On 27/10/2019 15.23, Stephen Satchell wrote: > OP, let me ask this: your proposal appears to be to modify the delivery > agent so that, instead of storing e-mail in cleartext, it insteads use > the public part of a public/private keypair to encrypt the payload of > incoming email.
I did more research in the meantime, and I think the only reasonable way to implement my idea would be via a SMTP-Only Milter. > That way, your mail client would need to decrypt the > payload when reading the mail, using the private part of the keypair. yes. As it does now with messages that have been encrypted by the sender. > Further, the client would need to support the decryption of > superencrypted mail, there will be no "superencrypted" emails. As I explained in the first sentence of my original description, I want to process only emails which are not already encrypted. > once with your private key, then again with the > public key of the sender. are you perhaps confusing decryption with verifying the senders signature ?