Re: [Mailman-Developers] GnuPG support - PGP - GPG encrypted mailing list

2014-06-16 Thread Sylvain Viart
Le 15/06/2014 11:18, Stephen J. Turnbull a écrit : > [distributing encrypted email to an unknown number subscribers…] > True, but this is out of scope for this list. Just to emphasis that the goal of keeping information private that way could be wrong, if done the wrong way. (For example, you may

Re: [Mailman-Developers] GnuPG support

2014-06-15 Thread John Levine
>Yes, except we don't want to use the mailing list maintainer keys, or >make him manually decrypt/encrypt every message. >This should be done automatically by Mailman, and we want to use the >mailing list keypair. Sympa does something like this with S/MIME. Incoming list messages are encrypted to

Re: [Mailman-Developers] GnuPG support - PGP - GPG encrypted mailing list

2014-06-15 Thread Stephen J. Turnbull
Sylvain Viart writes: > This question of distributing encrypted email to an unknown number > of subscribers is quite interesting/dangerous in the point of view > of securing the information. True, but this is out of scope for this list. I'm not saying you shouldn't discuss here if you want to

Re: [Mailman-Developers] GnuPG support - PGP - GPG encrypted mailing list

2014-06-15 Thread Sylvain Viart
Le 14/06/2014 19:49, Stanisław Findeisen a écrit : > http://security.stackexchange.com/questions/26544/gpg-encrypted-mailing-list-and-other-approaches-to-safe-communication > > "2. Do a relay." > Yes, except we don't want to use the mailing list maintainer keys, or > make him manually decrypt/encry

Re: [Mailman-Developers] GnuPG support

2014-06-15 Thread Stephen J. Turnbull
Stephen J. Turnbull writes: > The most recent code is presumably in Abilash's repo on Launchpad. > I'll find it for you later (have an appointment right now), but you > can look in the list of branches for the Mailman project on > launchpad.net. I think it's lp:~raj-abhilash1/mailman.client/g

Re: [Mailman-Developers] GnuPG support

2014-06-14 Thread Stephen J. Turnbull
Stanisław Findeisen writes: > What needs to be done? Where is the code? Pretty much everything. In particular, key management is not at all useful last I heard, you need to load the keys by hand into a file on the server or something like that. It wasn't integrated into the account management

Re: [Mailman-Developers] GnuPG support

2014-06-14 Thread Stanisław Findeisen
On 2014-06-14 10:47, Sylvain Viart wrote: >> This thread is a continuation of this one: >> https://mail.python.org/pipermail/mailman-developers/2011-May/021377.html . > > I found this page yesterday, as we were doing a key signing party… > > http://security.stackexchange.com/questions/26544/gpg-e

Re: [Mailman-Developers] GnuPG support

2014-06-14 Thread Sylvain Viart
Hi, On 13/06/2014 09:33, Stanisław Findeisen wrote: > This thread is a continuation of this one: > https://mail.python.org/pipermail/mailman-developers/2011-May/021377.html . I found this page yesterday, as we were doing a key signing party… http://security.stackexchange.com/questions/26544/gpg-

Re: [Mailman-Developers] GnuPG support

2014-06-14 Thread Stanisław Findeisen
On 2014-06-14 13:11, Stephen J. Turnbull wrote: > Stanisław Findeisen writes: > > > What is the current status of this issue? Is there going to be GnuPG > > support in Mailman 3? > > Some work was done on it in last year's GSoC, but it's not ready for > integration yet, and I doubt it will be i

[Mailman-Developers] GnuPG support

2014-06-14 Thread Stephen J. Turnbull
Stanisław Findeisen writes: > What is the current status of this issue? Is there going to be GnuPG > support in Mailman 3? Some work was done on it in last year's GSoC, but it's not ready for integration yet, and I doubt it will be in the first 3.0 release.

[Mailman-Developers] GnuPG support

2014-06-13 Thread Stanisław Findeisen
This thread is a continuation of this one: https://mail.python.org/pipermail/mailman-developers/2011-May/021377.html . Hi What is the current status of this issue? Is there going to be GnuPG support in Mailman 3? -- http://people.eisenbits.com/~stf/ http://www.eisenbits.com/ OpenPGP: 80FC 1824

Re: [Mailman-Developers] GnuPG support

2011-05-24 Thread Barry Warsaw
On May 24, 2011, at 12:01 PM, Stephen J. Turnbull wrote: >Barry Warsaw writes: > > > My own inclination is that most sites won't need this, > >FWIW, I disagree. Much of the world is moving in the direction of >personal IDs, perhaps backed up by an organization (eg, OpenID), >rather than IDs tied

Re: [Mailman-Developers] GnuPG support

2011-05-23 Thread Stephen J. Turnbull
Barry Warsaw writes: > My own inclination is that most sites won't need this, FWIW, I disagree. Much of the world is moving in the direction of personal IDs, perhaps backed up by an organization (eg, OpenID), rather than IDs tied to a host. Given the prevalence of systems "for the rest of us (

Re: [Mailman-Developers] GnuPG support

2011-05-23 Thread Barry Warsaw
On May 22, 2011, at 01:10 PM, Stanisław Findeisen wrote: >I have a feature idea: GnuPG encryption and signing. > >What do you think? It's an idea which has been floating around for many years, and as you've seen there are tentative patches in that direction. My own take on the matter is that I t

Re: [Mailman-Developers] GnuPG support

2011-05-22 Thread Stephen J. Turnbull
Stanisław Findeisen writes: > On 2011-05-22 16:03, Mark Sapiro wrote: > > Stanislaw Findeisen wrote: > >> I have a feature idea: GnuPG encryption and signing. > > > > > > See and > >

Re: [Mailman-Developers] GnuPG support

2011-05-22 Thread Stanisław Findeisen
On 2011-05-22 16:03, Mark Sapiro wrote: > Stanislaw Findeisen wrote: >> I have a feature idea: GnuPG encryption and signing. > > > See and > . So?... What's the problem with

Re: [Mailman-Developers] GnuPG support

2011-05-22 Thread Mark Sapiro
Stanislaw Findeisen wrote: > >I have a feature idea: GnuPG encryption and signing. See and . -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, Cali

[Mailman-Developers] GnuPG support

2011-05-22 Thread Stanisław Findeisen
Hi I have a feature idea: GnuPG encryption and signing. Each list (or just the Mailman instance) has a private/public keypair. Each list subscriber can share her/his public key with Mailman. When sending mail to the list, the user can encrypt it with the list public key. Then Mailman decrypts th