search

roundcube / roundcubemail

The Roundcube Webmail suite
https://roundcube.net
GNU General Public License v3.0
5.82k stars 1.63k forks source link

Feature request: support public PGP keys in contacts #5407

Open renne opened 8 years ago

renne commented 8 years ago

Hi,

sharing and storing public PGP keys is the big show stopper in email end-to-end encryption.

The IETF RFC 6350 defines the VCard format. Section 6.8.1 explicitly lists an example how to store public PGP keys in VCards. Using the combination of public PGP keys in contacts according to IETF RFC 6350 Section 6.8.1 and regular scans for new and updated keys with Net_DNS2 according to IETF RFC 7929 provides the users with all necessary means to send encrypted e-mails - even on their mobile devices via CardDAV.

The PHP-library Net_DNS2 supports OpenPGPkey lookups. You can install it with Pear or manually from Github. You need to include the class 'netdns2/Net/DNS2.php' (or '/usr/share/php/Net/DNS2.php' with Pear on Ubuntu) in your code. See the code example.

The german email providers Core Networks, mail.de and Posteo already publish OpenPGPkey-records. If you want to test your Net_DNS2 integration you can look up the email-addresses info@core-networks.de, support@mail.de and support@posteo.de with Net_DNS2. The result can be compared at OPENPGPKEY.info

alecpl commented 8 years ago

Storing PGP keys (and S/MIME certs) in contacts would not be a big problem and we should implement this at some point. How this data is managed/updated is another story and calls for a plugin. Of course Enigma plugin (and Mailvelope) would need to know how to use this data.