On 2016-12-31 04:57, Patrick Brunschwig <[email protected]> wrote:

> On 31.12.16 07:26, Booze Empire wrote:
>> Good day.
>>
>> I never use drafts, so I did not notice this at first when I updated my
>> TB and Enigmail along with it. But today I did use drafts, and
>> discovered that if the option to "encrypt drafts" is enabled in account
>> settings, then ALL drafts are encrypted, even those where I have not
>> selected that the email itself should be encrypted or signed. Is this
>> normal? Shouldn't Enigmail only encrypt drafts that are marked for final
>> encryption (i.e. Encrypt Message CTRL+Shift+E) ?
>
> We consider it a security feature to encrypt all drafts for an account
> (if the option to encrypt drafts is enabled). Depending on how you work,
> you may add the recipients and/or decide whether or not the message will
> be encrypted only just before you send the message.
>
> But if the message is autosaved on an IMAP server you will already have
> leaked information by then.

Ah, I see, yes.

> We therefore decided to encrypt all drafts, independently of whether or
> not encryption is enabled.

Makes sense, thanks for explaining!

-- 
! _\|/_  Sylvain / [email protected]
! (o o)   Member:David-Suzuki-Fdn/EFF/Red+Cross/SPCA/Planetary-Society
oO-( )-Oo  Gene Police: YOU! OUT OF THE POOL!


_______________________________________________
enigmail-users mailing list
[email protected]
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Reply via email to