JANET CSIRT use of PGP

JANET CSIRT uses PGP encryption technology in e-mail (Pretty Good Privacy), and we encourage anyone who exchanges mail with us to do the same. In many cases this will give both parties some confidence that:

1. the originator of the information is who they claim to be,
2. the contents of the message have not been modified in transit (either accidentally or deliberately),
3. (for some messages) while the intended recipient or recipients can read the content, it remains inaccessible to anyone else who happens to obtain a copy of the message.

Public key information for JANET CSIRT

JANET CSIRT has a single public key for the team and the rôle address irt@csirt.ja.net:

• Public key (opens in a new window)
  (keyID 0x4EC70D66, accessible on the international key servers).

The team public key has three uses:

• automatically signing messages sent from the rôle address irt@csirt.ja.net as part of the incident handling process;
• signing the personal keys of team members;
• as an encryption key when sending private information to JANET CSIRT,

Messages from JANET CSIRT may be signed with the personal key of the individual team member concerned.

• JANET CSIRT team members
  lists the public keys for individual team members.

Which key to use

We encourage you to sign any messages to JANET CSIRT with your own key so that we know where they have come from.

If you consider that a particular message to JANET CSIRT needs to be encrypted for privacy, use the team key (named irt@csirt.ja.net) for encryption, and sign the message with your own key.
Please do not use individual keys to encrypt messages you send to the rôle address; it is important that any member of the team is able to verify and (if necessary) decrypt such messages.
We will then try to encrypt some or all of our reply to you; please ensure that your public key is easily available on the international key servers, or make it known to us in advance in some other way.

PGP for yourself

There is a separate page of advice on obtaining and using PGP:

• Getting started with PGP