Return-Path: X-Original-To: notmuch@notmuchmail.org Delivered-To: notmuch@notmuchmail.org Received: from localhost (localhost [127.0.0.1]) by arlo.cworth.org (Postfix) with ESMTP id A4E686DE0B26 for ; Sun, 16 Aug 2015 10:41:49 -0700 (PDT) X-Virus-Scanned: Debian amavisd-new at cworth.org X-Spam-Flag: NO X-Spam-Score: 0.128 X-Spam-Level: X-Spam-Status: No, score=0.128 tagged_above=-999 required=5 tests=[AWL=0.118, T_HEADER_FROM_DIFFERENT_DOMAINS=0.01] autolearn=disabled Received: from arlo.cworth.org ([127.0.0.1]) by localhost (arlo.cworth.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Rr-i3il7wT7v for ; Sun, 16 Aug 2015 10:41:47 -0700 (PDT) Received: from gitolite.debian.net (gitolite.debian.net [87.98.215.224]) by arlo.cworth.org (Postfix) with ESMTPS id 730936DE01D3 for ; Sun, 16 Aug 2015 10:41:46 -0700 (PDT) Received: from remotemail by gitolite.debian.net with local (Exim 4.80) (envelope-from ) id 1ZR1w2-0003bh-6P for notmuch@notmuchmail.org; Sun, 16 Aug 2015 17:41:30 +0000 Received: (nullmailer pid 26279 invoked by uid 1000); Sun, 16 Aug 2015 17:41:19 -0000 From: David Bremner To: notmuch@notmuchmail.org Subject: Date: Sun, 16 Aug 2015 19:41:08 +0200 Message-Id: <1439746876-23654-1-git-send-email-david@tethera.net> X-Mailer: git-send-email 2.5.0 In-Reply-To: <54CA467B.30408@gnome.org> References: <54CA467B.30408@gnome.org> X-BeenThere: notmuch@notmuchmail.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Use and development of the notmuch mail system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 16 Aug 2015 17:41:49 -0000 It turns out S/MIME encryption requires non-trivial additional code in libgmime. There is no reason to wait for that to support signtures (via emacs+openssl|epg), and verification (via notmuch-cli). Here we also test encryption, relying on emacs message-mode facilities. (At least) two things could be improved here: - we are using some unholy mix of openssl and gpgsm, and it would probably be best to get everything working with gpgsm, since we are already working with gpg and gpg-agent. - It should be possible to do S/MIME decryption on the emacs level using e.g. smime-decrype-region. On the other hand, it seems like supporting signature verification is a step forward.