Re: [Evolution] What's New in Evolution 3.6

2012-09-20 Thread Paul Menzel
Dear Matthew,


Am Mittwoch, den 19.09.2012, 10:13 -0400 schrieb Matthew Barnes:
 I've never been very good about posting release announcements, but
 Evolution 3.6.0 is set to be released next week and it's a pretty big
 release for us.  I just wanted to highlight a couple major changes so
 you know what to expect.

thank you very much for the announcement. Such things are much
appreciated. I know they take quite some time to write, but it is time
well spent.


 Hello, WebKit!
 --
 
 We're in the process of abandoning our ancient HTML renderer (GtkHtml)
 for WebKit/GTK+.  We're spreading this across two releases just because
 it's such a large workload.  Dan Vrátil did most of the WebKit porting
 and he's an absolute superhero for doing so.
 
 Evolution 3.6 will render received mail using WebKit/GTK+.  That means
 HTML mails containing CSS will finally be displayed correctly, since our
 old HTML renderer had no CSS support.
 
 The email composer in Evolution 3.6 will still use GtkHtml, but Dan
 already has a branch ready to merge which ports the composer to WebKit,
 so we'll spend the entire 3.7 development cycle testing that and shaking
 out the bugs in time for Evolution 3.8 next spring.

A more official statement than Andre’s reply to my message [1] about the
security implications would be nice.

 Goodbye GConf!
 --

[…]

 Evolution 3.6 will move your account data to plain text files which live
 in $HOME/.config/evolution/sources.  Evolution-Data-Server 3.6 will also
 introduce a new D-Bus service which will serve these files to Evolution,
 GNOME Contacts, GNOME Shell and any other E-D-S client, and also handle
 various other miscellaneous chores like talking to GNOME Online Accounts
 and cleaning up old data after you delete an account.

It would be great if that migration stuff is a separate so people can
test that beforehand for example.

Could you please point to some write up in the source or a Wiki
explaining the new format. For example also how passwords are stored.

[…]

 Smaller Development Team
 
 
 And now for some sad news.  Since Evolution 3.4 was released we've had a
 significant reduction in our development team.  SUSE decided to cut all
 funding of Evolution development and reassigned its (formerly Novell)
 Evolution developers elsewhere.
 
 That leaves just myself, Milan Crha and Dan Vrátil (all Red Hatters).
 However Dan is in the process transitioning over to Red Hat's KDE team,
 leaving myself and Milan as the only remaining full time developers for
 the moment.
 
 Red Hat does have an open position in the Brno, Czech Republic office
 for a new full-time Evolution developer [1], if anyone is interested.
 
 Unfortunately this staff reduction caused a few software causalities:
 
 * Evolution-GroupWise is now unmaintained and will not see a 3.6
   release.  The SUSE team had been maintaining this prior to their
   reassignment, and unfortunately we just don't have adequate resources
   to keep it going.  If anyone would like to take over maintainership,
   I'd be happy to assist with getting the module back up to speed.
 
 * Evolution-Exchange is also cut for the same reasons.  That's the old
   Ximian Connector, which talks to Exchange 2003 via Outlook Web Access
   but doesn't work with Exchange 2007 or later.
 
   For Exchange integration, most of our development focus is now on the
   Exchange Web Services module (Evolution-EWS), but Evolution-MAPI is
   still being maintained since it works with Exchange 2003 as well as
   2007 and 2010.
 
   With only two full-time developers left, we just felt that maintaining
   three different Microsoft Exchange backends was getting ridiculous and
   was not the best use of our time.

Are the reasons of SUSE known? Do there customers not use Evolution or
if they do, they do not use Microsoft Exchange?

Additionally are there any software company providing Evolution support?

 No worries though, we will soldier on.

I wish you the best.


Thanks,

Paul


 [1] 
 http://blogs.gnome.org/uraeus/2012/09/13/interested-in-joining-the-red-hat-desktop-team-here-in-brno/
[2] https://mail.gnome.org/archives/evolution-list/2012-August/msg00115.html


signature.asc
Description: This is a digitally signed message part
___
evolution-list mailing list
evolution-list@gnome.org
To change your list options or unsubscribe, visit ...
https://mail.gnome.org/mailman/listinfo/evolution-list


Re: [Evolution] What's New in Evolution 3.6

2012-09-20 Thread Pete Biggs

 Could you please point to some write up in the source or a Wiki
 explaining the new format. For example also how passwords are stored.

