search

simple-login / app

The SimpleLogin back-end and web app
https://simplelogin.io
GNU Affero General Public License v3.0
5.07k stars 423 forks source link

Automatically import PGP keys for Proton users #1258

Open mainrs opened 2 years ago

mainrs commented 2 years ago

Hello!

Proton provides an API to get the public key associated with a Proton account. This works for @pm.me, @proton.me, @protonmail.com and @protonmail.ch E-Mail addresses as well as custom domains.

The endpoint is https://api.protonmail.ch/pks/lookup?op=get&search=security@protonmail.com, where security@protonmail.com is the E-Mail address of the user.

SimpleLogin seems to know my Proton address. So in theory it could try and fetch the PGP key for it and set it automatically.

nguyenkims commented 2 years ago

@mainrs thanks for the idea. If you are using a Proton mailbox, the email forwarded by SimpleLogin is encrypted at rest by Proton anw and as SimpleLogin is now running in Proton datacenter, it isn't really helpful to enable PGP here. The PGP provided by SimpleLogin is indeed more geared towards mailboxes that don't natively support PGP.

jakob11git commented 1 year ago

If you're using Proton Mail, and you want all emails to display correctly inside Proton's own clients, then it's probably better to not configure PGP at SimpleLogin level, because of #754 -- learned this the hard way. But great to hear that security-wise it's now not really a difference anymore.