haggholm: (Default)
[personal profile] haggholm

Since I’m on a security spree, finally getting my arse in gear to do what I should have been doing for a long time, I decided to also generate a new PGP key that actually matches my current email address and perhaps (wonder of wonders) actually sign email by default. I may or may not bother about encryption; it’s certainly a nice-to-have, but I’m trying to ease into good habits, and I want to read up more on backing up public keys¹.

What this means is that I am curious about what mail client you use, because people reading this post comprise a pretty hefty chunk of all the people whom I want to be able to read my mail. Since some mail clients (notably Microsoft clients) are a bit iffy when it comes to features like PGP/MIME, from what I’m told, it would be very nice to know what I can rely on recipients being able to receive…

[Poll #1420360]

¹ Questions include:

  • How do I back up all my known public keys to begin with? —Automatically, if you please. If I have archived, encrypted emails, I would very much like to keep keys around so I can read them…
  • What happens when somebody expires a key, and I sync with keyservers? Does it stay in my keyring by default? What about revoked keys?

Date: 2009-06-24 11:47 am (UTC)
From: [identity profile] tomcort.com (from livejournal.com)
For some e-mail correspondence I still use gmail, but I've slowly started to move away from gmail. My main concerns with gmail are privacy, non-free software, and the possibility that gmail might not exist forever. To get away from gmail, learn some new skills, and have some fun I setup my own mail server running postfix.

My non-gmail e-mail client is SquirrelMail. I have apache configured with mod_ssl. dovecot, the IMAP server, is configured to just listen for imaps (IMAP over SSL) on localhost.

SquirrelMail doesn't have GPG integration out of the box (I think there might be a plugin for it), but that isn't very important to me. Very few people I e-mail know what a cryptographic signature is and even fewer know how to verify a signed message. Sending a signed message to those people and people with @aol.com and @hotmail.com addresses is just a waste of bandwidth IMHO.

Date: 2009-06-24 01:41 pm (UTC)
kokopellinelli: (Default)
From: [personal profile] kokopellinelli
I use Gmail and Hotmail (mostly Gmail).

Date: 2009-06-24 02:42 pm (UTC)
From: [identity profile] chutzman.livejournal.com
I use thunderbird with lightning installed for email. I have enigmail set up, but I really only use it for my gentoo account. I despise webmail interfaces and generally avoid them as much as possible.

Date: 2009-06-24 07:30 pm (UTC)
From: [identity profile] apollotiger.livejournal.com
I use Apple’s Mail.app, even though it has been known (on frequent occasions) to, as the kids put it, “suck floppy donkey cock”. The GPGMail plugin for it is decent, though, and I’ve been quite happy with that. Personally, I think that a bundle/package/plugin to verify PGP signatures ought to be included with mail programs by default.

Date: 2009-06-25 02:45 am (UTC)
From: [identity profile] sheepykins.livejournal.com
I use Gmail's web interface when I'm at NARA. And my NARA address uses (puke) Novell Groupwise

Most Popular Tags