X-Git-Url: https://git.cworth.org/git?a=blobdiff_plain;f=meetings%2Fhd2015.mdwn;h=a9c14790f0d83da73ce1d33f8abd9e89d989cc05;hb=5036a8d733d029d98b7bcfaa648a23200038b5bd;hp=8f606585a8ddcdc1b77e23c10a3fe420251bbf97;hpb=01cd6a5d7001d85ec8637e064859ab5007ac1b4a;p=notmuch-wiki diff --git a/meetings/hd2015.mdwn b/meetings/hd2015.mdwn index 8f60658..a9c1479 100644 --- a/meetings/hd2015.mdwn +++ b/meetings/hd2015.mdwn @@ -1,33 +1,45 @@ -Bremner and dkg are co-hosting a BoF at debconf: +What, Where, When +================= + +* Bremner and dkg are co-hosting a BoF at [debconf](https://summit.debconf.org/debconf15/meeting/217/improving-privacy-and-security-for-notmuch-mail/). + +* The meeting is Monday 2015-08-17, 1700-1800 CET + +* Video streaming should be [available](https://wiki.debconf.org/wiki/DebConf15/Videostream/Amsterdam) -https://summit.debconf.org/debconf15/meeting/217/improving-privacy-and-security-for-notmuch-mail/ Agenda ====== Moving parts for secure e-mail ------------ -* libnotmuch -* /usr/bin/notmuch -* notmuch-emacs -* libgmime -* GnuPG -* xapian -* mml-mode (emacs) +* libxapian (C++, full text search) +* libgmime (C, glib, RFC822+MIME library) +* libnotmuch (C and C++) +* /usr/bin/notmuch (C) +* GnuPG (C) +* Emacs UI (emacs lisp) + * notmuch-emacs + * mml-mode +* Alot / nmbug / nmbug-status (python) + * python-bindings * webmail: - * noservice - * notmuch web + * noservice (Clojure) + * notmuch web (Haskell) Security concerns ----------------- * wrong key selection during composition * reply (message mode defaults) * inline PGP +* message-id collisions * webmail authentication/authorization (muliple users?) * webmail message escaping (XSS, etc) * shell injection * terminal escape sequences * S/MIME support +* reproducible builds: + [sphinx man pages](https://reproducible.debian.net/rb-pkg/testing/amd64/notmuch.html) ### usability as security?