Passwords have not been stored by Evolution for a while - the
gnome-keyring is used.  Presumably (hopefully?) that hasn't changed.
Much as I think the devs are capable of dealing with it, but there is a
perfectly usable alternative coded by people who are experts in
safe/encrypted storage and I would prefer they spend their (v. limited)
time dealing with Evolution rather than re-inventing things.

P.


___
evolution-list mailing list
evolution-list@gnome.org
To change your list options or unsubscribe, visit ...
https://mail.gnome.org/mailman/listinfo/evolution-list


Re: [Evolution] Security implications of WebKit migration

2012-09-20 Thread Dan Vratil
On Wednesday 22 of August 2012 08:27:05 Paul Menzel wrote:
 Dear Evolution folks,


Hi,

sorry for not replying earlier, I didn't notice your question before.


 finding two bug reports in the Debian BTS about not-existing security
 support for WebKit releases, I am wondering if the WebKit migration of
 Evolution will also suffer from that. It comes to my mind, that one of
 Microsoft Outlook’s biggest security issues is (was(?)) due to bugs in
 the HTML rendering engine.

WebKit provides some elementary security mechanisms - for example does not
allow loading content from different protocol or hostname. We are loading all
emails and their content via our own mail:// protocol, so WebKit will
block a request trying to load some content through file:// for instance.

We have also JavaScript disabled, so malicious emails can't unveil their evil
powers.

The only unfortunate thing we haven't fixed yet are plugins. We have to have
plugins enabled in order to be able to inject GtkWidgets (like attachment bar)
into WebKit. This also means that Flash or Java content in enabled and that
they WILL be displayed and executed (assuming you have necessary plugins
installed) in the mail preview. We are aware of this and I have already
discussed with Milan a possible solution - writing our own ad-block
extension and force replace all object and applet tags by a placeholder.

Regarding internal WebKit security (exploits in images, executables binary
code in tag names etc), I must admit I don't know how well WebKit deals with
this. WebKit is massively deployed though, use by Google Chrome, Safari and
others so I would say that this would be handled well, but the linked bugs
indicate otherwise :(


 Also I do not know how good the security support for GtkHTML is.

As said Andre, security support for GtkHTML is probably somewhere between
little and none.

Cheers,
Dan



 Thanks,

 Paul


 [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bugh2481
 [2] http://bugs.debian.org/cgi-bin/bugreport.cgi?bugd9625
--
dvra...@redhat.com | Associate Software Engineer / BaseOS / KDE, Qt
GPG Key: 0xC59D614F6F4AE348
Fingerprint: 4EC1 86E3 C54E 0B39 5FDD B5FB C59D 614F 6F4A E348

signature.asc
Description: This is a digitally signed message part.
___
evolution-list mailing list
evolution-list@gnome.org
To change your list options or unsubscribe, visit ...
https://mail.gnome.org/mailman/listinfo/evolution-list


Re: [Evolution] Security implications of WebKit migration

2012-09-20 Thread Jose Dapena Paz
El jue, 20-09-2012 a las 11:39 +0200, Dan Vratil escribió:

 The only unfortunate thing we haven't fixed yet are plugins. We have to 
 have 
 plugins enabled in order to be able to inject GtkWidgets (like attachment 
 bar) 
 into WebKit. This also means that Flash or Java content in enabled and that 
 they WILL be displayed and executed (assuming you have necessary plugins 
 installed) in the mail preview. We are aware of this and I have already 
 discussed with Milan a possible solution - writing our own ad-block 
 extension and force replace all object and applet tags by a placeholder.

A possibility would be avoiding embeding gtk at all, even for the
attachment bar, and implement it completely on html. Is this something
considered, or is the work to implement this is out of scope now?


___
evolution-list mailing list
evolution-list@gnome.org
To change your list options or unsubscribe, visit ...
https://mail.gnome.org/mailman/listinfo/evolution-list


Re: [Evolution] I'm new to this list

2012-09-20 Thread Andre Klapper
Paul,

On Wed, 2012-09-19 at 22:23 +0200, Paul Menzel wrote:
 Am Mittwoch, den 19.09.2012, 12:52 -0600 schrieb Nail That Down:
 Since you are new, please read the netiquette [1].

Err, no. Your link to some wikipage of some random third party project
has nothing to do with this mailing list, sorry.
If something applies at all to GNOME mailing list then it's GNOME's code
of conduct.

