X-Git-Url: https://git.cworth.org/git?a=blobdiff_plain;f=meetings%2Fhd2015.mdwn;h=a9c14790f0d83da73ce1d33f8abd9e89d989cc05;hb=5036a8d733d029d98b7bcfaa648a23200038b5bd;hp=e78361f9bbb0525e333a792418f5c3fe38ea7dd2;hpb=a07a0cc03bdae9245d1f59e50343f9d010cc83a4;p=notmuch-wiki diff --git a/meetings/hd2015.mdwn b/meetings/hd2015.mdwn index e78361f..a9c1479 100644 --- a/meetings/hd2015.mdwn +++ b/meetings/hd2015.mdwn @@ -3,7 +3,7 @@ What, Where, When * Bremner and dkg are co-hosting a BoF at [debconf](https://summit.debconf.org/debconf15/meeting/217/improving-privacy-and-security-for-notmuch-mail/). -* The meeting is Monday 2015-08-17, 1700-1800 +* The meeting is Monday 2015-08-17, 1700-1800 CET * Video streaming should be [available](https://wiki.debconf.org/wiki/DebConf15/Videostream/Amsterdam) @@ -13,27 +13,33 @@ Agenda Moving parts for secure e-mail ------------ -* libnotmuch -* /usr/bin/notmuch -* notmuch-emacs -* libgmime -* GnuPG -* xapian -* mml-mode (emacs) +* libxapian (C++, full text search) +* libgmime (C, glib, RFC822+MIME library) +* libnotmuch (C and C++) +* /usr/bin/notmuch (C) +* GnuPG (C) +* Emacs UI (emacs lisp) + * notmuch-emacs + * mml-mode +* Alot / nmbug / nmbug-status (python) + * python-bindings * webmail: - * noservice - * notmuch web + * noservice (Clojure) + * notmuch web (Haskell) Security concerns ----------------- * wrong key selection during composition * reply (message mode defaults) * inline PGP +* message-id collisions * webmail authentication/authorization (muliple users?) * webmail message escaping (XSS, etc) * shell injection * terminal escape sequences * S/MIME support +* reproducible builds: + [sphinx man pages](https://reproducible.debian.net/rb-pkg/testing/amd64/notmuch.html) ### usability as security?