

There are alternative public key infrastructures and, in order to get started, this tutorial depends on the centralized infrastructure used by Microsoft.

The only thing you are trusting is the certificates you choose to trust, and in the open source community that creates and maintains the code implementing the encryption algorithms. But there are no authorities behind them that you can trust. Everything outlined on this page is free for end users.

And you’ll have the tools to encrypt and decrypt emails with others that also participate in this public key infrastructure.Ī note about this distributed, freeware infrastructure versus the ones big corporations use. If you go through this entire page, you’ll not only have the tools to verify WriteLog downloads, but you’ll also have the tools to verify other digitally signed internet downloads. If you download and install software from the internet-then you really want to know how to use these tools to protect yourself from hackers. At that point your Windows login is a participant in the gpg open source digital signing infrastructure. The first few steps are one time only in order to get gpg4win installed. This was constructed with Windows 10 in October, 2016. These software tools change over time, and they behave differently on different versions of Windows. Here is a step-by-step tutorial to install gpg4win and use it to verify the gpg digital signature on a WriteLog download.
