To: Jameson Graef Rollins <jrollins@finestructure.net>,
	Notmuch Mail <notmuch@notmuchmail.org>
Subject: Re: Emacs: Crypto: How to get automatic encryption?
In-Reply-To: <878vkv7k2q.fsf@servo.finestructure.net>
References: <87pqejj5nl.fsf@marcos.anarcat.ath.cx>
	<cunfwfer8i0.fsf@hotblack-desiato.hh.sledj.net>
	<87ehuo7pjr.fsf@algae.riseup.net>
	<87ehuoljzs.fsf@servo.finestructure.net>
	<cunvco0nvwa.fsf@hotblack-desiato.hh.sledj.net>
	<87liow6slg.fsf@servo.finestructure.net>
	<cund3a8nkwl.fsf@hotblack-desiato.hh.sledj.net>
	<878vkv7k2q.fsf@servo.finestructure.net>
User-Agent: Notmuch/0.11+114~g550724b (http://notmuchmail.org) Emacs/24.0.92.1
	(x86_64-pc-linux-gnu)
From: David Edmondson <dme@dme.org>
Date: Thu, 26 Jan 2012 08:53:20 +0000
Message-ID: <cunk44elu9r.fsf@hotblack-desiato.hh.sledj.net>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
	micalg=pgp-sha1; protocol="application/pgp-signature"
Precedence: list

--=-=-=
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Wed, 25 Jan 2012 09:45:01 -0800, Jameson Graef Rollins <jrollins@finestr=
ucture.net> wrote:
> On Wed, 25 Jan 2012 10:20:26 +0000, David Edmondson <dme@dme.org> wrote:
> > Isn't it still necessary to ensure that you have encryption keys
> > appropriate to the recipient?
>=20
> I want to ensure that all replies to encrypted to be encrypted.  I
> would rather have the reply fail outright than fall back to
> unencrypted.

That's a policy decision that a user can (and perhaps should) take, but
not something that should be enforced by the tool. Encouraging this
approach is fine, of course. I can think of various situations where I
might send an un-encrypted reply to an encrypted message.

> Here's a behavior that I think would be reasonable:
>=20
>  * notmuch reply outputs JSON encrypted flag
>=20
>  * emacs does a quick check to see if the needed key is available
>=20
>  * if key not available: give a nice mini-buffer prompt, something like:
>=20=20
>     'encryption key for "Foo Bar <foo@bar.com>" not found.  Retrieve?'
>=20
>    * if response is yes: call gpg to retrieve the key
>=20
>  * if key available: add encrypt flag
>=20
>    else: I feel like this should abort, but maybe there's something to
>          be done here.  Allow reply but don't quote the original?

How about:
    - notmuch reply outputs JSON encrypted flag,
    - emacs inserts the relevant mml to request that the reply is sent
      encrypted if the flag is present.

With this approach the default behaviour is to send an encrypted reply
to an encrypted message, but the user has the chance to change the
behaviour using familiar (well, as familiar as mml can be) tools.

Adding improvements to retrieve keys for outgoing messages would be
generally useful - it's not just an issue for replies.

--=-=-=
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk8hFIAACgkQaezQq/BJZRYmVwCfTcVgXyz+yXySlEZphtOXaxfy
vbgAn3LrogNQVa8HEtsFAOjN+oDtnBiU
=P3tD
-----END PGP SIGNATURE-----
--=-=-=--