X-Git-Url: https://git.cworth.org/git?a=blobdiff_plain;f=meetings%2Fhd2015.mdwn;h=706235602d0898faba0b2580d4a91e115020f3bc;hb=43f0b1e82ee56387330ee084ab161bced8300438;hp=add26ca530ec526242755a490d59b97a9bad8d71;hpb=42bf578717c5ac63b818876555929bcc842c8523;p=notmuch-wiki diff --git a/meetings/hd2015.mdwn b/meetings/hd2015.mdwn index add26ca..7062356 100644 --- a/meetings/hd2015.mdwn +++ b/meetings/hd2015.mdwn @@ -34,19 +34,22 @@ Security and privacy concerns * Oops I just sent... * wrong key selection during composition * reply (message mode defaults) + * opportunistic signing and encryption * inline PGP - -* webmail authentication/authorization (multiple users?) -* webmail message escaping (XSS, etc) +* webmail + * authentication/authorization (multiple users?) + * message escaping (XSS, etc) * shell injection * terminal escape sequences * S/MIME support * signatures * encryption + * integration with other keyrings * reproducible builds: [sphinx man pages](https://reproducible.debian.net/rb-pkg/testing/amd64/notmuch.html) -### usability as security? +Usability as security? +---------------------- * indexing encrypted mail * Memory Hole protected headers @@ -68,9 +71,6 @@ Reportbacks more complete agenda: - * S/MIME signatures and encryption - * test suites - * integration with other keyrings * signature only (easyish) versus encryption (more work) * Improving the security of the Emacs MML mime composer * automated "encrypt-when-i-have-keys-available" mode or other convenience functions?