X-Git-Url: https://git.cworth.org/git?a=blobdiff_plain;f=meetings%2Fhd2015.mdwn;h=add26ca530ec526242755a490d59b97a9bad8d71;hb=42bf578717c5ac63b818876555929bcc842c8523;hp=1e4b78f29ad675e532fd2fda33ed111b64af6c0a;hpb=937505e62e6c7a155dfbd13021360dcbec8fb9c8;p=notmuch-wiki diff --git a/meetings/hd2015.mdwn b/meetings/hd2015.mdwn index 1e4b78f..add26ca 100644 --- a/meetings/hd2015.mdwn +++ b/meetings/hd2015.mdwn @@ -20,24 +20,29 @@ Moving parts for secure e-mail * GnuPG (C) * Emacs UI (emacs lisp) * notmuch-emacs - * mml-mode + * mml-mode, mm multimedia rendering library * Alot / nmbug / nmbug-status (python) * python-bindings * webmail: * noservice (Clojure) * notmuch web (Haskell) -Security concerns ------------------ -* wrong key selection during composition -* reply (message mode defaults) -* inline PGP +Security and privacy concerns +----------------------------- +* privacy leaks rendering messages * message-id collisions +* Oops I just sent... + * wrong key selection during composition + * reply (message mode defaults) +* inline PGP + * webmail authentication/authorization (multiple users?) * webmail message escaping (XSS, etc) * shell injection * terminal escape sequences * S/MIME support + * signatures + * encryption * reproducible builds: [sphinx man pages](https://reproducible.debian.net/rb-pkg/testing/amd64/notmuch.html) @@ -60,12 +65,6 @@ Reportbacks ------------------------- -proposed session: ---------- - * Improving the security of the Emacs MML mime composer - * Searching of GPG encrypted mail - * Auditing and fixing "webbug" style problems in front ends ---------- more complete agenda: