this subkey for area, select Encryption , Signing , or Encryption and Signing , depending on how you want to use the new subkey. 3 In the Key Size field, choose a key size from 1024 to 4096 bits, or type a custom key size from 1024 to 4096 bits. 4 In the Start Date field, type a date on which the subkey you are creating becomes effective or choose a date from the calendar. 5 In the Expiration area, select Never , or select Date and specify a date or select a date from the calendar. This information controls when the subkey expires. 6 Click OK. The Passphrase dialog box is displayed. 7 Type your passphrase and then click OK. The subkey is created.
• #16: Creating New Subkeys Most likely you will create new subkeys in the manner described in this section. However, you can also create subkeys when you first install PGP Desktop and are using the New Key wizard. For more information, see Using PGP Desktop for the First Time (on page 17). To create new subkeys 1 In the Subkeys section of the Key Properties dialog, click the Add button. The New Subkey dialog box is displayed. 2 In the Use this subkey for area, select Encryption , Signing , or Encryption and Signing , depending on how you want to use the new subkey. 3 In the Key Size field, choose a key size from 1024 to 4096 bits, or type a custom key size from 1024 to 4096 bits. 4 In the Start Date field, type a date on which the subkey you are creating becomes effective or choose a date from the calendar. 5 In the Expiration area, select Never , or select Date and specify a date or select a date from the calendar. This information controls when the subkey expires. 6 Click OK. The Passphrase dialog box is displayed. 7 Type your passphrase and then click OK. The subkey is created.
• #17: Creating New Subkeys Most likely you will create new subkeys in the manner described in this section. However, you can also create subkeys when you first install PGP Desktop and are using the New Key wizard. For more information, see Using PGP Desktop for the First Time (on page 17). To create new subkeys 1 In the Subkeys section of the Key Properties dialog, click the Add button. The New Subkey dialog box is displayed. 2 In the Use this subkey for area, select Encryption , Signing , or Encryption and Signing , depending on how you want to use the new subkey. 3 In the Key Size field, choose a key size from 1024 to 4096 bits, or type a custom key size from 1024 to 4096 bits. 4 In the Start Date field, type a date on which the subkey you are creating becomes effective or choose a date from the calendar. 5 In the Expiration area, select Never , or select Date and specify a date or select a date from the calendar. This information controls when the subkey expires. 6 Click OK. The Passphrase dialog box is displayed. 7 Type your passphrase and then click OK. The subkey is created.
• #18: Creating New Subkeys Most likely you will create new subkeys in the manner described in this section. However, you can also create subkeys when you first install PGP Desktop and are using the New Key wizard. For more information, see Using PGP Desktop for the First Time (on page 17). To create new subkeys 1 In the Subkeys section of the Key Properties dialog, click the Add button. The New Subkey dialog box is displayed. 2 In the Use this subkey for area, select Encryption , Signing , or Encryption and Signing , depending on how you want to use the new subkey. 3 In the Key Size field, choose a key size from 1024 to 4096 bits, or type a custom key size from 1024 to 4096 bits. 4 In the Start Date field, type a date on which the subkey you are creating becomes effective or choose a date from the calendar. 5 In the Expiration area, select Never , or select Date and specify a date or select a date from the calendar. This information controls when the subkey expires. 6 Click OK. The Passphrase dialog box is displayed. 7 Type your passphrase and then click OK. The subkey is created.
• #19: Creating New Subkeys Most likely you will create new subkeys in the manner described in this section. However, you can also create subkeys when you first install PGP Desktop and are using the New Key wizard. For more information, see Using PGP Desktop for the First Time (on page 17). To create new subkeys 1 In the Subkeys section of the Key Properties dialog, click the Add button. The New Subkey dialog box is displayed. 2 In the Use this subkey for area, select Encryption , Signing , or Encryption and Signing , depending on how you want to use the new subkey. 3 In the Key Size field, choose a key size from 1024 to 4096 bits, or type a custom key size from 1024 to 4096 bits. 4 In the Start Date field, type a date on which the subkey you are creating becomes effective or choose a date from the calendar. 5 In the Expiration area, select Never , or select Date and specify a date or select a date from the calendar. This information controls when the subkey expires. 6 Click OK. The Passphrase dialog box is displayed. 7 Type your passphrase and then click OK. The subkey is created.
