Changes between Version 2 and Version 3 of PluginRepository/Encryption

Timestamp:

Jul 30, 2009 10:14:21 PM (4 years ago)

Author:

dan

Comment:

+storage api, global options

PluginRepository/Encryption

@@ -1 +1 @@
 == Encryption ==
 
-'''on this page thoughts about the development of an encrpytion plugin will be shared.'''
+'''on this page thoughts about the development of an encryption plugin will be shared.'''
 
 quick brainstorming (jonas):
 see [http://lists.roundcube.net/mail-archive/dev/2009-07/0000143.html RoundCube-Dev Thread] for discussion on the mailinglist.
-
 
  * add some abstraction layer to support several implementations of gnupg key management
@@ -28 +27 @@
    * list_priv_keys(): list all private keys
    * gen_priv_key(): generate new private key
+   * get_key(email/keyid): get a new public key
  * for mail layer:
    * decrypt inline encrypted mails
@@ -36 +36 @@
    * encrypt and/or sign outgoing mails inline
 
+ * storage interface(?): Interface to keys implemented by drivers
+   * encrypt(text,keys)
+   * decrypt(text, passphrase_callback)
+   * sign(text,keys,passphrase_callback)
+   * verify(text)
+
  * for server side storage:
    * create gnupg home directories with pubring.gpg and secring.gpg for every single user
-   * pass $GNUGPGHOME to gnupg/gpgme library according to roundtube user
+   * pass $GNUGPGHOME to gnupg/gpgme library according to roundcube user
    * requirement to give read+write access to webserver user to all gnupg home directories
    * maybe maintain a mysql database with all keys, fingerprints etc to detect manipulated
      key data in the keyrings.
+   * public keys retrieval - ldap, keyserver lookup, database
 
- * additional useful settings/options:
+ * additional useful user settings/options:
    * default private key to sign mails
    * default public key to encrypt mails for in addition to recipient keys (i.e. own key)
@@ -50 +57 @@
    * default for replies to unsigned and unencrypted mails
 
+ * additional useful global settings/options:
+   * backend plugin(s)
+   * ldap servers and query method
+   * keyservers
+   * default public key to encrypt mails for in addition to recipient keys (i.e. escrow)
+
 please extend this design draft with your thoughts ...