Hey Eric: Not long ago Murray had forwarded this to the list: <a href="http://www.nsa.gov/snac/downloads_redhat.cfm?MenuID=scg10.3.1.1">http://www.nsa.gov/snac/downloads_redhat.cfm?MenuID=scg10.3.1.1</a> While there are lots of reference materials like these as security best practices sources, there is a lack of less daunting simple starters! Instead of by "type of crypt" perhaps a cook book style of: - <Security/privacy guideline> for <title> - example, "Securing filesystem" - Scenarios - why it is needed? when it is needed? - Standards - mention best practice here - How to do it Count me in for assistance. <div class="gmail_quote">On Thu, Mar 20, 2008 at 7:45 AM, Eric H Christensen <<a href="mailto:eric@christensenplace.us">eric@christensenplace.us</a>> wrote: <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've been working on updating the Crypto Guide (or Encryption and Privacy Guide) [1] but I've run into a few snags. Karsten "Quaid" and I have been talking about the different information that should be included but we've come to a point where we need input from the group. Originally the Crypto Guide was written to show how to implement LUKS disk encryption within Fedora. This has been done and tested. Being that this is the "Encryption and Privacy Guide" proposed topics to include in the guide are: - - LUKS Disk Encryption Solution - - eCryptfs Disk Encryption Solution - - GnuPG (GPG) File Encryption Solution - - GnuPG (GPG) Email Encryption Solution - - SSH - - VPNs - - Other related references. I guess the biggest problem is where do you draw the line between Fedora-specific implementations and good security practices that have information available somewhere else? So I'm asking you what should be included in the Guide and what shouldn't. I'm going to try to go put as much information into the topics that are listed above but this has to be out the door for F9 so I don't want to put too much information into it. If anyone would like to assist writing on any of the above topics please let me know. Eric [1] <a href="http://fedoraproject.org/wiki/Docs/Drafts/CryptoGuide" target="_blank">http://fedoraproject.org/wiki/Docs/Drafts/CryptoGuide</a> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFH4lyDL5V8yddJCO0RAolhAJ4vMDQW9Bjmn/MT3FPidtmPxnI/MwCfVsPh nosx5HWtD06EiZCa3Yu/Fow= =K+dq -----END PGP SIGNATURE----- -- fedora-docs-list mailing list <a href="mailto:fedora-docs-list@redhat.com">fedora-docs-list@redhat.com</a> To unsubscribe: <a href="https://www.redhat.com/mailman/listinfo/fedora-docs-list" target="_blank">https://www.redhat.com/mailman/listinfo/fedora-docs-list</a> </blockquote></div> -- Gayathri Swaminathan gpgkey: 3EFB3D39 Volunteer, FDP