 2. No HTML.

Don't come up with rules that don't exist. Most people on this list
prefer plain text (me too), but writing No HTML implies that it's not
allowed. Which is not true.

 Please post your message again with the correct subject line and the
 following comment clarified.

ROFL. Just edit the subject line yourself if it's a big deal?

andre
-- 
mailto:ak...@gmx.net
http://blogs.gnome.org/aklapper

___
evolution-list mailing list
evolution-list@gnome.org
To change your list options or unsubscribe, visit ...
https://mail.gnome.org/mailman/listinfo/evolution-list


Re: [Evolution] Security implications of WebKit migration

2012-09-20 Thread Dan Vratil
On Thursday 20 of September 2012 11:56:01 Jose Dapena Paz wrote:
 El jue, 20-09-2012 a las 11:39 +0200, Dan Vratil escribió:
  The only unfortunate thing we haven't fixed yet are plugins. We have to
  have plugins enabled in order to be able to inject GtkWidgets (like
  attachment bar) into WebKit. This also means that Flash or Java content
  in enabled and that they WILL be displayed and executed (assuming you
  have necessary plugins installed) in the mail preview. We are aware of
  this and I have already discussed with Milan a possible solution -
  writing our own ad-block extension and force replace all object and
  applet tags by a placeholder.
 A possibility would be avoiding embeding gtk at all, even for the
 attachment bar, and implement it completely on html. Is this something
 considered, or is the work to implement this is out of scope now?

It has been considered of course, but the amount of work needed to achieve the
same functionality is inadequate and we now totally lack manpower to do so.

Attachments are added to the attachment bar asynchronously, the attachment bar
is in fact a view for a model with attachments. Implementing this all using
just DOM bindings provided by WebKit would bewell, out of scope (note that
you can't use JavaScript to do this on the client-side). Also supporting
accessibility would be a problem here.

I've managed to do this for the itip-formatter, which used to be a Gtk widget,
now it's all handled through the DOM and I'm not sure I want to do it again :)

Dan

--
dvra...@redhat.com | Associate Software Engineer / BaseOS / KDE, Qt
GPG Key: 0xC59D614F6F4AE348
Fingerprint: 4EC1 86E3 C54E 0B39 5FDD B5FB C59D 614F 6F4A E348

signature.asc
Description: This is a digitally signed message part.
___
evolution-list mailing list
evolution-list@gnome.org
To change your list options or unsubscribe, visit ...
https://mail.gnome.org/mailman/listinfo/evolution-list


Re: [Evolution] I'm new to this list

2012-09-20 Thread Andre Klapper
Hi Anita,

On Wed, 2012-09-19 at 12:52 -0600, Nail That Down wrote:
 I believe the question I have is: is there a way to print out or copy
 the message filters I use?

Which account types do you use (POP, IMAP, etc)?

For Evolution version 3.4 and later:
http://library.gnome.org/users/evolution/3.5/mail-filters-not-working.html
For Evolution version 3.2 and earlier:
https://live.gnome.org/Evolution/FAQ#How_can_I_see_what_my_filters_are_doing.3F

As I'm not totally sure if these instructions are correct, starting
Evolution from a terminal window with the command
CAMEL_DEBUG=filter evolution  evo.log
, applying filters, and then checking the file evo.log might also
work.


andre
-- 
mailto:ak...@gmx.net
http://blogs.gnome.org/aklapper

___
evolution-list mailing list
evolution-list@gnome.org
To change your list options or unsubscribe, visit ...
https://mail.gnome.org/mailman/listinfo/evolution-list


Re: [Evolution] What's New in Evolution 3.6

2012-09-20 Thread Andre Klapper
On Thu, 2012-09-20 at 10:03 +0100, Pete Biggs wrote:
  Could you please point to some write up in the source or a Wiki
  explaining the new format. For example also how passwords are stored.
 
 Passwords have not been stored by Evolution for a while - the
 gnome-keyring is used.  Presumably (hopefully?) that hasn't changed.

It hasn't. Note though that gnome-keyring (and KWallet in KDE) will
get replaced by cross-desktop libsecret in the future.

andre
-- 
mailto:ak...@gmx.net
http://blogs.gnome.org/aklapper

___
evolution-list mailing list
evolution-list@gnome.org
To change your list options or unsubscribe, visit ...
https://mail.gnome.org/mailman/listinfo/evolution-list


Re: [Evolution] What's New in Evolution 3.6

2012-09-20 Thread Andre Klapper
On Thu, 2012-09-20 at 10:45 +0200, Paul Menzel wrote:
  Evolution 3.6 will move your account data to plain text files which live
  in $HOME/.config/evolution/sources.  Evolution-Data-Server 3.6 will also
  introduce a new D-Bus service which will serve these files to Evolution,
  GNOME Contacts, GNOME Shell and any other E-D-S client, and also handle
  various other miscellaneous chores like talking to GNOME Online Accounts
  and cleaning up old data after you delete an account.
 