• #20: Creating New Subkeys Most likely you will create new subkeys in the manner described in this section. However, you can also create subkeys when you first install PGP Desktop and are using the New Key wizard. For more information, see Using PGP Desktop for the First Time (on page 17). To create new subkeys 1 In the Subkeys section of the Key Properties dialog, click the Add button. The New Subkey dialog box is displayed. 2 In the Use this subkey for area, select Encryption , Signing , or Encryption and Signing , depending on how you want to use the new subkey. 3 In the Key Size field, choose a key size from 1024 to 4096 bits, or type a custom key size from 1024 to 4096 bits. 4 In the Start Date field, type a date on which the subkey you are creating becomes effective or choose a date from the calendar. 5 In the Expiration area, select Never , or select Date and specify a date or select a date from the calendar. This information controls when the subkey expires. 6 Click OK. The Passphrase dialog box is displayed. 7 Type your passphrase and then click OK. The subkey is created.
• #21: Creating New Subkeys Most likely you will create new subkeys in the manner described in this section. However, you can also create subkeys when you first install PGP Desktop and are using the New Key wizard. For more information, see Using PGP Desktop for the First Time (on page 17). To create new subkeys 1 In the Subkeys section of the Key Properties dialog, click the Add button. The New Subkey dialog box is displayed. 2 In the Use this subkey for area, select Encryption , Signing , or Encryption and Signing , depending on how you want to use the new subkey. 3 In the Key Size field, choose a key size from 1024 to 4096 bits, or type a custom key size from 1024 to 4096 bits. 4 In the Start Date field, type a date on which the subkey you are creating becomes effective or choose a date from the calendar. 5 In the Expiration area, select Never , or select Date and specify a date or select a date from the calendar. This information controls when the subkey expires. 6 Click OK. The Passphrase dialog box is displayed. 7 Type your passphrase and then click OK. The subkey is created.
• #22: Creating New Subkeys Most likely you will create new subkeys in the manner described in this section. However, you can also create subkeys when you first install PGP Desktop and are using the New Key wizard. For more information, see Using PGP Desktop for the First Time (on page 17). To create new subkeys 1 In the Subkeys section of the Key Properties dialog, click the Add button. The New Subkey dialog box is displayed. 2 In the Use this subkey for area, select Encryption , Signing , or Encryption and Signing , depending on how you want to use the new subkey. 3 In the Key Size field, choose a key size from 1024 to 4096 bits, or type a custom key size from 1024 to 4096 bits. 4 In the Start Date field, type a date on which the subkey you are creating becomes effective or choose a date from the calendar. 5 In the Expiration area, select Never , or select Date and specify a date or select a date from the calendar. This information controls when the subkey expires. 6 Click OK. The Passphrase dialog box is displayed. 7 Type your passphrase and then click OK. The subkey is created.
• #23: To rejoin a split key 1 Contact each shareholder of the split key. To rejoin key shares locally, the shareholders of the key must be present. To collect key shares over the network, make sure the remote shareholders have PGP Desktop installed and are prepared to send their key share file. Remote shareholders must have: • their key share files and passwords • a keypair (for authentication to the computer that is collecting the key shares) • a network connection • the IP address or Fully Qualified Domain Name of the computer that is collecting the key shares 2 Do one of the following: • To temporarily rejoin the key, at the rejoining computer, use Windows Explorer to select the file(s) that you want to sign or decrypt with the split key. Right-click on the file(s) and select Sign or Decrypt from the PGP shortcut menu. The PGP Enter Passphrase for Selected Key screen is displayed with the split key selected. Click OK to reconstitute the selected key. The Key Share Collection screen is displayed. • To permanently rejoin the key, right-click the split key and select Key Properties from the menu displayed. In the Key Properties dialog box, click J oin Key (this button is labeled Change Passphrase for keys that are not split). The Passphrase dialog box is displayed.
