Feature request: warn on unsigned messages

Robert Helling's Avatar

Robert Helling

25 Oct, 2017 12:07 PM

It sounds to me as there would be an easy way of making signing mails much more practically useful (in particular against spam/phishing etc): Would it be very hard to show a visible warning when I read an incoming email that is not signed but coming from a sender that has in the past signed her email? (same/alternative for encrypted)?

The argument for it would be similar to certificate pinning for SSL.

  1. Support Staff 1 Posted by Luke Le on 25 Oct, 2017 01:39 PM

    Luke Le's Avatar

    Hi Robert,

    thank you for this feature request.
    Technically it would certainly be possible by storing a list on disk of addresses which have signed messages before and with the fingerprint of keys they used to sign their messages.
    In practice this would probably result in many false positives, especially if you receive messages from mobile users which often don't use PGP on their mobiles.

    We will create a ticket for this feature request and look into the viability.

  2. 2 Posted by Robert Helling on 26 Oct, 2017 09:23 AM

    Robert Helling's Avatar

    I agree with the mobile device problem (I myself don't have my private keys on my phone). But the whole purpose of signing gets lost when the recipient does not notice a missing signature.

    Currently, there is not even a red thingy that catches my attention when a signature is missing where I should expect one whereas the fact that a message is correctly signs which is displayed has much less practical relevance most of the time. But of course, it's all psychology,

  3. Support Staff 3 Posted by Steve on 31 Oct, 2017 02:33 PM

    Steve's Avatar

    We have a ticket for this problem. I connected this discussion with the existing ticket. That means, should this discussion get closed, it will be re-opened as soon as the ticket is closed. That way you'll stay in the loop and get notified as soon as we have news. Feel free to open a new discussions should you run into further problems or need assistance.

  4. Steve closed this discussion on 31 Oct, 2017 02:33 PM.

Comments are currently closed for this discussion. You can start a new one.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac