From: Mark Walters <markwalters1009@gmail.com>
To: Jeremy Nickurak <not-much@trk.nickurak.ca>,
	Jameson Graef Rollins <jrollins@finestructure.net>
Subject: Re: Feature suggestion. Indexing encrypted mail?
In-Reply-To:
 <CA+eQo_3hUAc3uMWw6Hb2JLBATiBDS96GozCa5jqT_1sWz1Y=hQ@mail.gmail.com>
References: <86k3b3ybo6.fsf@someserver.somewhere>
	<878urj1z3j.fsf@maritornes.cs.unb.ca>
	<87txa7pp8z.fsf@servo.finestructure.net>
	<20140406091516.GG26903@vilya.m0g.net>
	<5341D252.90405@fifthhorseman.net>
	<867g71y327.fsf@someserver.somewhere>
	<87ob0dnndk.fsf@servo.finestructure.net>
	<CA+eQo_3hUAc3uMWw6Hb2JLBATiBDS96GozCa5jqT_1sWz1Y=hQ@mail.gmail.com>
User-Agent: Notmuch/0.15.2+615~g78e3a93 (http://notmuchmail.org) Emacs/23.4.1
	(x86_64-pc-linux-gnu)
Date: Mon, 07 Apr 2014 22:06:13 +0100
Message-ID: <87d2gsonne.fsf@qmul.ac.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Cc: Notmuch Mailing List <notmuch@notmuchmail.org>,
	Daniel Kahn Gillmor <dkg@fifthhorseman.net>,
	Daniel Kahn Gillmor <dkg@debian.org>
Precedence: list


On Mon, 07 Apr 2014, Jeremy Nickurak <not-much@trk.nickurak.ca> wrote:
> Nonetheess, if you can tell from the index that a given message contains
> the words "hotel" "wine" "wife" "secret" and "rendezvous", you can infer a
> *lot* about the contents of encrypted contents of the message.

I think it is worse that that: I think (from what people said on irc
some time ago) that the index contains the word and the position of that
word so essentially the whole message can be reconstructed from the
index.

Best wishes

Mark



>
>
> On Mon, Apr 7, 2014 at 9:57 AM, Jameson Graef Rollins <
> jrollins@finestructure.net> wrote:
>
>> On Mon, Apr 07 2014, john.wyzer@gmx.de wrote:
>> >> confess i haven't been following closely), it wouldn't be much extra
>> >> effort for someone to implement a filter that strips encryption from the
>> >> message.  (this might still have the problem mentioned above about also
>> >> stripping PGP/MIME signatures, but the signatures and the decrypted
>> >> message itself would remain intact so they could be shown directly by
>> >> notmuch show without trouble).
>> >
>> > I don't understand that. :-(
>> > This sounds as if the view of the message is not generated from the
>> > mail storage. Isn't the purpose of the index to find the appropriate
>> > message file and everything else is generated from that file?
>>
>> I think that's exactly what Daniel is saying: what's viewed comes from
>> the message directly, and not from the db.
>>
>> jamie.
>>
>> _______________________________________________
>> notmuch mailing list
>> notmuch@notmuchmail.org
>> http://notmuchmail.org/mailman/listinfo/notmuch
>>
>>
> _______________________________________________
> notmuch mailing list
> notmuch@notmuchmail.org
> http://notmuchmail.org/mailman/listinfo/notmuch