Re: [MlMt] Warn sending encrypted mail about unencrypted subject

2014-07-17 Thread Brad Knowles
On Jul 17, 2014, at 1:51 AM, Benny Kjær Nielsen wrote: > If a standard for encrypting the subject-header (and maybe other headers) > existed then it should probably just require the headers to be moved into the > encrypted plain text body part of the message. Email clients supporting the > sta

Re: [MlMt] Warn sending encrypted mail about unencrypted subject

2014-07-16 Thread Benny Kjær Nielsen
On 16 Jul 2014, at 18:58, Luca Allodi wrote: I may be wrong but aren't subject lines public by definition, like user names? Think indexing and archiving. It is certainly useful for indexing/display, but if the receiving email client can decrypt the subject line then that would not be a (theo

Re: [MlMt] Warn sending encrypted mail about unencrypted subject

2014-07-16 Thread Gary Hull
One solution would be to silently accept the entered subject, but then replace it with something like "Encrypted Email - PGP," or something more "cryptic" (no pun intended) while moving the subject to the first line of the email like this: Subject: My username is spandex1, passwd is pqowiefjpo

Re: [MlMt] Warn sending encrypted mail about unencrypted subject

2014-07-16 Thread Luca Allodi
I may be wrong but aren't subject lines public by definition, like user names? Think indexing and archiving. -- Sent from mobile http://disi.unitn.it/~allodi DISI - University of Trento > Il giorno 16/lug/2014, alle ore 16:36, "Benny Kjær Nielsen" > ha scritto: > >> On 16 Jul 2014, at 15:41,

Re: [MlMt] Warn sending encrypted mail about unencrypted subject

2014-07-16 Thread Benny Kjær Nielsen
On 16 Jul 2014, at 15:41, Brad Knowles wrote: ISTR that some clients will auto-replace the unencrypted subject line with the contents of the encrypted subject (and other headers), once the message is decrypted. And going the other way, they will put in a placeholder like "Encrypted subject" i

Re: [MlMt] Warn sending encrypted mail about unencrypted subject

2014-07-16 Thread Brad Knowles
On Jul 16, 2014, at 8:23 AM, Bram Heerink wrote: > I think (most) people do know when they think about it. But are you aware > enough all the time? Reason I suggested this change is I composed an > encrypted e-mail and then remembered 'oh subject is not encrypted' and then I > changed it. But

Re: [MlMt] Warn sending encrypted mail about unencrypted subject

2014-07-16 Thread Bram Heerink
Would it be nice to warn users that are trying to send encrypted e-mail about this with a "don't warn me anymore" option? I'm not sure how many encryption users are unaware of this limitation (especially MailMate users). I'll note the idea, but do any other email clients warn about this? I t

Re: [MlMt] Warn sending encrypted mail about unencrypted subject

2014-07-14 Thread Benny Kjær Nielsen
On 13 Jul 2014, at 9:37, Bram Heerink wrote: The subject of an encrypted mail is not encrypted. A subject could disclose information. Yes, this is basically an email-encryption-standard problem (both S/MIME and OpenPGP). Would it be nice to warn users that are trying to send encrypted e-ma

[MlMt] Warn sending encrypted mail about unencrypted subject

2014-07-13 Thread Bram Heerink
Hi, The subject of an encrypted mail is not encrypted. A subject could disclose information. Would it be nice to warn users that are trying to send encrypted e-mail about this with a "don't warn me anymore" option? Regards, Bram Heerink ___ mailmat