mutt/autocrypt integration released (muacrypt-0.9.0)

holger krekel holger at merlinux.eu
Mon Nov 26 19:50:42 UTC 2018


Hi Jean, 

i assume you are currently already using always-encrypted e-mail with
your endangered contacts, right?  In this case nothing changes with
autocrypt/muacrypt as it leaves already-encrypted mails alone.  
Please note that autocrypt/muacrypt aims to automatically replace 
*cleartext* mails with encrypted ones when it appears workable. 

holger

On Mon, Nov 26, 2018 at 20:14 +0100, Jean Louis wrote:
> Hello Holger,
> 
> I have reviewed those specifications. To me it
> looks like "less security" approach. Allowing the
> algorithm to decide for me and send a plain text
> can even kill a person!
> > Autocrypt aims to incrementally and carefully
> > replace cleartext e-mail with end-to-end encrypted
> > e-mail. 
> 
> This differs from the traditional approach
> > of maximizing the security of individual mail
> > communications. Sometimes Autocrypt recommends to
> > send cleartext mail even though encryption appears
> > technically possible. This is because we want to
> > avoid unreadable mail for users. Users may mix
> > both Autocrypt-capable and traditional mail apps
> > and they may lose devices or in other ways the
> > ability to decrypt in unrecoverable
> > ways. Reverting to cleartext when we suspect such
> > situations is a key part of our aim to stay out of
> > the way of users.
> 
> My friends are in the difficult country that is
> under spionage of all kinds, from inside and from
> outside. Just by knowing about his foreign
> investment, he could get in jail including all his
> family.
> 
> So I would say in cleartext "NO" to autocrypt
> principles.
> 
> Jean
> 
> 
> On Mon, Nov 26, 2018 at 03:35:01PM +0100, holger krekel wrote:
> > Hi all, 
> > 
> > just released muacrypt-0.9.0 with documented mutt/autocrypt integration:
> > 
> > https://muacrypt.readthedocs.io/mutt.html
> > 
> > FWIW I successfully used it to scan 60K messages in three of my accounts and 
> > am using it in my own mail setup now for both incoming and outgoing mail. 
> > 
> > The mutt/muacrypt combo supports key gossiping and automatically, transparently 
> > encrypts otherwise-cleartext mail if recommended by Autocrypt's recommendation algorithm. 
> > Manual key selection or other decisions about keys are not neccessary.  
> > If a mail is already encrypted muacrypt leaves it alone. 
> > 
> > Very happy about any trials, comments or PRs you might do or have!
> > 
> > best, 
> > holger
> 


More information about the Mutt-dev mailing list