Feature Wish: Keyserver support

lavab / web

AngularJS web client of Lavaboom's email service

https://mail.lavaboom.com

38 stars 21 forks source link

Feature Wish: Keyserver support #495

Open mlooz opened 9 years ago

mlooz commented 9 years ago

These are features I would like as a user, as they would make handling keys much easier than manually sending and uploading them, the result will give a better user experience imo.

[ ] button in contacts view to search for missing keys on keyserver
[ ] when looking at signed email for which no public key is available, button to look for key on keyserver
[ ] button to upload own public key on keyserver
[ ] option to revoke key publicly if it has been compromised
[ ] Lavaboom keyserver, mirroring pgp.mit.edu etc.
[ ] When typing an unknown address in the compose window, look for key on lavaboom keyserver

The last step should only happen if lavaboom has its own keyserver, since the keyserver knows all requested addresses.

I've posted this since @vLooz suggested it, will stop if it annoys anyone.

TurkeyMan commented 9 years ago

Could you comment on the anticipated end-user experience here? It's not completely clear to me from the implementation steps.

I have a strong feeling that if encrypted email is to be a success beyond a few niche enthusiasts, then the whole user experience needs to be treated with the assumption that the user has no idea what a key is. They should never be presented with the concept by default, and any key handling should only be found in advanced options. As always, encrypted communications are only useful if both ends are on-board, and that means average Joe needs to be on this. My mum can't handle or make any decision relating to her PGP keys.

I'm hoping that the solution takes this into account. The first point makes me think, maybe not?

vLooz commented 9 years ago

Hey there @TurkeyMan! Thx a lot for you detailed feedback! We definitely take it into account! We totally agree with you, that seeming-less usability is the key to customer satisfaction. Nevertheless we feel a need to teach our users at least some basics about the keys, so that they can understand better how the encryption works. We are still in the process of balancing it right though. So your feedback is very valuable here :-)

TurkeyMan commented 9 years ago

Thanks for the answer. I'm very interested to see how this issue moves forward. So it is safe to say then at this stage that the user-experience plans are not yet well defined?