Using free command line tools until GNotary becomes available
... or even longer; who knows, maybe you become fond of nicely crafted
shell scripts?
- anything written in red
is what you have to enter at the system prompt
- Get the GNU Privacy Guard from http://www.gnupg.org
and install it
- Download the PDF documentation
, optionally print it out, but READ IT!
- Generate your own keyset:, following the instructions available
here.
- Take your time to thin of a pass phrase that you can memorize. Read
the instructions regarding pass phrases carefully!
- Exchange keys with a trusted 3rd party like your Divison of General
Practice
- Make a compressed backup of the files you want to notarize with your
favourite backup software
- Sign the compressed backup file with gpg -ba
<your-file-name>
- This will create a file <your-file-name>.asc after you entered
your passphrase at the prompt
- Check the signature with gpg --verify <your-file-name>.asc
<your-file-name>
-
A message will show you when your document has been signed, what algorithm
and key had been used, who had signed your document, and whether the integrity
of your document can be guaranteed.
- Send this message by email to your trusted third party
- Your trusted third party signs the message same way as you did, just
using their private key for the signature
- Then they email it back to you. Keep both your signature and theirs.
- In order to be able to verify their signature, you need to import their
public key.
- Make regular backups of your signatures and keyrings.
- Keep track of which file has been notarized with which signature
- Never ever give your private key away.
Keep it the same way as if would be a million Dollars in cash.
Never ever even think about writing
your passphrase down.
See, no magic involved.The nice thing with GNotary will be that all of
the
above can be achieved with a few mouse clicks (well, you still have
to enter
your passphrase once per session as well).