FAQ: General Questions & Answers

What should I expect after installing?

When you first install GoodCrypto, you customize it. Then you configure your existing mail server and browsers for it. Then nothing much seems to happen. Your GoodCrypto private server is almost invisible. That's what makes it so easy.

Mail

Don't expect to see anything different for local mail. That should already be protected by TLS. (If your mail server doesn't require TLS for local mail, take a few minutes now to fix that. It's important.)

As soon as someone sends their next message to anywhere, GoodCrypto generates their PGP key. You can see it on your private server's web site.

When two groups both use GoodCrypto, each person has to send one last unencrypted message to the other.

After that, the connection is encrypted. At the bottom of each message from your contact you'll see, "This message was received privately."

Here's what they didn't have to do:

  • Create a key
  • Publish their public key
  • Find every other person's public key
  • Import every other public key they need
  • Encrypt and sign each outgoing message
  • Decrypt and check the signature on each incoming message

GoodCrypto sends its own messages letting you know what's going on behind the scenes. At the beginning you get a message when your new key is ready. You also hear when a new public key from a contact comes in.

You can also communicate privately with anyone who uses OpenPGP. But if they aren't using GoodCrypto it's not completely automatic.

Web

Some changes when you browse are obvious at a glance. Everything looks different. The whole web appears much calmer. No pictures. No videos. No javascript. These are unfortunately all ways attackers can take over your computer without you knowing it happened. So GoodCrypto blocks them.

Some web sites are very unhappy when they can't spy on you. They complain that your browser is old or misconfigured. Ignore them.

There's also a lot you can't see. All your web traffic goes through Tor. Outgoing private information that you didn't send is stripped.