#Gnu privacy guard review verification#
#Gnu privacy guard review password#

create a standalone library (which can be reused by the extensions consuming the GPG keys) for one more level of wrapping, either around the PECL library or the command-line gpg tool directly.For Wikimedia it would need to be recompiled with HHVM though. The Debian package was last updated in 2013, but it's supposed to use GPGME which in turn is a wrapper that makes calls to the gpg executable, so the version of the PECL library should not matter that much. figure out whether the PECL gnupg library is usable.

#Gnu privacy guard review verification#

(Some further ideas that are not in scope for the MVP: expose the key via API, allow setting up a sitewide key and use that to sign, refactor email handling so there is an appropriately high-level hook that all mails got thtough (so we can encrypt non-Echo system mails), do the encryption on client side, do not double-encrypt already encrypted messages, send a test email with a verification link and only enable if the user could click on it (Facebook does this, and it seems like a good idea to prevent accidents), detailed documentation about setting up email clients or using Mailvelope-style extensions, keyserver support, keybase.io integration.) Implementation plan:

encrypt user->user mails and Echo mails.

add a checkbox to enable/disable encryption.

verify that the key is valid and not a private key.

provide basic instructions, probably by linking to something like (1) (2) (3).

handle a single GPG key by providing a text box in user preferences where the user can paste their key.

Also important for private wikis, especially if something like T90067 gets implemented, but page names might be considered private information as well.

Echo notifications - not sure they are used for anything right now that's particularly private, but they might in the future.

#Gnu privacy guard review password#

system notfications (for password reset links this provides some added security against a powerful opponent for watchlist notifications it improves privacy).messages from other users via Special:Emailuser (probably the highest value).There are several features that could benefit: (See recent Facebook announcement of a similar feature.) The user should be able to provide a GPG public key and MediaWiki would encrypt the email with that key, and possibly sign it with some key that belongs to the operator, to prove that the email indeed originated from the wiki. There should be a way to encrypt emails sent by MediaWiki.