 It would be great if that migration stuff is a separate so people can
 test that beforehand for example.

Not sure if I understand. Separate from what? How would testing
beforehand get easier by separating something?

andre
-- 
mailto:ak...@gmx.net
http://blogs.gnome.org/aklapper

___
evolution-list mailing list
evolution-list@gnome.org
To change your list options or unsubscribe, visit ...
https://mail.gnome.org/mailman/listinfo/evolution-list


Re: [Evolution] What's New in Evolution 3.6

2012-09-20 Thread Matthew Barnes
On Thu, 2012-09-20 at 10:45 +0200, Paul Menzel wrote:
 Could you please point to some write up in the source or a Wiki
 explaining the new format. For example also how passwords are stored.

Here's an overview of the new file format:
https://live.gnome.org/Evolution/ESourceFileFormat

Passwords will remain in GNOME-Keyring / KWallet / whatever else
implements the FreeDesktop Secret Service API.

Matthew Barnes

___
evolution-list mailing list
evolution-list@gnome.org
To change your list options or unsubscribe, visit ...
https://mail.gnome.org/mailman/listinfo/evolution-list


Re: [Evolution] I'm new to this list

2012-09-20 Thread Reid Thompson
On Wed, 2012-09-19 at 12:52 -0600, Nail That Down wrote:
 I believe the question I have is: is there a way to print out or copy
 the message filters I use? In case I haven't asked the right question,
 feel free to correct me.
 
 My email  is going into folders where it   belong. I've being getting
 email, since the late 80's. I've never had a problem with sorting
 email before. I even had Evolution working, a few glitches I took care
 of. Since I switched  to Ubuntu 11.10 it has developed a mind of its
 own  unless I do a search of the entire email, I can't find anything.
 
 Sorry for  the length. I'm using my phone because a copy is sent to
 it.
 
 Anita Jensen

on the later versions of evolution...

$ cp $HOME/.config/evolution/mail/filters.xml $HOME/myfilters.xml

$ vi myfilters.xml

send myfilters.xml to printer


If $HOME/.config/evolution/mail/filters.xml doesn't exist on your
version, you'll have to search for filters.xml.





___
evolution-list mailing list
evolution-list@gnome.org
To change your list options or unsubscribe, visit ...
https://mail.gnome.org/mailman/listinfo/evolution-list


Re: [Evolution] What's New in Evolution 3.6

2012-09-20 Thread Zan Lynx
On Wed, 2012-09-19 at 20:28 -0430, Patrick O'Callaghan wrote:
 On Wed, 2012-09-19 at 10:13 -0400, Matthew Barnes wrote:
  Evolution 3.6 will move your account data to plain text files which
  live in $HOME/.config/evolution/sources.
 
 I think I speak for all of us when I say: woohoo!

Yes. Yay!

-- 
Knowledge Is Power
Power Corrupts
Study Hard
Be Evil


signature.asc
Description: This is a digitally signed message part
___
evolution-list mailing list
evolution-list@gnome.org
To change your list options or unsubscribe, visit ...
https://mail.gnome.org/mailman/listinfo/evolution-list


Re: [Evolution] What's New in Evolution 3.6

2012-09-20 Thread Lailah

El mié, 19-09-2012 a las 09:42 -0800, Fred Erickson escribió:

 On Wed, 2012-09-19 at 10:13 -0400, Matthew Barnes wrote:
  I've never been very good about posting release announcements, but
  Evolution 3.6.0 is set to be released next week and it's a pretty big
  release for us.
 
 I just want to thank you and the other developers for all the time and
 effort put into maintaining and improving Evolution. All us silent users
 really appreciate it even though we rarely speak up and say anything.
 
 Fred 
  
 
 ___



Totally agree.  Thanks very much to all!


Lailah



signature.asc
Description: This is a digitally signed message part
___
evolution-list mailing list
evolution-list@gnome.org
To change your list options or unsubscribe, visit ...
https://mail.gnome.org/mailman/listinfo/evolution-list