az143 / kuvert

a wrapper that encrypts or signs outgoing mail
GNU General Public License v2.0
6 stars 5 forks source link

docu: minimum settings #5

Closed pkoevesdi closed 2 years ago

pkoevesdi commented 2 years ago

I have hard times to figure out the minimum settings that must go into ~/.kuvert In man I find many (all?) options with default parameters, so no need to put them in config file? Are there any must-have-entries? I understand that this file must exist, but is kuvert supposed to work with an empty config? In any case, I'd suggest to install/deliver an minimum config file with some safe/universal options in it to make kuvert work out of the box.

az143 commented 2 years ago

On Tue, 15 Feb 2022 23:53:00 -0800, pkoevesdi writes:

Are there any must-have-entries?

if you want kuvert to do anything but just send the email straight on then yes, you have to set at least a "defaultaction" option (to a value other than its default, "none").

I understand that this file must exist, but is kuvert supposed to work with an empty config?

no. kuvert_submit will hand everything on straight to sendmail if no .kuvert config exists.

In any case, I'd suggest to install/deliver an minimum config file with some safe/universal options in it to make kuvert work out of the box.

kuvert ships with a 'dot-kuvert' that shows fairly typical settings, which is mentioned in the README file, for the purpose of getting started.

as to 'make it work out of the box', the only safe way to make it work out of the box for everybody is to have it do nothing but hand the mail on, unchanged - kuvert already does that if you give it no config file or an empty config file.

beyond that i won't install or activate 'universal' settings: i believe that signed/encrypted email is too important to have kuvert ship with halfbaked 'works for me' preferences that are likely totally inappropriate for everybody on the planet except the originator.

but i will add a bit of text to the man page and the readme to clarify the minimum options needed to make kuvert Do Something.

regards az

-- Alexander Zangerl + GPG Key 2FCCF66BB963BD5F + http://snafu.priv.at/ "Gedanken sind zollfrei. Aber man hat doch Scherereien." -- Karl Kraus

pkoevesdi commented 2 years ago

Are there any must-have-entries?

if you want kuvert to do anything but just send the email straight on then yes, you have to set at least a "defaultaction" option (to a value other than its default, "none").

Ok, thanks.

I understand that this file must exist, but is kuvert supposed to work with an empty config?

no. kuvert_submit will hand everything on straight to sendmail if no .kuvert config exists.

Ok, so same when file exists, but empty. That point was not clear to me.

In any case, I'd suggest to install/deliver an minimum config file with some safe/universal options in it to make kuvert work out of the box.

kuvert ships with a 'dot-kuvert' that shows fairly typical settings, which is mentioned in the README file, for the purpose of getting started.

Yes I read this config, but it is full of examples (probably unfitting for most users' productive use) and values that are default anyway. So in my opinion not the minimum-work-out-of-the-box-setting. A good file for learning, tho.

as to 'make it work out of the box', the only safe way to make it work out of the box for everybody is to have it do nothing but hand the mail on, unchanged - kuvert already does that if you give it no config file or an empty config file.

Ok, with "work" I meant, "encrypt".

beyond that i won't install or activate 'universal' settings: i believe that signed/encrypted email is too important to have kuvert ship with halfbaked 'works for me' preferences that are likely totally inappropriate for everybody on the planet except the originator. but i will add a bit of text to the man page and the readme to clarify the minimum options needed to make kuvert Do Something.

Ok, great, thanks, I can fully live with that. Thank You!

az143 commented 2 years ago

On Wed, 16 Feb 2022 02:04:50 -0800, pkoevesdi writes:

Ok, great, thanks, I can fully live with that. Thank You!

done: pushed v2.2.5 a few minutes ago, which has a new 'getting started' section near the top of the man page.

-- Alexander Zangerl + GPG Key 2FCCF66BB963BD5F + http://snafu.priv.at/ The only truly safe "embedded system" is the system that has an axe embedded in it... -- Tanuki

pkoevesdi commented 2 years ago

Thank You, I think, this helps much for starting.