--------------------------------------------------------------------------- This plugin adds support for viewing and sending of signed and/or encrypted messages in PGP (RFC 2440) and PGP/MIME (RFC 3156) format. The plugin uses gpg binary on the server and stores all keys (including private keys of the users) on the server. Encryption/decryption is done server-side. So, this plugin is for users that trust the server. WARNING! The plugin is in very early state. See below for a list of missing features and known bugs/limitations. --------------------------------------------------------------------------- WARNING: Don't use with gnupg-2.x! Implemented features: + PGP: signatures verification + PGP: messages decryption + PGP: Sending of encrypted/signed messages + PGP: keys management UI (keys import and delete) + Handling of PGP keys attached to incoming messages TODO (must have): - Make working with gnupg-2.x - Keys export to file - Disable Reply/Forward options when viewing encrypted messages until they are decrypted successfully - Handling of replying/forwarding of encrypted/signed messages - Client-side keys generation (with OpenPGP.js?) TODO (later): - Handling of big messages with temp files - Server-side keys generation (warning: no-entropy issue, max_execution_time issue) - Key info in contact details page (optional) - Extended key management: - disable, - revoke, - change expiration date, change passphrase, add photo, - manage user IDs - Generate revocation certs - Search filter to see invalid/expired keys - Key server(s) support (search, import, upload, refresh) - Attaching public keys to email - Mark keys as trusted/untrasted, display appropriate message in verify/decrypt status - User-preferences to disable signature verification, decrypting, encrypting or all enigma features - Change attachment icon on messages list for encrypted messages (like vcard_attachment plugin does) - Support for multi-server installations (store keys in sql database?) - Per-Identity settings (including keys/certs) - Performance improvements: - cache decrypted message key id so we can skip decryption if we have no password in session - cache (last or successful only?) sig verification status to not verify on every msg preview (optional) - S/MIME: Certs generation - S/MIME: Certs management - S/MIME: signed messages verification - S/MIME: encrypted messages decryption - S/MIME: Sending signed/encrypted messages - S/MIME: Handling of certs attached to incoming messages - S/MIME: Certificate info in Contacts details page (optional)