[Enigmail] About Supprting BCCed Recipients
Harry Rickards
hrickards at l33tmyst.com
Tue May 12 08:50:54 PDT 2009
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 05/12/09 16:18, Patrick Brunschwig wrote:
> Up to now, Enigmail gave a warning if encrypted emails are sent to BCCed
> recipients because GnuPG would store the key ID's of all recipients in
> the encrypted message. In order to overcome this privacy issue, there is
> an option that allows to tell GnuPG not to write some of the key ID's
> into an encrypted message ("--no-throw-keyids" and
> "--hidden-recipient"). If such "anonymous" key ID's are found in a
> message, GnuPG would probe all secret keys until one of them allows to
> decrypt the message.
>
> Unfortunately, hiding the keys in a message is an optional part of the
> OpenPGP standard; PGP (in particular) is known not to support it.
>
> And here comes my question: please help us out by lettings us know how
> many of your correspondents use a tool like PGP such that they would not
> be able to decrypt messages with hidden keys by participating in the
> poll on our forum:
> <http://mozilla-enigmail.org/forum/viewtopic.php?f=3&t=599>
>
> Thanks,
> Patrick
Although I agree this is needed, perhaps a forum poll isn't the best way
for user's to vote (for need of a better word). I know I certainly think
it would be a lot easier just replying to this email than say: going to
the link above, logging in (or registering for some people) and voting.
This may be why there's only been one vote so far (as well as it's only
been half an hour since you started the thread).
Would it be possible for you to setup some sort of email based poll on
this mailing list, as I think a lot more people would vote then. For
now, if anyone wants to vote without having to register an account, etc,
I'll vote for them if they send me an email to hrickards at l33tmyst.com
encrypted with my GPG key - 1024D/646ED06A. That is, after the
administrator of the forum approves my account (see how long it will
take people to vote, most people will not bother.) Thanks
- --
Many thanks
Harry Rickards
- -----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GAT/GCM/GCS/GCC/GIT/GM d? s: a? C++++ UL++++ P- L+++ E--- W+++ N o K+
w--- O- M- V- PS+ PE Y+ PGP++ t 5 X R tv-- b+++ DI D---- G e* h! !r y?
- ------END GEEK CODE BLOCK------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAkoJmt4ACgkQ1kZz3mRu0GrjcwCfR1ow2TryvS8OtyA0U5dfuSsp
EEYAn3eZQ88lmmY54mflhISaK89fZMHe
=GTim
-----END PGP SIGNATURE-----
More information about the Enigmail
mailing list