Re: [Mailman-Developers] Encrypted lists predictable difficulties and implementation needs

2017-03-22 Thread Jan Jancar
On 03/22/2017 04:02 PM, Stephen J. Turnbull wrote: > Also references to existing knowledge would be appreciated, such as > "zero knowledge" schemes that might allow untrusted root on Mailman > host, and the various implementations like SELS that have been > mentioned. In my proposal [1 or 2], I

Re: [Mailman-Developers] Encrypted lists predictable difficulties and implementation needs

2017-03-22 Thread Jan Jancar
On 03/22/2017 04:06 PM, Stephen J. Turnbull wrote: > Rich Kulawiec writes: > > > (In the specific case, e.g., the right people using the right > > devices with the right knowledge and self-discipline: maybe. But > > there are not many of those cases and any of them can revert to the > >

Re: [Mailman-Developers] Encrypted lists predictable difficulties and implementation needs

2017-03-22 Thread Jan Jancar
On 03/21/2017 11:16 PM, Rich Kulawiec wrote: > On Tue, Mar 21, 2017 at 04:04:20PM +0100, johny wrote: >> Shifting the attacker to actively compromise devices is an overall >> improvement. > > If "compromising devices" was difficult, I might agree. But it's not. > Devices of all descriptions

[Mailman-Developers] Encrypted mailing lists: Tor project uses Schleuder

2017-04-02 Thread Jan Jancar
Hi Mailman Developers. Considering the recent debate on this list regarding the possible uses and usefulness of an encrypted Mailman mailing list, I tried to look for orgs / groups that already use or are looking for an encrypted mailing list. To see what they use / what would they like to use

[Mailman-Developers] GSoC 2017 - Encrypted lists draft

2017-03-13 Thread Jan Jancar
Hi Mailman developers. My name is Jan Jancar and I study IT Security at the Masaryk university in Brno, Czech republic. I'm interested in this years Mailman GSoCproject, as encryption/security is a topic I'm familiar with and interested in. I'm currently working on an Elliptic Curve domain

Re: [Mailman-Developers] [GSoC] Encrypted mailing lists - update v13

2017-08-16 Thread Jan Jancar
Hi all! Another progress report, on the PGPMailman web ui status. === Web UI progress === django-pgpmailman progress == Successfully created the mail list views. Inspired heavily by Postorius, to get the same look, both in templates and views.

Re: [Mailman-Developers] [GSoC] Encrypted mailing lists - update v8

2017-07-07 Thread Jan Jancar
Hi all! https://neuromancer.sk/article/11 Another update == Just a quick update about the state of the project before I disappear from civilization for this weekend. Pluggable workflows --- https://gitlab.com/mailman/mailman/merge_requests/299 I have now finally

Re: [Mailman-Developers] [GSoC] Encrypted mailing lists

2017-07-14 Thread Jan Jancar
Hi all! Checking in with progress around the halfway point of the GSoC 2017 timeline. https://neuromancer.sk/article/12 == The point of no return == This week is around the halfway of GSoC 2017 project timeline, hence the title. Key management

Re: [Mailman-Developers] [GSoC] Encrypted mailing lists - update v10

2017-07-20 Thread Jan Jancar
Hi all! Another week, another project update. https://neuromancer.sk/article/13 Post title goes here Signature hash tracking --- It would be relatively easy to replay a signed message to a mailing list by a user as no kind of

Re: [Mailman-Developers] Click CLI branch

2017-07-20 Thread Jan Jancar
On 07/20/2017 10:56 PM, Barry Warsaw wrote: > Just a quick note to mention that my big branch to adopt click for command > line option parsing should now be done. > > https://gitlab.com/mailman/mailman/merge_requests/292 > > This will close #319 and #346 and make adding new `mailman`

Re: [Mailman-Developers] [GSoC] Encrypted mailing lists - first evaluation

2017-06-28 Thread Jan Jancar
Hi all. https://neuromancer.sk/article/9 The first evaluation period is here, I have already sent in my evaluation so I thought I would recap the state of the project. During the first two weeks or so, I mostly focused on features in Mailman Core that would be necessary for making a plugin like

Re: [Mailman-Developers] [GSoC] Encrypted mailing lists - update v11

2017-08-04 Thread Jan Jancar
Hi all! Another week, another update. https://neuromancer.sk/article/15 GSoC 2017 - Progress This week was tough but productive. Temperatures spiking to 34°C in my hometown have a really bad effect on my daily productivity. Setup instance with PGP

Re: [Mailman-Developers] Mailman3 integration

2017-08-01 Thread Jan Jancar
On 08/01/2017 04:22 PM, Nouha ouerheni wrote: > Hello Team , > > I configured mailman suite following this guide > http://docs.mailman3.org/en/latest/devsetup.html and now I want to > configure MySQL and postfix . I will appreciated if there are some > documents to provide to cotinue the

Re: [Mailman-Developers] [GSoC] Encrypted mailing lists - update v12

2017-08-09 Thread Jan Jancar
Hi all! https://neuromancer.sk/article/16 == Web UI integration == This post is about my current plans on how to implement the web ui part of PGP enabled Mailman. It strives to integrate into the Mailman Suite and use its features to the maximum possible degree.

