-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear Enigmail team, first, let me thank you for your outstanding work. Enigmail is a very good tool to protect your privacy with, I do recommend it to virtually everyone who is concerned with privacy of their e-mail communication.
I would, nevertheless, like to suggest a privacy-enhancing improvement to be implemented within Enigmail. With the current 1.5.1 release, names of attachments aren't encrypted, and these names can leak some interesting information to a passive adversary. It indeed happened in my previous practice that such a leak caused some minor trouble (I can't give you details, but it was "fun"). PGPDesktop provides this functionality for some time already, and Enigmail can cope with incoming PGPDesktop-encrypted e-mails whose attachment names are encrypted (Attachment1.pgp, Attachment2.pgp etc.). So why not add the same ability to outgoing e-mails? I found a short discussion of the same problem on gpgtools.org (see http://support.gpgtools.org/discussions/everything/904-attachment1pgp-filename), and it seems that GPG already supports this ability. Best regards Marian Kechlibar -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJR2/hBAAoJEIEOTBfjt7skjFYP/3660FkPeUE8tV2G9Rj5ffyG OrarLnVx+vE9bxSY2yZYPf3Fpqp5Nxa3ZOEcif5W4z8mi6d9+wU9V/dDwG7rch83 CJ7btKq4hWv2Cm2wK6HFw6vqrGWEDUR96RJgpVqCOptwcd1Coh7tdLkW1kJkBZQK GQMdW/P0rUHQYSzgDrSzC1WVQOIDXCyAtGju06oRXtExvnwMdk4UwjrU2JdAJO5J 73xbGVLWziPYE/e/uOIvqGG4Hd2xK7G0MxLusZqzzo5ApTst9XQWUmhQKhP5sipp 4Z+hE+snOKrd8QUbL58KdFgYiNknGoQGnajr0YUzl5fqC3f8QQ4CjVMo2sQGT178 jgnyHnb5NRFde+9nkAEHPcJiqEI4wHlSNmH//yYV0TCLi7uEa4mwUHRyNw6sp+q1 znGkJ34DFQid055Lo/p6YrKALHsp80g++76I+iZ4b+1ABFgg36mrtosFqyy5zPOM iZoU5SAZzhNVxw5ILTrN+tx1JYhpKH8V2F1z4oy8PAAwXH3KjbJgWRFIGb5qylH2 VlLlVYTIYVzF8OAPTBMcfBqhDLxbeoy+cax8kj6/dG6hlQXVoFEINZMUCrEvyz9Y aTmaXmeTHp0AsIxYi5r7BH9+Nypd648AwRaqNPXKe/UGx5QvsI9NoiYHgXJVYCfg huN/+o4ntEO7Ebon+0CE =m/NF -----END PGP SIGNATURE----- _______________________________________________ enigmail-users mailing list [email protected] https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
