X-Git-Url: https://git.cworth.org/git?a=blobdiff_plain;ds=sidebyside;f=meetings%2Fhd2015.mdwn;h=add26ca530ec526242755a490d59b97a9bad8d71;hb=42bf578717c5ac63b818876555929bcc842c8523;hp=3fa467963b110ae30e153f77f668d1f7131355f1;hpb=681d43d740499f9064e2ddf53374c5d318a7e6fd;p=notmuch-wiki diff --git a/meetings/hd2015.mdwn b/meetings/hd2015.mdwn index 3fa4679..add26ca 100644 --- a/meetings/hd2015.mdwn +++ b/meetings/hd2015.mdwn @@ -20,24 +20,29 @@ Moving parts for secure e-mail * GnuPG (C) * Emacs UI (emacs lisp) * notmuch-emacs - * mml-mode + * mml-mode, mm multimedia rendering library * Alot / nmbug / nmbug-status (python) * python-bindings * webmail: * noservice (Clojure) * notmuch web (Haskell) -Security concerns ------------------ -* wrong key selection during composition -* reply (message mode defaults) -* inline PGP +Security and privacy concerns +----------------------------- +* privacy leaks rendering messages * message-id collisions -* webmail authentication/authorization (muliple users?) +* Oops I just sent... + * wrong key selection during composition + * reply (message mode defaults) +* inline PGP + +* webmail authentication/authorization (multiple users?) * webmail message escaping (XSS, etc) * shell injection * terminal escape sequences * S/MIME support + * signatures + * encryption * reproducible builds: [sphinx man pages](https://reproducible.debian.net/rb-pkg/testing/amd64/notmuch.html) @@ -45,7 +50,7 @@ Security concerns * indexing encrypted mail * Memory Hole protected headers -* key selection indicators during compositoin +* key selection indicators during composition Breakout sessions @@ -60,12 +65,6 @@ Reportbacks ------------------------- -proposed session: ---------- - * Improving the security of the Emacs MML mime composer - * Searching of GPG encrypted mail - * Auditing and fixing "webbug" style problems in front ends ---------- more complete agenda: