Markur | 1 May 16:01
Picon
Picon

Screenshots about v0.95.0

Hello.
Can someone show me screenshots about the new
"Simplified preferences for non-advanced users added"
introduced in 0.95 version?

On the website(enimail.mozdev.org) are only screenshots
about the old Enigmail version 0.82.2.

Thank you.
Robert J. Hansen | 1 May 19:16
Favicon
Gravatar

Re: Screenshots about v0.95.0


> Can someone show me screenshots about the new
> "Simplified preferences for non-advanced users added"
> introduced in 0.95 version?

The original UI mockups can be found at

	http://rjhansen.cs.uiowa.edu/~rjh/enigmail/1/
	http://rjhansen.cs.uiowa.edu/~rjh/enigmail/2/

These are UI mockups which were used for usability testing, _not_ the  
actual 0.95 UI.  But they're pretty close to the final result, all  
told.  There's still a little work to be done on the Preferences UI,  
but I think the basic design we have at this point is a good one.

Markur | 2 May 11:46
Picon
Picon

Re: Screenshots about v0.95.0

Robert J. Hansen schrieb:
> These are UI mockups which were used for usability testing, _not_ the
> actual 0.95 UI.  But they're pretty close to the final result, all
> told.  There's still a little work to be done on the Preferences UI, but
> I think the basic design we have at this point is a good one.

Hm, ok. I see. There is only a bit difference between the old and new one.
Nothing revolutionary new ;)
It's still for hardcore user.

Thank you for the links.
Patrick Brunschwig | 2 May 14:49

Re: Screenshots about v0.95.0


Markur wrote:
> Robert J. Hansen schrieb:
>> These are UI mockups which were used for usability testing, _not_ the
>> actual 0.95 UI.  But they're pretty close to the final result, all
>> told.  There's still a little work to be done on the Preferences UI, but
>> I think the basic design we have at this point is a good one.
> 
> Hm, ok. I see. There is only a bit difference between the old and new one.
> Nothing revolutionary new ;)
> It's still for hardcore user.

The idea is that a "normal" user does not see all of the advanced
options, but only the "Basic" tab with the bare minimum that needs to be
configured. In addition, in the "normal user" mode, most menu options
are hidden.

If you use the expert mode, then yes, it's still for advanced users only.

-Patrick
Stefan Esser | 3 May 11:11
Picon

Feature Request: Encrypt Received Uncrypted Emails

Hello,

it would be nice to be able to configure enigmail so that all incoming
email that is not crypted gets automatically encrypted with the private 
key and/or alternatively to be able to encrypt an already received mail.

Looking at the archives I have seen that the same request has been
brought up less than a week ago. I am starting a new thread, because I 
was not subscribed at that time and cannot simply hit reply.

It seems the original request got refused because of the invalid
argument that it is better to use an encrypted storage and that security 
is already compromised the moment the mail is sent in plaintext.

While this argumentation is true for people that store their mail only
on a local system this is not true as soon you are using an IMAP server. 
In the IMAP scenario a crypted filesystem does not add additional 
security, because while the IMAP server is running the filesystem needs 
to be decrypted. Everyone breaking into the server has therefore full 
access to all emails.

This problem can only be solved if the mail is encrypted on the client
side and replace the original email on the IMAP server. Of course the 
decrypted mail might still be in some caches, but if a possible intruder 
breaks into the system weeks or months after the mail was received it is not
likely that there is any part of the decrypted message left on the server.

And especially when you have several hundreds/thousands of emails on a
local machine and want to move them into an IMAP mailbox it is simply not 
option to say: force people to send you encrypted emails.
(Continue reading)

Robert J. Hansen | 3 May 12:18
Favicon
Gravatar

Re: Feature Request: Encrypt Received Uncrypted Emails


I am not an Enigmail developer.  I am not speaking for the Enigmail  
developers.  I may be barking wrong.

That said, I don't think I am.