• #26: Message encrypted, but not signed. When PGP Desktop sees a message coming to you that is encrypted, it will attempt to decrypt it for you. To do this, PGP Desktop will check the local keyring for the private key that can decrypt the message. If the private key is not on the local keyring, PGP Desktop will not be able to decrypt it; the message will be passed to your email client still encrypted. If the private key is on the local keyring, PGP Desktop will decrypt it immediately if the passphrase for the private key is in memory (cached). If the passphrase is not cached, PGP Desktop will prompt you for the passphrase and decrypt the message when you supply the correct passphrase. Once a message is decrypted, PGP Desktop passes it to your email client. If the PGP Desktop messaging proxy is turned off, PGP Desktop will not be able to decrypt incoming encrypted messages; it will pass them along to your email client still encrypted. It is recommended that you leave your messaging proxy on all the time if you expect to be sending and receiving encrypted messages. On is the default setting.
• #27: Message encrypted, but not signed. When PGP Desktop sees a message coming to you that is encrypted, it will attempt to decrypt it for you. To do this, PGP Desktop will check the local keyring for the private key that can decrypt the message. If the private key is not on the local keyring, PGP Desktop will not be able to decrypt it; the message will be passed to your email client still encrypted. If the private key is on the local keyring, PGP Desktop will decrypt it immediately if the passphrase for the private key is in memory (cached). If the passphrase is not cached, PGP Desktop will prompt you for the passphrase and decrypt the message when you supply the correct passphrase. Once a message is decrypted, PGP Desktop passes it to your email client. If the PGP Desktop messaging proxy is turned off, PGP Desktop will not be able to decrypt incoming encrypted messages; it will pass them along to your email client still encrypted. It is recommended that you leave your messaging proxy on all the time if you expect to be sending and receiving encrypted messages. On is the default setting.
• #28: Message encrypted, but not signed. When PGP Desktop sees a message coming to you that is encrypted, it will attempt to decrypt it for you. To do this, PGP Desktop will check the local keyring for the private key that can decrypt the message. If the private key is not on the local keyring, PGP Desktop will not be able to decrypt it; the message will be passed to your email client still encrypted. If the private key is on the local keyring, PGP Desktop will decrypt it immediately if the passphrase for the private key is in memory (cached). If the passphrase is not cached, PGP Desktop will prompt you for the passphrase and decrypt the message when you supply the correct passphrase. Once a message is decrypted, PGP Desktop passes it to your email client. If the PGP Desktop messaging proxy is turned off, PGP Desktop will not be able to decrypt incoming encrypted messages; it will pass them along to your email client still encrypted. It is recommended that you leave your messaging proxy on all the time if you expect to be sending and receiving encrypted messages. On is the default setting.
• #29: Message encrypted, but not signed. When PGP Desktop sees a message coming to you that is encrypted, it will attempt to decrypt it for you. To do this, PGP Desktop will check the local keyring for the private key that can decrypt the message. If the private key is not on the local keyring, PGP Desktop will not be able to decrypt it; the message will be passed to your email client still encrypted. If the private key is on the local keyring, PGP Desktop will decrypt it immediately if the passphrase for the private key is in memory (cached). If the passphrase is not cached, PGP Desktop will prompt you for the passphrase and decrypt the message when you supply the correct passphrase. Once a message is decrypted, PGP Desktop passes it to your email client. If the PGP Desktop messaging proxy is turned off, PGP Desktop will not be able to decrypt incoming encrypted messages; it will pass them along to your email client still encrypted. It is recommended that you leave your messaging proxy on all the time if you expect to be sending and receiving encrypted messages. On is the default setting.