Re: [Mailman-Developers] [GSoC] Encrypted mailing lists - second evaluation

2017-07-25 Thread Jan Jancar
Hi all! https://neuromancer.sk/article/14 = Second evaluation = The second evaluation period came quite fast after the first one, nonetheless the project advanced much further so quick recap of its current state is in order. Since first evaluation

[Mailman-Developers] [GSoC] Encrypted mailing lists

2017-05-10 Thread Jan Jancar
Hi Mailman Developers. I am sending this mail as my proposal of encrypted mailing lists for GNU Mailman got accepted and I will be working on it this summer. Sorry about not contacting you earlier, I had some issues where my site and mail server were down. If any of you tried to reach me and

Re: [Mailman-Developers] [GSoC] Encrypted mailing lists

2017-05-16 Thread Jan Jancar
Hey Abhilash! On 05/14/2017 08:18 AM, Abhilash Raj wrote: >> - As it was proposed on this list a plugin-like implementation of >> encrypted mailing lists is really the only way to go forward here, >> as just pushing in what might end up being a rather niche feature >> into Mailman Core is not

Re: [Mailman-Developers] [GSoC] Encrypted mailing lists - update v5

2017-06-12 Thread Jan Jancar
Hi all. Sending an update here along with a new blog post. https://neuromancer.sk/article/6 == GSoC 2017 - About the plugin == As last time I described outstanding PRs to Mailman Core and other Mailman's components, this time I am going

Re: [Mailman-Developers] [GSoC] Encrypted mailing lists - update v6 + questions

2017-06-20 Thread Jan Jancar
Hi all. This update goes with my latest blog post about finding a good PGP python library: https://neuromancer.sk/article/7 (!the blog posts content is not equal to this post!) Along with that I also implemented list keypair generation in the mailman_pgp plugin. It is configurable (key type,

Re: [Mailman-Developers] [GSoC] Encrypted mailing lists - update v7

2017-06-23 Thread Jan Jancar
Hi all! Another blog post is up. Copy follows for discussion. https://neuromancer.sk/article/8 PGP handling progress = This week things moved along with the mailman-pgp plugin. As I finally had a good PGP library to work with as well as some basic plugin API patches

Re: [Mailman-Developers] [GSoC] Encrypted mailing lists - update v2

2017-05-22 Thread Jan Jancar
Hi all. This is my second update, sketching out the plugin details and issues that came up while working. https://neuromancer.sk/article/3 # PGPMailman plugin ## Structure * pgpmailman - A Core plugin. - styles - Both styles generate a list keypair based on plugin settings on

Re: [Mailman-Developers] [GSoC] Encrypted mailing lists

2017-05-20 Thread Jan Jancar
Hi all. Currently still looking into what changes will be necessary in core in order to cleanly implement encrypted mailing lists as a plugin, so this is my second status report. I will start doing these pretty much weekly now, and definitely weekly/ more frequent when the coding period starts.

Re: [Mailman-Developers] [GSoC] Encrypted mailing lists

2017-05-22 Thread Jan Jancar
On 05/22/2017 07:53 PM, Stephen J. Turnbull wrote: > Hi Jan! > > Congratulations on being selected! Thanks! Very happy to be selected. > > Note that Mailman is a PSF suborg, so you have to comply with PSF > reporting standards. I'll get back to you if you need to do anything > more. The only

Re: [Mailman-Developers] [GSoC] Encrypted mailing lists - update v3

2017-05-28 Thread Jan Jancar
Hi all. I have created a repository to keep the original proposal for this project, as well as the current working version and similar documentation / specs at: https://gitlab.com/J08nY/pgpmailman-proposal The repo contains up-to-date changes I propose to Mailman core to accommodate an

Re: [Mailman-Developers] Breaking mailmanclient into seperate modules

2017-06-07 Thread Jan Jancar
On 06/08/2017 12:18 AM, Abhilash Raj wrote: > One thing that I wanted to announce before I start is breaking up > mailmanclient > from one giant module (src/mailmanclient/_client.py) to seperate class > based > modules. The current setup works but is huge (1300+ LOC) and that is ok > for now, >

Re: [Mailman-Developers] [GSoC] Encrypted mailing lists - update v4

2017-06-07 Thread Jan Jancar
Hi all, ad the first ~week of the GSoC period passes I am reporting the current state of my work, comments appreciated! See below or at: https://neuromancer.sk/article/5 = GSoC 2017 - About a week in = This week has been quite

Re: [Mailman-Developers] [GSoC] Encrypted mailing lists - update v4

2017-06-10 Thread Jan Jancar
Mailman overall, and how > clearly you've described them. I'm not sure I could have come up with > anything better! That's great to hear! Thank you and best of luck at your new job. > > I have just a few questions, though we can hash out specifics on the MRs. > > On Jun 08, 20

Re: [Mailman-Developers] [GSoC] Encrypted mailing lists - final evaluation

2017-08-29 Thread Jan Jancar
Hi all. https://neuromancer.sk/article/18 = Final work submission = As the GSoC 2017 final evaluation period just ended, my final work product is finally submitted. This post is a summary of my final work product. Mailman-pgp === -

Re: [Mailman-Developers] opportunistically encrypted mailman lists with Autocrypt

2018-01-31 Thread Jan Jancar
Hi all! On 01/25/2018 12:21 PM, holger krekel wrote: > Indeed, i guess a plugin should get us >90% there. Here are my > current technical considerations in a quick list: > > - Autocrypt L1 specifies how to generate an Autocrypt key, transfer and > parse public keys and settings through

Re: [Mailman-Developers] opportunistically encrypted mailman lists with Autocrypt

2018-01-31 Thread Jan Jancar
>> If you would like to use a Python OpenPGP implementation you could look >> at [PGPy] and how I used it in mailman-pgp. > > It's under consideration here: https://github.com/hpk42/muacrypt/issues/32 > Are your experiences with pgpy indicating it's compatible with > enigmail and k9-mail? (see