|
If you need to grasp the basic essence of what PassLok does. Also good as a primer for any kind of public-key cryptography.
|
|
This is the manual for version 2.4, made in September of 2017.
|
|
This document is an "under the hood" view of PassLok Privacy, meant for people who really want to know how it is put together. It is best read along with the code itself, which is full of comments describing what is going on. It is current as of September 2017.
|
|
Same as above, but just for PassLok for Email, which contains fewer features than PassLok Privacy, leading to a shorter document. Current as of September 2017.
|
|
You can also use PassLok so it remembers passwords for you. What's better, you never need to install anything on the computer, so it is possible to use a public machine. This document tells you how to do it.
|
|
Pretty Good Privacy (PGP), is PassLok's spiritual ancestor. More than twenty years have passed since PGP was first released. The first version was awesome rather than just "pretty good", but unfortunately time has not been kind to PGP. Some of its initial flaws have only gotten bigger with time. This article shows what is wrong with PGP, and how PassLok just manages to bypass all those problems.
|
|
PassLok is MUCH easier to install than other public-key encryption programs. After you read this document, which is adapted from an online guide on how to install PGP, you'll see why. Frankly, you'll end up wondering why anyone uses PGP at all.
|
|
One of the first things you need to do is to come up with a secret Key, after which you will make the matching Lock that other people will use to lock stuff for you. But how do they know that the Lock they got from somewhere is truly yours? Because you took the precaution to make a 1-minute video to authenticate it. This document gives some details beyond the video tutorial.
|
|
If there is no video to prove that a certain Lock is authentic, there is still a way to make sure, involving the interlock protocol. This document gives details of the process, including why it works.
|
|
One of the key differences between PassLok and other privacy apps is the latter's insistence on running key servers or have some sort of Certification Authority. Leaving aside whether this might actually be more of a liability than a feature, this article presents the informal, personal way that PassLok users handle Locks and Keys as a desirable alternative.
|
|
A number of experts insist that JavaScript is inherently unsafe for cryptography applications. PassLok is written in JavaScript. This article discusses the reasons for this belief, and how PassLok manages to overcome them.
|
|
Another article dealing with JavaScript. This one takes off from "Javascript Cryptography Considered Harmful" by Matasano Security, and attempts to show that, while their criticism is valid in general, it does not really apply to PassLok because PassLok does not talk to servers.
|