Add comments about decryption in the UI rather than CLI.

diff --git a/meetings/hd2015.mdwn b/meetings/hd2015.mdwn
index 87e32cc29157ba49febc73bbeee96491a88973a5..21f80756ebedb24aff7d02ecbefd755103ee2725 100644 (file)
--- a/meetings/hd2015.mdwn
+++ b/meetings/hd2015.mdwn
@@ -60,6 +60,10 @@ Security and privacy concerns
   * integration with other keyrings
 * reproducible builds:
   [sphinx man pages](https://reproducible.debian.net/rb-pkg/testing/amd64/notmuch.html)
+* decryption happens in the CLI rather than the UI
+  * when using the UI and the CLI on different machines (so called "remote" mode), this leads to some undesirable and odd behaviour:
+    * decrypted content is passed across a potentially insecure channel (though usually ssh)
+    * the CLI needs access to keys, which can be awkward or impossible
 
 Usability as security?
 ----------------------