Marc Armengou

<p>Signed Posts allows authors to sign posts, assuring content integrity. Signature verification proves post-signing alteration hasn’t occurred.</p>
<p><strong>Features:</strong></p>
<ul>
<li><strong>In-browser verification:</strong> The signature verification is done on the client side (in the visitor’s browser).</li>
<li><strong>Methods:</strong> OpenPGP (ASCII-armored detached signature) and DID (did:key, did:web) using Ed25519 detached JWS (b64=false).</li>
<li><strong>Source of trust:</strong> For OpenPGP, the author specifies the URL of their public key in their profile. For DID, the author sets their DID (did:key or did:web). For did:web, the plugin fetches <code>https://<host>/.well-known/did.json</code>.</li>
<li><strong>Status block:</strong> An informative block is automatically added to the end of each signed article, showing the verification status (valid, invalid, or error).</li>
<li><strong>Author badge:</strong> The author name in posts is enhanced with an icon and KeyID/fingerprint text.</li>
</ul>
<h3>Source Code and Libraries</h3>
<p><strong>OpenPGP.js</strong><br />
* <strong>Version:</strong> 6.2.2<br />
* <strong>License:</strong> LGPL-3.0-or-later<br />
* <strong>Public Source Code:</strong> https://github.com/openpgpjs/openpgpjs</p>
<p><strong>Web Crypto API</strong><br />
* Used to verify Ed25519 signatures for DID.</p>


Signed Posts

Signed Posts allows authors to sign posts, assuring content integrity. Signature verification proves post-signing alteration hasn't occurred.

Daniel Pereyra Costas

<p>This plugin allows you to insert a <em>“secure form”</em> into your website through a simple shortocde. It is usefull when you need to <strong>receive sensitive data of any kind, establishing a <em>“safe channel”</em></strong>.<br />
The data is sent encrypted with your PGP public key.</p>
<h4>Usage</h4>
<p>Just fill in some plugin options:</p>
<ul>
<li>The destination email (your email)</li>
<li>Your PGP public key in ASCII armored version</li>
</ul>
<p>Hint: to see your private key you can enter your computer console and run two commands, one to list and one to export (must have GnuPG):</p>
<pre><code>gpg --list-keys
gpg --armor --export username@email
</code></pre>
<p>Remember your public key needs to be exported in ASCII armored version, this means that will be surrounded with:</p>
<pre><code>-----BEGIN PGP PUBLIC KEY BLOCK-----

your-long-key-string-will-be-here

-----END PGP PUBLIC KEY BLOCK-----
</code></pre>
<p>Once the shortcode is placed into a page or post, it will render a form with the following fields:</p>
<ul>
<li>Message</li>
<li>Subject</li>
<li>Name</li>
<li>Email</li>
</ul>
<h4>How it works</h4>
<p>The <em>message</em> field will be encrypted with your <strong>PGP public key</strong> and sent as an attachment in <strong>ASCII</strong> format to the destination email you have configured.</p>
<p>When creating the plugin logic I have made sure that the <em>message</em> field <strong>is never sent to the web server</strong>, the data is previously encrypted (on the fly) using <em>OpenPGP.js</em> library in the user who is browsing the website.</p>
<p>You will only be able to decrypt the content of the attached file if you have the PGP private key belonging to the public key with which the message was encrypted.</p>
<p><em>Remember that the purpose of the plugin is only to display a form on your website and encrypt the information that is sent through the “message” field. This plugin does not take care of decrypting the attached file, this task is left to each user in the way they want.</em></p>
<h4>Some usage examples</h4>
<ul>
<li>Receive secret messages</li>
<li>Receiving passwords from clients or friends</li>
<li>Reception of sensitive information</li>
</ul>
<h4>Requirements</h4>
<p>In order to use this plugin you need to have or create a <strong>PGP key pair</strong>. If you don’t have your key pair generated you can browse the internet on how to generate it.<br />
There are many ways to generate the key, each have a different impact on security.</p>
<h4>TIP on generating PGP key pair</h4>
<p>One of the best ways of generating your PGP key pair is using a computer witout Internet connection and using <a href="https://tails.boum.org" rel="nofollow ugc">Tails OS</a>.</p>
<h4>Recommended software</h4>
<ul>
<li><a href="https://gnupg.org" rel="nofollow ugc">GNU Privacy Guard (Linux, OS X, Windows)</a></li>
<li><a href="https://gpgtools.org" rel="nofollow ugc">GPG Suite (OS X)</a></li>
<li><a href="https://www.gpg4win.org/" rel="nofollow ugc">Gpg4win (Windows)</a></li>
</ul>
<h4>Support</h4>
<p>When you cannot find the answer to your question on the FAQ section, check the <a href="https://wordpress.org/support/plugin/secure-encrypted-form/" rel="ugc">support forum</a> on WordPress.org. If you cannot locate any topics that solve to your particular issue, post a new topic for it.<br />
Remember this support is offered for free and can take some hours/days to answer and solve your issues.</p>
<h4>Secure Contact Form needs your support</h4>
<p>It is hard to continue development and support for this free plugin without contributions from users like you. <strong>If you enjoy using Secure Contact Form and find it useful, please consider <a href="https://charrua.es/donaciones/" rel="nofollow ugc">making a donation</a></strong>. Your donation will help encourage and support the plugin’s continued development and better user support.</p>
<h4>Privacy notices</h4>
<p>With the default configuration, this plugin, in itself, does not:</p>
<ul>
<li>Track users by stealth</li>
<li>Write any user personal data to the database</li>
<li>Send any data to external servers</li>
<li>Use cookies</li>
</ul>
<h4>Translations</h4>
<p>Actually the plugin ships in English and is translated to Spanish.<br />
You can contribute and <a href="https://translate.wordpress.org/projects/wp-plugins/secure-encrypted-form/" rel="nofollow ugc">translate this plugin to your own language</a>.</p>


Secure Encrypted Form


This plugin is an excellent tool to protect messages that contain passwords, banks data and other sensible information. It is an ideal plugin to share data between partners or collaborators.It is a great step to protect our privacy!


Excelent for privacy protect

This plugin adds a secure form in your website that uses OpenPGP encryption to secure sensitive communications.

Signed Posts vs Secure Encrypted Form