PGP (Pretty Good Privacy)

Overview PGP stands for Pretty Good Privacy . It is an encryption scheme designed to be unbreakable. PGPMail allows you to encrypt mail sent to you from forms on your website. Traditional encryption schemes work like this: Alice wants to send a secret message to Bob, so she takes her message and encrypts it using a key. A key is an alphanumeric series used to scramble data, so that the message can’t be read by someone just picking it up. Alice sends the message to Bob, and Bob decrypts the message, using his own copy of the key.

However, there are several problems with the above situation, the main one being that Alice , somehow, has to securely get a copy of the key to Bob. If she’s sending encrypted messages in the first place, it stands to reason that she doesn’t have a secure delivery method, and thus, will always have to worry that someone else will be able to decrypt her messages.

Fortunately, in the 70s, several mathematicians discovered a form of encryption that doesn’t require both parties to have the same code. You would think that if Alice encrypts a message to Bob using Alice’s key, and then Bob decrypts the message using his own, that the message would come out as gibberish. This isn’t the case, because both Alice and Bob actually have two keys: one for encrypting, and one for ecrypting. The key that people should use to encrypt messages to Alice is public. She can post it on her door, on her website, or publish it in the local newspaper. It doesn’t matter. She can do this, because with PGP, her key is going to be the product of two very large prime numbers. As it turns out, factoring large numbers is very difficult, and when the only two factors are primes, even more so. Alice’s public key will be the product of these two prime factors, and her private key will be the two prime factors themselves.

Bob sends Alice a message encrypted using her public key. It doesn’t matter if anyone else gets hold of the message, because only Alice will be able to interpret it. Bob doesn’t need to private key, because he’s not doing any decrypting. Alice receives the message, and uses her private key to decrypt the message. If she wants to send a reply to Bob, she’ll use the public key that he’s posted online, and he’ll use his private key to decrypt the reply.

Adding a Public Key

To add a public key for PGPMail:

1 Create a key using your mail software. The mail software should come with instructions describing how to do this.
2 Once the key is created, go to the PGP option in your Control Panel. Copy the public key information and paste it into the text area labeled PGP Mail Public Key.
3 Click the Add button; this will give you a public key to use with PGPMail.

Using PGPMail

To use PGPMail after uploading your PGP Key: Create a form on one of your web pages.

The form action line should be <FORM ACTION = "/cgi-sys/pgpmail.pl" METHOD = "POST"> pgpmail.pl will do all the programming work for you. You alter the behavior of PGPmail by using hidden fields in your form. There are three form fields that you must have in your form for PGP mail to work correctly. These are the recipient, username, and keyname fields.

Required Form Fields

recipient This form field allows you to specify where your form results will be mailed. Most likely you will want to configure this option as a hidden form field with a value equal to that of your email address.
Syntax <input type=hidden name="recipient" value="anyname@yourdomain.com,othername@yourdomain.com">

username This field tells PGPMail where to look for the configuration files to encrypt mail sent to you. You should replace yourusername with your Control Panel username.
Syntax <input type=hidden name="username" value="yourusername">

keyname This form field allows you to specify the name of your public key. This will be the public key that PGPMail uses to encrypt your mail. You must possess the private key in order to decrypt the email that is sent. You can get your public key name by going to PGP Manager. It is typically just your email address.
Syntax <input type=hidden name="keyname" value="publickeyname">

Mailing Lists

Feature Overview

The Mailing List option allows you to create and manage mailing lists. The creation and management of your Mailing List is done with the Mail Manager option; however, first you must install Mailing List on your domain.

To install Mailing List:

1 Go to your Control Panel and click the Mailing List icon.
2 Click Install Mailing List. A message will appear, informing you that Mailing List will be installed within ten (10) minutes. Once Mailing List is installed, you may manage your mailing lists through the Mail Manager.

To access the Mailing List after installation:

Click the Mail Manager icon in your Control Panel. In the right-hand menu, there will be a Mailing List section. If no mailing lists are installed, the only option available will be New.

Creating Lists You may create as many lists as your package allows.

To create a mailing list:

1 Click the New List link under Mailing List options on the home page. This will take you to the Create Mailing list page.
2 Enter a list name; it should be between four (4) and fourteen (14) characters. It must be alphanumeric with no special characters.
3 Enter the list maintainer’s email address. All subscribe and unsubscribe requests will be sent to maintainer of the list.
4 Enter the maintainer’s password. This password must be between six (6) and fourteen (14) characters. No special characters are allowed.
5 Select one of the following list types:

Open list As the name suggests, anyone may send postings to this list. All the subscribers of the list will receive emails sent to this list.

