Table of Content
Installation
Quick guide
Configure your mail server
Postfix
Exim4
Configure your browsers
Metadata & Traffic Analysis
Protect metadata
Stop traffic analysis
Key Management
How key exchange works
Verify key
Import key
Export key
Messages
Verify arrived privately
Check if sent privately
Administration
Mail Options
Contacts
Users
Keyservers
Backups
Overview
GoodCrypto is a private server that runs on your computer which protects email and browsing for a group. It automatically encrypts and decrypts email including metadata, and manages keys. Everyone in the group gets Tor anonymity plus malware blocking and tracker removal. GoodCrypto is based on the most tested and trusted crypto, GPG and Tor. Snowden relied on them, and he is alive and free. It's hard to imagine a better test.
GoodCrypto is distributed as a preconfigured, bootable ISO. It contains all the software that you need to protect your group's mail and browsing, including full source. You simply need to integrate it with your mail server and browsers.
As years of experience with TLS, SSH, and GPG have shown, configuring crypto is hard. GoodCrypto is preconfigured to remove the hassles and improve security.
The smaller your group is, the less you can afford to install and configure your own crypto. The larger your organization is, the less you can afford users to install and configure their own crypto.
GoodCrypto is a security server and should be in a secure location with restricted access. For maximum security, we recommend that you run GoodCrypto on a headless computer.
Your GoodCrypto private server has its own web site. It's organized to reflect the two main components of GoodCrypto: Mail and Web.
You will get the best protection by encouraging others to use GoodCrypto or PGP so exchanged messages are private and secure. Whenever GoodCrypto receives a new key from another GoodCrypto private server, the key is automatically imported. GoodCrypto sends mail to the user reminding them to verify the fingerprint. If some of your contacts use PGP without GoodCrypto, sign into your GoodCrypto private server and import their public keys.