Quote from: twister on March 15, 2015, 06:12:26 AM

Great tutorial, very helpful for newbies who I have seen having trouble understanding the difference between signing a message and signing a post.

Can you make one for 'How to get a PGP Key', as well?

I have added it for the to do list for now, not sure yet.

Quote from: pooya87 on March 15, 2015, 10:46:46 AM

wow, thank you shorena it was pretty usefull. actually i was looking for something like this

i have one question though. what is the difference between the message signed this way and the one called PGP that i've seen most escrows use and they link to keybase.io website

Note the explanation below is simplified to give a rough idea about PGP. There are many detailed aspects to it that I dont want to go into here.

PGP is used since the early 90's. Its an asymmetric encryption / signature system that is used for a multitude of things now. Its now most commonly used for its intended use, to encrypt and sign mails. The encryption was so powerful that it was against USA law to export the software for a while unless significantly weakened. It had to leave the country via source code printed in a book. This is typically refered to as the crypto wars.

Without going into technical details, the main difference is how people use it. Its more likely for someone here to post a bitcoin address than it is for someone to post a full PGP key. While many of us have several bitcoin addresses to sign something with, you usually only have one or very few PGP keys (1 personal, 1 business, 1 software development, etc.). For PGP there also exists what is called the Web of Trust (WoT). If used correctly it allows you to be 100% sure that the person you are exchanging message with is exactly the person they claim, as in: it has been verified in person by someone you trust and have met in person. The biggest problem with PGP keys is to verify its owner. Same like a bitcoin address anyone can just create a PGP key pair and claim to be Bill Murray.

But, say Bill Murray (B) meets Christoph Waltz (C) in person. They sign each others keys to verify the respective owner. Should I ever meet C I can personally verify C's key and thus know B's key belongs indeed to Bill Murray. These chains are typically longer and form a complex network, the Web of Trust.

Quote from: redsn0w on March 15, 2015, 10:53:26 AM

Well done shorena, ths guide is very good and full of useful information. Do you still own this address 1Le5jXpxvANv3v5Vfx9FY3XZjHjRm8fvzg ? A little donation will arrive in minutes Wink

, take it just for your efforts in try to keep/help a good community.

Code:

----BEGIN BITCOIN SIGNED MESSAGE-----
Hi redsn0w,
today is 2015.03.15 and I am in control
of the address 1Le5jXpxvANv3v5Vfx9FY3XZjHjRm8fvzg
Shorena
-----BEGIN SIGNATURE-----
1Le5jXpxvANv3v5Vfx9FY3XZjHjRm8fvzg
INgOLoHP97AbQDN46R6/0Y73SXOW2lcnjaYoppubBY2sCGEqaylfvJrtAlqcN0sm/1v96YHuU7xcEYgKX7wxoQQ=
-----END BITCOIN SIGNED MESSAGE-----