X-Git-Url: https://git.cworth.org/git?a=blobdiff_plain;f=meetings%2Fhd2015.mdwn;h=706235602d0898faba0b2580d4a91e115020f3bc;hb=43f0b1e82ee56387330ee084ab161bced8300438;hp=1a819cc4b48e9dc68e7c6732cb7f044a774ae617;hpb=c0a5f7b8040ea25434a3fe6edcca22a4c60fab6c;p=notmuch-wiki diff --git a/meetings/hd2015.mdwn b/meetings/hd2015.mdwn index 1a819cc..7062356 100644 --- a/meetings/hd2015.mdwn +++ b/meetings/hd2015.mdwn @@ -20,7 +20,7 @@ Moving parts for secure e-mail * GnuPG (C) * Emacs UI (emacs lisp) * notmuch-emacs - * mml-mode + * mml-mode, mm multimedia rendering library * Alot / nmbug / nmbug-status (python) * python-bindings * webmail: @@ -34,19 +34,22 @@ Security and privacy concerns * Oops I just sent... * wrong key selection during composition * reply (message mode defaults) + * opportunistic signing and encryption * inline PGP - -* webmail authentication/authorization (multiple users?) -* webmail message escaping (XSS, etc) +* webmail + * authentication/authorization (multiple users?) + * message escaping (XSS, etc) * shell injection * terminal escape sequences * S/MIME support * signatures * encryption + * integration with other keyrings * reproducible builds: [sphinx man pages](https://reproducible.debian.net/rb-pkg/testing/amd64/notmuch.html) -### usability as security? +Usability as security? +---------------------- * indexing encrypted mail * Memory Hole protected headers @@ -68,9 +71,6 @@ Reportbacks more complete agenda: - * S/MIME signatures and encryption - * test suites - * integration with other keyrings * signature only (easyish) versus encryption (more work) * Improving the security of the Emacs MML mime composer * automated "encrypt-when-i-have-keys-available" mode or other convenience functions?