Tech:PGP

Orain uses OpenPGP extensively for signing and encryption.

There are many applications that support PGP:

• Enigmail (Thunderbird extension): best for beginners
• gpg2 (command line tool): best for power users
• gpg4win (Windows graphical interface)
• Mailvelope (Chrome and Firefox extension): good for beginners
• Seahorse (Linux graphical interface)

The recommended hashing algorithm is SHA384 or SHA512 and the recommended encryption algorithm is AES256. The recommended keyserver is the SKS keyserver pool (HKPS or web).

Before trusting a key, find a diff (as opposed to page content) that shows that the user has confirmed its validity and check with a key server that the keypair hasn't been revoked.