Slashdot Mirror

← Back to Stories (view on slashdot.org)

Graphical Frontend for GnuPG (Win32)

Posted by michael on from the crypto-for-the-masses dept.

Crixus writes "For those of you who are loathe to move from PGP to GnuPG on your Windows boxen because of no graphical interface, now you have one. It's GPL'd and it's called Windows Privacy Tray (WinPT) and acts, looks, and feels just like PGP-Tray. It's still in development, but the last release I got works great, and is getting better (because unlike the OTHER frontend for GnuPG, WinPT is actually being worked on). The author is also having a contest to draw what will be the official Icon for WinPT. Why not give it a try?"

2 of 7 comments (clear)

  1. Re:GPG should be used under Windows only with caut by Crixus · · Score: 2
    Please note that the GPG website says that "due to the lack of a well tested entropy source, it should be used with some caution" under Windows. Linux is the recommended platform, the BSDs are the only others that get a full thumbs up.

    Actually, although the site said that, it's not the case anymore, and I believe hasn't been the case since version 1.0.3 (maybe 1.0.2?). I asked Werner this very question this morning and he said that yes, the Win32 version is running securely and that he had forgotten to update the website as to this fact.

    As I had originally assumed, the moment he removed the warning from next to the link to download the Win32 binary, was the moment it was known to be secure. He has now updated the GnuPG web site to reflect this.

    Rich...

    --
    Ignore Alien Orders
  2. GPG should be used under Windows only with caution by Stormie · · Score: 2

    Please note that the GPG website says that "due to the lack of a well tested entropy source, it should be used with some caution" under Windows. Linux is the recommended platform, the BSDs are the only others that get a full thumbs up.

    Still, that's an improvement - last time I looked, they said that you should only ever use the Windows version for decrypting and verifying signatures, never for generating keys or encrypting, due to this lack of a secure random source..