-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Sat, Sep 23, 2017 at 07:25:50AM -0400, 'Raffaele Florio' via qubes-devel 
wrote:
> Hi all,
> I've a question about Thunderbird's extension.
> Are main objectives these ones?
> 1) Whitelist senders based on email address and signing key.
> 2) Open/Save behavior about attachment.
> 3) Context menus to decide where to open links.
> 
> I don't understand properly first one and related points, from 
> https://github.com/QubesOS/qubes-issues/issues/845:
> - Open message in DispVM/Predefined AppVM.
> - Do the above if the Sender not in a whitelist.
> This means that if an user clicks or scrolls on a message from a non 
> whitelisted source it automatically open in a VM? What actually has to do 
> Thunderbird's extension with mail's content excluding attachments?

I'm not sure what the original intention was either. But the first step
could be about attachments. The current extension allow you to open all
attachments in DispVM by default. It would be nice to configure this
behaviour based on sender (identified by a signing key).

As for the message - maybe it is about built in preview? So, it get
blocked for not whitelisted senders? Opening the whole message in DispVM
could be useful feature too, especially for html emails. But IMHO it
would degrade user experience so much that nobody will use it...

> Others objectives are clear.
> 
> For the third I've some solutions for the conflict with browser's extension. 
> In fact the latter blocks and redirects everytime an URL is opened in the 
> browser. Currently I'm preferring a message passing system, because user has 
> to do nothing when he installs these extensions. In this way Thunderbird's 
> extension passes a message to the browser's extension with URL to be opened 
> and the browser's counterpart opens it. However I'll update on this.
> 
> Best,
> Raffaele.
> 

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJZxlFKAAoJENuP0xzK19csf/AH/As5bp08kEmPKNhu2r3B7jbl
+OP2MIPNf9JagzJWdb5Ib+abu1lkB23VWNgR0W05rvrcTunMz4k64hXU6eO6KZce
mFnQitRtxqg6ZeIhCIbtun17HAQD/4EboX2ilpQNfJRsbk6qcxye4NsNJIuJy2FM
p9Joz1iWw+wcctcS4AONlkuT4n6DgQExd32n1jYemUutFkcgDGnBCpO8ubmu8yhu
nCFAaA89MaxX5r1Zj7YKpNJpiQ5n09AhaG133u6DFl9K1t3ed6eDrWThSQdtawly
TK+DjLhbQUH/Lm92Y3eNJkevN28YPxwkPV3o7LAEEGKQ3TqQ8f1jbKR+gBnoLmc=
=fst+
-----END PGP SIGNATURE-----

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/20170923121921.GX1116%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

Reply via email to