From: Jameson Graef Rollins <jrollins@finestructure.net>
To: Gregor Zattler <telegraph@gmx.net>, Notmuch Mail <notmuch@notmuchmail.org>
Subject: Re: Emacs: Crypto: How to get automatic encryption?
In-Reply-To: <20120103195651.GA27869@shi.workgroup>
References: <20120103195651.GA27869@shi.workgroup>
User-Agent: Notmuch/0.10.2+138~g0b4049e (http://notmuchmail.org) Emacs/23.3.1
	(x86_64-pc-linux-gnu)
Date: Tue, 03 Jan 2012 13:45:14 -0800
Message-ID: <87fwfw8npx.fsf@servo.finestructure.net>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
	micalg=pgp-sha256; protocol="application/pgp-signature"
Precedence: list

--=-=-=
Content-Transfer-Encoding: quoted-printable

On Tue, 3 Jan 2012 20:56:51 +0100, Gregor Zattler <telegraph@gmx.net> wrote:
> I replied to a PGP/MIME signed and encrypted e-mail and was
> astonished to realise that my reply was sent unencrypted (and
> unsigened for that matter).

Yikes!  Sorry this happened, and I hope nothing too sensitive was
exposed.

Auto signing of outgoing mail can be enabled by the following [0]:

(add-hook 'message-setup-hook mml-secure-message-sign-pgpmime)

You can configure the message-setup-hook with the customization UI as
well.

Unfortunately, auto encrypting of replies to encrypted emails is not yet
implemented.  It is desperately needed, though, obviously.  So this is a
good excuse to start a discussion about how we could achieve this.

It just occurs to me that a way to do this would be to have notmuch
reply add the appropriate mml #secure tag for encryption to the output
reply template, maybe with something like a --emacs option.  That would
be pretty easy to implement, although it would obviously be very UI
specific.

Another possibility would be for notmuch reply to add some sort of
header to the reply message to indicate that the original was encrypted,
and then do something in emacs to try to read that header and add the
appropriate mml #secure tag.  That would also be easy to implement in
the notmuch CLI, and it would be more UI agnostic, but it would require
a lot more elisp.

Or maybe we could support both?

Any other suggestions?

> Actually the message buffer in which I write replies has Auto
> Encryption Mode enabled, but nothing happens.=20=20

That's unfortunate.  Can you explain exactly how you set this up, and
how it didn't work?

> Till now I investigated customisable variables for notmuch,
> message mode, epg but did not find a way to tell Emacs to sign
> and encrypt an e-mail if the correspondent (signed and) and
> encrypted her/his e-mail.=20=20

It's actually usually mml that is used with message-mode to
sign/encrypt message, not epg.

jamie.

--=-=-=
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iQIcBAEBCAAGBQJPA3brAAoJEO00zqvie6q86FcP/1rtuNLl4G8atdsEx9KrF3TJ
blVoSYSfunjDNThu4TuC8qP4cHVhMy9dyhbu9jBJQfI89x8pogJvTFb1cgs+5ZDe
oYi7sDEwvg+2zEzGLRgxZDvv3OSx7KGiUa8Kr6Iv0Kl/cx/3oORxfdAfrVum7ceB
UYkLc/ZmbfXivUufnCeHxqhOTRBY3EYIzuK/5BT92glbB7tq8XCjqUGmTshtAhoq
gpLErF2yJlEjM/vHl1rApLFh6lj9rL2TfJ11fUpEokfeVtgRS6OCiq1ix4fD9JSZ
Pl0hCeNUf/5NH6Fk3p7O1yZjsNOMhVMH3pp3SC7M3rmnBuBGs7ZfDzeRCzSpaoqJ
uWzKbV35sgvrU0Yu2qRbJwkk0bpKsYe7bb/StxzNX+TsI6Nvj0uoF+7DU1OMFow0
KAhyTx1tgzZDAEoOkicD8sctfvAXKGTnueBbEsigdFCioQJFidZpl/88ZqGJzDY2
rHoms2zVsWZCqKyc1nEfx9r5qWCKYT8IaRdc6QU5KLjSail70XMxtW4beXUKk3kD
ZnUqluMTG0lgKganPpmnLLhOQP3KlRleNnuWhBscYgHqIGQsGHBQcy3awoRgxaUR
9LZQpEhkE3nXjB9cggwSCpPDyrDR7FfhSG4kI2KclpEMMYBPBFSQdtac2ws1GdQb
ACpme5AVvm7h4ipcMoF6
=NNhQ
-----END PGP SIGNATURE-----
--=-=-=--