On Thu, 24 May 2018 00:05, gnupg-us...@spodhuis.org said:

> up at <https://github.com/autocrypt/memoryhole>.

Given that I see more and more mails with "Encrypted mail" as subject,
this feature is getting more and more annoying.  It will eventually not
anymore possible to pre-sort mails as it is commonly done either mental
of by tools.  Well, some MUAs might be able to auto-decrypt whole
folders but that opens a more severe security problem (e.g. Tempest
oracle) than having a plaintext subject.

We can't enforce technical security without proper OPSEC.  Regarding the
Subject, Reference, etc, it is way easy and more secure to educate the
user about the fact that only the content is _end-to-end_ encrypted and
other parts, like the Subject, are required to be plaintext for proper
routing and mail handling.

Regarding the subject there is a simple and also fun solution: If you
need to hide the subject, use a nonsense phrase instead.  Such a phrase
makes mental pre-sorting as effecitive as an on-topic subject.


Shalom-Salam,

   Werner

-- 
#  Please read:  Daniel Ellsberg - The Doomsday Machine  #
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.

Attachment: pgpQVXa6PZIse.pgp
Description: PGP signature

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to