Re: [notmuch] indexing encrypted messages (was: OpenPGP support)

diff --git a/08/2a2e7c2d2b2437907cdc8b8ebd1799df9724a6 b/08/2a2e7c2d2b2437907cdc8b8ebd1799df9724a6
new file mode 100644 (file)
index 0000000..e5256da
--- /dev/null
+++ b/08/2a2e7c2d2b2437907cdc8b8ebd1799df9724a6
@@ -0,0 +1,97 @@
+Return-Path: <madduck@lapse.rw.madduck.net>\r
+X-Original-To: notmuch@notmuchmail.org\r
+Delivered-To: notmuch@notmuchmail.org\r
+Received: from localhost (localhost [127.0.0.1])\r
+       by olra.theworths.org (Postfix) with ESMTP id 016F8431FBC\r
+       for <notmuch@notmuchmail.org>; Fri,  8 Jan 2010 01:12:29 -0800 (PST)\r
+X-Virus-Scanned: Debian amavisd-new at olra.theworths.org\r
+Received: from olra.theworths.org ([127.0.0.1])\r
+       by localhost (olra.theworths.org [127.0.0.1]) (amavisd-new, port 10024)\r
+       with ESMTP id YS7oqXomtHnc for <notmuch@notmuchmail.org>;\r
+       Fri,  8 Jan 2010 01:12:27 -0800 (PST)\r
+Received: from clegg.madduck.net (clegg.madduck.net [193.242.105.96])\r
+       by olra.theworths.org (Postfix) with ESMTP id E9971431FAE\r
+       for <notmuch@notmuchmail.org>; Fri,  8 Jan 2010 01:12:26 -0800 (PST)\r
+Received: from lapse.rw.madduck.net (lapse.nz.madduck.net\r
+       [IPv6:2001:4428:234::1])\r
+       (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))\r
+       (Client CN "lapse.rw.madduck.net",\r
+       Issuer "CAcert Class 3 Root" (verified OK))\r
+       by clegg.madduck.net (postfix) with ESMTPS id ED13E1D4097;\r
+       Fri,  8 Jan 2010 10:12:18 +0100 (CET)\r
+Received: by lapse.rw.madduck.net (Postfix, from userid 1000)\r
+       id 81718809C; Fri,  8 Jan 2010 22:12:16 +1300 (NZDT)\r
+Date: Fri, 8 Jan 2010 22:12:16 +1300\r
+From: martin f krafft <madduck@madduck.net>\r
+To: Mike Hommey <mh+notmuch@glandium.org>\r
+Message-ID: <20100108091216.GC735@lapse.rw.madduck.net>\r
+Mail-Followup-To: Mike Hommey <mh+notmuch@glandium.org>,\r
+       notmuch@notmuchmail.org\r
+References: <20091123130009.GA31695@finestructure.net>\r
+       <20091126060132.GA5875@finestructure.net>\r
+       <20100108025610.GA28357@lapse.rw.madduck.net>\r
+       <20100108080946.GB26839@glandium.org>\r
+MIME-Version: 1.0\r
+Content-Type: multipart/signed; micalg=pgp-ripemd160;\r
+       protocol="application/pgp-signature"; boundary="HG+GLK89HZ1zG0kk"\r
+Content-Disposition: inline\r
+In-Reply-To: <20100108080946.GB26839@glandium.org>\r
+X-Motto: Keep the good times rollin'\r
+X-OS: Debian GNU/Linux squeeze/sid kernel 2.6.32-trunk-686 i686\r
+X-Spamtrap: madduck.bogus@madduck.net\r
+X-Subliminal-Message: debian/rules!\r
+User-Agent: Mutt/1.5.20 (2009-06-14)\r
+X-Virus-Scanned: clamav-milter 0.95.3 at clegg\r
+X-Virus-Status: Clean\r
+Cc: notmuch@notmuchmail.org\r
+Subject: Re: [notmuch] indexing encrypted messages (was:  OpenPGP support)\r
+X-BeenThere: notmuch@notmuchmail.org\r
+X-Mailman-Version: 2.1.13\r
+Precedence: list\r
+List-Id: "Use and development of the notmuch mail system."\r
+       <notmuch.notmuchmail.org>\r
+List-Unsubscribe: <http://notmuchmail.org/mailman/options/notmuch>,\r
+       <mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>\r
+List-Archive: <http://notmuchmail.org/pipermail/notmuch>\r
+List-Post: <mailto:notmuch@notmuchmail.org>\r
+List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>\r
+List-Subscribe: <http://notmuchmail.org/mailman/listinfo/notmuch>,\r
+       <mailto:notmuch-request@notmuchmail.org?subject=subscribe>\r
+X-List-Received-Date: Fri, 08 Jan 2010 09:12:29 -0000\r
+\r
+\r
+--HG+GLK89HZ1zG0kk\r
+Content-Type: text/plain; charset=us-ascii\r
+Content-Disposition: inline\r
+Content-Transfer-Encoding: quoted-printable\r
+\r
+also sprach Mike Hommey <mh+notmuch@glandium.org> [2010.01.08.2109 +1300]:\r
+> That may leak decrypted form in the xapian index, though in\r
+> a split manner. But that'd still be a problem IMHO.\r
+\r
+Not for me, since the index is stored on encrypted media. Thus, this\r
+should be off-by-default, but possible.\r
+\r
+--=20\r
+martin | http://madduck.net/ | http://two.sentenc.es/\r
+=20\r
+"academia is really just a way to help those with high volumes of\r
+ nothing to say to social status."\r
+                             -- myself on #debian-devel, 01 Feb 2007\r
+=20\r
+spamtraps: madduck.bogus@madduck.net\r
+\r
+--HG+GLK89HZ1zG0kk\r
+Content-Type: application/pgp-signature; name="digital_signature_gpg.asc"\r
+Content-Description: Digital signature (see http://martin-krafft.net/gpg/)\r
+Content-Disposition: inline\r
+\r
+-----BEGIN PGP SIGNATURE-----\r
+Version: GnuPG v1.4.10 (GNU/Linux)\r
+\r
+iEYEAREDAAYFAktG9vAACgkQIgvIgzMMSnXGQACgv2JYJEXMcHBPnMB7ztTd4W+Y\r
+Lz4AoKlrKmw30cL6HfPIwjB1ueDD67gP\r
+=EtfG\r
+-----END PGP SIGNATURE-----\r
+\r
+--HG+GLK89HZ1zG0kk--\r