[Users] [Bug 3129] New: No offline encryption/signing is possible

[noreply at thewildbeast.co.uk]

http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=3129

            Bug ID: 3129
           Summary: No offline encryption/signing is possible
    Classification: Unclassified
           Product: Claws Mail
           Version: 3.8.1
          Hardware: PC
                OS: All
            Status: NEW
          Severity: normal
          Priority: P3
         Component: Plugins
          Assignee: users at lists.claws-mail.org
          Reporter: e.ex.exi.exit at safe-mail.net

In order to improve the security of the PGP email encryption scheme, it is
often recommended to store private keys offline. However, this strategy is
currently not possible with the PGPinline and PGPmime plugins. The reason:

The PGP plugins sign and encrypt messages immediately before delivery.
Therefore, access to private keys is necessary in a situation where the box has
to be online.

Remediation: sign and encrypt messages at the time they are queued (by pressing
"send later").

-- 
You are receiving this mail because:
You are the assignee for the bug.