[Fsuk-manchester] Follow-up: MFS Meeting. (at PLANT NOMA) Tue, 17 July. "CryptoPractical"

[Michael Dorrington]

On 12/07/18 08:46, Michael Dorrington wrote:

> * Event: Manchester Free Software's July Meeting
> 
> * Talk: CryptoPractical
> * Speaker: Michael Dorrington

Exercises (and feel free to ask for help on the MFS mailinglist):

1. Set up an encrypted USB stick using LUKS.

Some things to keep in mind:

a) Triple check you are messing with the right block ("disk") device.
Commands like `lsblk` and `lsblk --scsi` help here.

b) Fill the disk/block device with random data first, something like:

dd bs=1M if=/dev/urandom of=/dev/sdKNOWWHATYOUAREDOING

c) Set up requires the command line but, depending how you do the set
up, after that you should get a Desktop GUI prompt when using and not
need the command line.

As is often the case, the Arch Wiki has an excellent generic article on
the topic (but is missing the filling disk/block device with random data
first):

https://wiki.archlinux.org/index.php/Dm-crypt/Device_encryption

What are the details of the LUKS on the disk/block device?


2. Set up an OpenPGP keypair and/or it set up for email (if you haven't
already!)

There are varying opinions on exactly what to do, such as whether to
have a key expiry date or not; whether to install Enigmail from your
distro or not; and so on but the FSF's "Email Self-Defense" guide is one
option to get an OpenPGP keypair and email client set up.

https://emailselfdefense.fsf.org/en/

Who could you relatively easily meet up to do key signing?  Meet up and
key sign with them!


3. HTTPS your website (if you haven't already)

If you haven't got HTTPS for a website you own and/or run then get a
Let's Encrypt certificate for it:

https://letsencrypt.org/

What versions of SSL/TLS is the site offering?  Is that what you want?


Regards,
M.
MFS Chair.

-- 
FSF member #9429
http://www.fsf.org/register_form?referrer=9429
http://www.fsf.org/about
"The Free Software Foundation (FSF) is a nonprofit with a worldwide
mission to promote computer user freedom and to defend the rights of all
free software users."

signature.asc
Description: OpenPGP digital signature