PGP support for emails

[Redsandro]

:bulb: The Idea

Allow to encrypt messages and attachments with PGP/GnuPG using a specified public key before sending emails.

This way you can forward sensitive content to your self-hosted apprise where it will be encrypted before being sent to a publicly hosted mail server over which you don't have control.

:man_technologist: The Implementation

I don't know how to do this platform independently in Python. A search provided some possibly interesting related projects:

• gnupg- a wrapper around the GnuPG executable.
• python-gnupg- another wrapper around the GnuPG executable.
• gpgkeys- another wrapper around the GnuPG executable.
• gpglib- a pure python library for parsing OpenPGP packets and decrypting messages.
• OpenPGP- an unmaintained pure python library with much of the functionality of old versions of GnuPG.
• OpenPGP-Python- a pure python port of openpgp-php. It can parse OpenPGP packets and verify & create signatures.

Perhaps it's easiest to do a switch internally and call os dependent binaries. Throw an error when binary does not exist.

[caronc]

The only problem i see with PGP is that the certificate can bet quite large. The only way I can think of implementing this is adding ?pgp=/path/to/local/key in the URL:

• mailtos://user:pass@hostname/mybuddy@gmail.com?pgp=/home/.pgp/key

Or it could be ?sign= or whatever you feel is more appropriate.

The only catch is that his feature wouldn't work using say the Apprise API for example because it could possibly be exploited (accessing someones remote server and passing in different local files to ?pgp=. You know?

Thoughts?

[Redsandro]

I think you should think of the certificate as a file rather than a string:

apprise --title 'Sensitive content' \
        --body 'Here is the leaked document.' \
        --attach document.pdf \
        --pgp certificate.key \
        'mailto://myemail:mypass@protonmail.com'

if a --pgp file is supplied, it needs to be used in email related plugins. I.e. if the certificate is wrong, invalid, or path does not exist etc throw an error so the email is not sent unencrypted by mistake.