> it would be nice to be able to configure enigmail so that all incoming
> email that is not crypted gets automatically encrypted with the  
> private
> key and/or alternatively to be able to encrypt an already received  
> mail.

Encrypted with the public key, I think you mean.  Encrypting with the  
private key is the same thing as making a digital signature.

> It seems the original request got refused because of the invalid
> argument that it is better to use an encrypted storage and that  
> security
> is already compromised the moment the mail is sent in plaintext.

As I recall, it wasn't refused.  The following points were brought  
up, all of which are very valid:

1.  Allowing users to change spooled mail in arbitrary ways was not
     part of IMAP's intended purpose.  Hacking IMAP in a way to allow
     this would probably be unwise.

2.  Enigmail doesn't touch IMAP.  Enigmail is, for the most part,
     completely agnostic about how mail is received.  Hacking IMAP
     would thus require an RFE to be submitted against Seamonkey and/or
(Continue reading)

Jean-David Beyer | 3 May 13:04
Picon

Re: Feature Request: Encrypt Received Uncrypted Emails


Stefan Esser wrote:
> Hello,
> 
> it would be nice to be able to configure enigmail so that all incoming 
> email that is not crypted gets automatically encrypted with the private 
> key and/or alternatively to be able to encrypt an already received mail.
> 
It seems to me that once the e-mail has been send unencrypted, if it is
something sensitive, it is too late -- locking the barn door after the horse
has escaped or been stolen already.

If the sender did not think the e-mail sufficiently sensitive to encrypt it
_at the source_, (s)he may have already sent it to other insecure places
already and even if not, it could have been intercepted already. Likewise,
those, other than your or your IMAP server (for example, the "sent"
directory of the sender's machine), may also not store it in a secure manner.

So it is really too late.

--
  .~.  Jean-David Beyer          Registered Linux User 85642.
  /V\  PGP-Key: 9A2FC99A         Registered Machine   241939.
 /( )\ Shrewsbury, New Jersey    http://counter.li.org
 ^^-^^ 06:55:01 up 75 days, 18:23, 2 users, load average: 4.79, 4.48, 4.34
Stefan Esser | 3 May 13:17
Picon

Re: Feature Request: Encrypt Received Uncrypted Emails

Hi,

> Encrypted with the public key, I think you mean.  Encrypting with the  
> private key is the same thing as making a digital signature.
Yes, I meant the public key.
> 3.  If and when Thunderbird/Seamonkey allow arbitrary message
>      modification over IMAP, we'll consider this RFE.
Ohh I was not aware that Thunderbird does not allow IMAP Mail Modification.
I simply assumed that it is already possible.
> I would suggest subscribing to dev-apps-thunderbird and asking over  
> there.
Well if Thunderbird is not supporting it, then it would be far to
complicated for
someone not already involved in Thunderbird/Enigmail.

I guess a "cronjob" on the server that checks the maildir and replaces
all emails
with an encrypted copy will be easier to implement.

Stefan Esser
SHANSEIFAN Muriel | 3 May 17:17

Enigmail 0.95 and TB 2 under Windows XP : Thunderbird crash when validating passphrase

Hi,
I am newly subscribed to the list, a French user of enigmail 0.95 and
OpenGPG 1.4.7 with Thunderbird 2 (I just migrated to). TB crashes each
time I hit "Enter" after typing my passphrase to decrypt an encrypted
message.
Any clues ? Thanks a lot ! Muriel
SHANSEIFAN Muriel | 3 May 18:19

Enigmail 0.95 and TB 2 under Windows XP : Thunderbird crash when validating passphrase

Hi,
I am newly subscribed to the list, a French user of enigmail 0.95 and
OpenGPG 1.4.7 with Thunderbird 2 (I just migrated to). TB crashes each
time I hit "Enter" after typing my passphrase to decrypt an encrypted
message.
Any clues ? Thanks a lot ! Muriel

Gmane