[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kmail-devel
Subject:    Re: Problems sending encrypted messages
From:       Volker Augustin <volker.augustin () stud ! uni-regensburg ! de>
Date:       2002-01-31 19:20:48
[Download RAW message or body]

> 1.) We would have to treat GnuPG and PGP differently because the usage
> of untrusted keys is only possible with gpg (and the completely
> outdated PGP 5 AFAIK). But all classes (except the program dependant
> classes derived from Kpgp::Base) should be free of any hacks which only
> apply to one of the supported programs.

OK, this is an argument against a modification. :-)

> 2.) man gpg:
> 	--always-trust
>                  Skip  key  validation  and assume that used keys
>                  are always fully trusted.  You  won't  use  this
>                  unless  you have installed some external valida­
>                  tion scheme.
>     Do we (or you) have an external validation scheme? No!

Well, not an external validation scheme but an external warning scheme.

> 3.) This feature (not allowing encrytion with untrusted keys) will
> probably accelerate the growth of the web of trust because now KMail
> users are forced to sign keys if they want to use them. Hopefully they
> won't just sign them locally (or even worse, globally without checking
> the key owner's identity). I know that this is wishful thinking. :-(

Very wishful thinking...  :-(

Volker
_______________________________________________
kmail Developers mailing list
kmail@mail.kde.org
http://mail.kde.org/mailman/listinfo/kmail
[prev in list] [next in list] [prev in thread] [next in thread]