4 ms·
GPG 2.0 now supports encrypting the Subject line.
by q3k 8y ago
GPG 2.0 now supports encrypting the Subject line.
- simias 8y agoIt does? As a user I'm interested. How does that work? While as the parent points out some header info has to remain available to deliver the mail correctly I always thought that it was a huge weakness that the subject wasn't encrypted as it could potentially leak some critical information. I didn't think there was a solution to this problem.
- kikoreis 8y agoIn SMTP only the envelope headers are really required to be unencrypted. The rest, including the actual To, From and Subject fields are part of the payload. You can use milters that look at the payload which can affect email delivery (think anti virus) but that is separate from the protocol itself.
- pas 8y agoThe "envelope headers" are not really part of the email though, they are just SMTP protocol messages (commands) required to get to the point where you can pipe/stream the actual mail body (payload) through. Though every MTA prepends stuff to the payload (Received headers, etc.).
- vlan0 8y agoThe RFCs for the SMTP protocol call what is read by the server. Reading RFCs is fun :)
- yosamino 8y agoThis is probably what they are referring to: https://github.com/autocrypt/memoryhole https://github.com/autocrypt/memoryhole
- dane-pgp 8y agoThe Autocrypt team are doing some great work, and I really hope they prove that OpenPGP can provide the basis for a backwards compatible and secure email system, which works without requiring the user to necessarily understand the underlying cryptography (just as HTTPS has succeeded). Making email more secure than it currently is seems like quite a low bar to reach, even if perfect security remains impossible to achieve. https://autocrypt.org/ https://autocrypt.org/
- dboreham 8y agoHmm...the pgp emails I've received recently either have no subject or the subject is "Encrypted Email".