Re: [Evolution] Feature requests

[Jeffrey Stedfast <fejj novell com>]

thought of a solution for you (assuming you can't just get people to
send you encrypted email which is the best solution by far):

write a procmail script that uses PGP/MIME (rfc3156) and encrypts all
incoming messages as they are received on the mail server. even this has
its weaknesses but is far superior to anything Evolution could ever do
(there is still an opportunity for the admin to peek at the message
before your procmail script gets ahold of it, but there's nothing you
can do about that).

the sooner the messages are encrypted the more secure it will be - if
you wait until evolution has downloaded them to a local disc, it's
already far too late.

Jeff

On Thu, 2005-01-06 at 03:40, Amish Munshi wrote:
> Jeffrey Stedfast wrote:
>
> > > I wish this feature was not important, I wouldnt have requested for this
> > > otherwise. Unfortunately, this feature is critical. It may not be
> > > important to store mails in an encrypted format, but it should atleast be
> > > in encoded . Something other than  plain text is necessary.
> > >
> > > What I cant understand is why it cannot be done?
> > >    
> >
> > I never said encrypting mails locally on disc couldn't be done, I said
> > it was impractical and a waste of effort.
> >
> >  
>
> Jeffrey, do you visit clients? You dont have people in the market who 
> can read encrypted mails, but you will definately have admins who will 
> read mails if they are in plain text.
> It point here is practical situation.
>
> Do me a favour, just impliment this feature. Provide it as an option, 
> which can be turned off if the end-user does not need it.
>
> > changing file-system permissions is sufficient for blocking out everyone
> > except root, encrypting doesn't block root. so what is the point? it's a
> > lot of extra processing for no added benefit (except a false sense of
> > security)
> >
> >  
> Explain to me how root can access encrypted content? If a file is 
> encrypted using gpg, how can you read it without the passphrase?
>
> > no, it is really trivial to do and in fact requires no more effort than
> > opening a file with vi :)
> >
> >  
>
> Can you expain, how to do this and not just metion that this is easy to do.
>
>
> Amish.