Why Did a Signed OpenPGP Email Fail a Signature Test at the Recipient's End?

One of our customers signed an email message with the Encryptomatic OpenPGP add-in for MS Outlook, but noticed that the recipient was unable to verify the message's digital signature, which was reported as invalid. They contacted our support team to report a bug.

On closer examination, our technician discovered that the message was being altered at the email server by MsgTag, a service that inserts web beacons into messages so that the sender knows it has been read.

This is essentially the sort of man-in-the-middle attacks that PGP signing a message is supposed to signal. If a message has been altered in transit, then a OpenPGP signed message will fail a signature test.

You can learn more about Web Beacons here.
If you are a user of #MsOutlook, download a copy of Encryptomatic OpenPGP and start protecting your email messages.

Lockbin announces free add-in for Outlook email encryption

Our sister company, Lockbin.com, has released an add-in for Microsoft Outlook XP/2003/2007/2010.  The add-in lets you easily send a secure message to someone by typing that message in Outlook.

Lockbin Addin for Outlook, installed in Outlook 2010 toolbar.

To use the Lockbin add-in, open a new email message and click "Use Lockbin," then send your message.  Free users can send 1 email attachment up to 15 MB.  Premium users can send up to 20 file attachments with no pre-set size limit.

The message not sent by email, but rather via secure TLS/SSL to the Lockbin web service at Lockbin.com. There the message is encrypted and stored on the server for six months or until it is retrieved, or deleted by the sender.

Lockbin for Outlook will store passwords for frequently contacted recipients, as well as an unencrypted copy of the message locally.

A free or Premium Lockbin account is needed to use Lockbin for Outlook.   You can find a link to download the free add-in on Lockbin's Facebook page, or the Lockbin Blog.

Lockbin Settings, where you can enter your Lockbin account information

For more information on Lockbin, visit https://Lockbin.com