GPG or PGP

bjblackmore

Hi,
This is a little off topic.
Has anyone ever used GPG with PHP? I take its almost the same setup as PGP? I was wondering, I have decided to use mail encryption, to send the credit card info to my client when people book, rather than SSL. My question is, do I setup GPG on the mail server, and send the public key to the recipient, or should I set GPG up on the recipients PC, and send it to the mail server? And how do I decrypt the email on the recipients PC? If I have the key, how do I get outlook or whatever to use it, to read the email?
I know this is a little OT, but I'd appreciate any help on the topic, and as we're all here to create a better securer internet i hope you won't mind
Cheers
Ben

php4hosting

You take the end users (Your client) public PGP key (I.E. install it on their PC and create a key pair)

Install GPG on the web server using the public key, then use PHP to encrypt the mail and send to the end user

If they have a windows version of PGP it will work with outlook to decrypt the mails

See http://phpfaq.info (AKA http://www.alt-php-faq.org ) for more on GPG/PHP scripts/install

Regards
Darren
http://www.php4hosting.com

bjblackmore

OK thats great!
Cheers
for your help
Ben

bjblackmore

I'm trying to import the public key I have created, but I get:-

gpg: Warning: using insecure memory!
gpg: key has been created 347 seconds in future (time warp or clock problem)
gpg: key FD746831: invalid self-signature
gpg: key has been created 347 seconds in future (time warp or clock problem)
gpg: key FD746831: invalid subkey binding
gpg: key FD746831: no valid user IDs
gpg: this may be caused by a missing self-signature
gpg: Total number processed: 1
gpg: w/o user IDs: 1

What does this meran? How do I add self signature?
Cheers
Ben