Closed List (Subscriber-Only) Only subscribed users can send postings to this list. All list subscribers will receive the mails sent to the list.

Newsletter Subscribers can only receive mails from the list. Only the maintainer may post to the list. Emails sent to the list that are not from the maintainer will be received by only the maintainer.

Moderated list All emails sent to the list will be sent to moderators for approval, before posting to subscribers.

6 Click Add List to save changes.
7 You will see a page with the options available for the list, concerning subscribing, unsubscribing, and sending emails.

Editing lists

An Edit List link will be displayed on the Mail Manager home page when at least one mailing list exists on your domain. This is used to edit the settings of existing lists.

To Edit a List:

1 Click Edit List. The Edit Mailing List page will load.
2 Select the list to be edited from the drop-down menu.
3 Click View Details. You may edit the following:

• Maintainer Email Address
• Maintainer Password
• Archive History
• List type (Open, Closed, Newsletter, Moderated List)
• Subscribers (subscribe and unsubscribe)

4 Edit the desired information and click Save Changes.

Deleting Lists

A Delete List link will be displayed on the Mail Manager home page when at least one mailing list exists on your domain.

To delete an existing list:

1 Click Delete List. This will take you to Delete Mailing List page.
2 Select the list from the drop-down menu.
3 Click Delete. A message will appear asking for confirmation.
4 Click OK to delete the selected list, or Cancel to return to the Delete Mailing List page.

Editing Moderators

An Edit Moderators link will be displayed on the Mail Manager home page when at least one moderated list exists on your domain. This is used to edit the settings of a list’s moderators.

To edit Moderators:

1 Click Edit Moderators on the homepage.
2 Select the list from the drop-down menu.
3 Click Select. A page will load that allows you to add and remove moderators.

To make a new user Moderator:

1 Enter a new email address in the Moderator’s email field.
2 Click Add.
3 Click Save.

To remove an existing Moderator:

1 Select the email address from the list labeled Moderators.
2 Click Remove.
3 Click Save Changes.

Administering Lists An Administer List link will be displayed on the home page when the domain contains at least one list.

To administer a list: Click the Administer List link on the home page. This will take you to the Administer Mailing List page.

1 Select the list from the drop down list box.
2 Click Administer.

Email List of Subscribers An email, containing list of all the subscribers of the selected list, will be sent to the maintainer of the list.
Email List Log You may have the log of all actions performed by the list sent to the list maintainer.
Delete List Log You may delete the current log.
Search list for a near match A list of all subscribed users satisfying the matching criterion can be mailed to the Maintainer of the selected list. Note that test , testuser , and new_test would all be included in a search for test .

Emailing and subscribing to the list

To subscribe to the list: Send a message with subscribe as the subject to the list’s -request address (<listname>- request@<domain>).
To subscribe to the list’s digest: Send a message with subscribe as the subject to the list’s -d-request address (<listname>-d-request@<domain>).
To email the list: Send an email to <listname>@<domain>
To unsubscribe from the list: Send an email with unsubscribe as the subject to the list’s -request address (<listname>- request@<domain>).
To unsubscribe from the list’s digest: Send an email with unsubscribe as the subject to the list’s -d-request address (<listname>-d-request@<domain>).

SpamVault

Feature Overview SpamVault is an easy to use program that allows unwanted emails to be blocked; however, SpamVault must be used with caution, or you may block emails you wish to recieve, and SpamVault cannot retrieve lost email.

To access SpamVault: Click the SpamVault icon in your Control Panel. While the SpamVault icon may already appear in your Control Panel, you must contact your hosting provider to activate it. Until this is done, a notice will appear stating that SpamVault is not activated.

Using SpamVault

Once SpamVault is activated on a server, it is very easy to use. Simply click the SpamVault icon. At the bottom of the page there is a note encouraging users to read the instructions that are linked to the page; users should consider doing this to help avoid the risk of deleting email that they may wish to keep. To read these instructions, simply click on the word instructions; they provide a very detailed description of what functions SpamVault performs.

To run SpamVault:

After installation, click the Click Here to Run SpamVault link. The page that displays also gives an instructions link; after reading these instructions, determine how SpamVault should be configured by using the configure options provided. SpamVault may be configured to:

• Filter Spam
• Delete Spam
• Log Email (this feature may use a lot of disk space)
• Create a White List
• Enable more Advanced Filtering Tools
• Determine the Width of Text Boxes

Once the Configuration Data is determined, type in a New Entry, and choose one of the following triggers:

• From
• To
• Header
• Subject
• Body

If you click on Add Entry, the page will refresh with a message saying that the entry was accepted. The entry should then appear at the bottom of the page in a list of entries that are currently being blocked.