Bowie Bailey a écrit : > Harry Hoffman wrote: > >>I'm looking at writing a bit of code that automatically encrypts >>emails with gpg that are not encrypted and was wondering if it would >>be best to use Amavis to do this. >> >>A email would arrive via smtp be handed off to amavis for spam/virus >>scanning, if it passed both then it would be checked to see if the >>messages and any attachments were encrypted. If not it would use a >>private key and the user's public key to encrypt the >>message/attachments and then re-inject the message back into the smtp >>server. >> >>Amavis seems to have most of the components necessary to do this, but >>is it the right place? Or should I look to have something that is >>stand-alone? > > > What would you do with a message that has multiple recipients? >
you create a session key, you encrypt the message once with this key, then encrypt this key as many times as there are recipients, every time with the pub key of the recipient, then send a single message. now, I don't believe amavisd is the right place. just because it has the functionality doesn't mean it's good to add complexity. ------------------------------------------------------- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory! http://sel.as-us.falkag.net/sel?cmd=lnk&kid0944&bid$1720&dat1642 _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
