cypht-org / cypht

Cypht: Lightweight Open Source webmail aggregator [PHP, JS]
http://cypht.org
GNU Lesser General Public License v2.1
955 stars 148 forks source link

Autocrypt support #241

Open BuZZ-dEE opened 6 years ago

BuZZ-dEE commented 6 years ago

Hi there, is Cypht planning to follow the path of other mail clients and implement Autocrypt? Seems like most major clients are planning on releasing support for it soon (K9, Thunderbird, Mailpile). Would be nice if Cypht follows and stays compatible.

dumblob commented 6 years ago

It's very fresh and there is no RFC, not even the intent to submit one is to be found. But I really like the idea and after reading just a few posts and issues I'm confident the very few authors and contributors to Autocrypt are enough knowledgeable persons to make it happen.

So I'd suggest considering support for Autocrypt as a standardized opportunistic and extremely user-friendly end-to-end encryption in Cypht.

jasonmunro commented 6 years ago

I skimmed the Level 1 doc here: https://autocrypt.org/level1.html Looks interesting. My take is this specification is more about key management and the ability to opt in to encrypted conversations without having deal with the keys yourself. The end result of using autocrypt is a standard PGP signed/encrypted message body. Just like with PGP support, one issue here is safely storing the private keys, since Cypht is generally hosted on a server. (The PGP module, assuming I ever get the time to get back to it, never lets the private key leave the user's device, all the encryption/signing is done in javascript).

Anyway, it's a neat idea, thanks @BuZZ-dEE for the suggestion. When I can, I will dig into the spec more and see what we can do!

marclaporte commented 1 year ago

Autocrypt support is coming to Cypht.

Once it lands, we should test with the bot and get listed here: https://autocrypt.org/dev-status.html

marclaporte commented 1 year ago

Work in progress: https://github.com/jasonmunro/cypht/pull/652

marclaporte commented 2 months ago

@henrique-borba is no longer available to complete the work on https://github.com/cypht-org/cypht/pull/652

We are looking for a volunteer to step up!