Tails

#3 Updated by sajolida 2015-04-30 07:29:13

If issued before Feature #9302, we could document adding configuring the following additional software:

claws-mail/wheezy-backports
claws-mail-archiver-plugin/wheezy-backports
claws-mail-pgpinline/wheezy-backports
claws-mail-pgpmime/wheezy-backports

It needs to be tested.

#9 Updated by intrigeri 2015-05-03 12:32:33

• wrt. “Am I affected by this?”: there’s a manual “save as draft” option, so just saying “Automatic saving is disabled by default” doesn’t lead us far enough IMO. Users may still save stuff in the clear, while they believe it will be encrypted.
• wrt. “Queue = ”Send later“, Very likely to not use it as it doesn’t make much sense in IMAP, or if you use it you’re aware of it because it’s a deliberate action.”:
  • I don’t understand why it doesn’t make much sense in IMAP: one can compose email offline.
  • I’m not convinced by the “deliberate action” part: if the user has explicitly chosen to encrypt an email, perhaps they wouldn’t be that wrong if they believed that “Send later” would save it encrypted, just as “Send” would send it encrypted?
  • Claws Mail sends the cleartext email in Queue before encrypting and sending IIRC (confirmed by _adamb on Feature #9302#note-10) so no, it’s not a deliberate action to put mail to queue.

=> the synopsis intro (" I discovered that this bug might not affect as many people as we thought. At least not all our IMAP users.") seems a bit too optimistic.

#10 Updated by sajolida 2015-05-04 07:13:00

I tested again and indeed when sending an email through IMAP, Claws does the following:

1. Connect through IMAP to store the email in plaintext in the Queue folder of the server.
2. Connect through SMTP to send the email encrypted.
3. Connect through IMAP to store the encrypted email in the Sent folder of the server.
4. Connect through IMAP to delete the plaintext email from the Queue folder of the server.

What a mess!