[Mailman-Developers] GSOC Project idea: OpenPGP integration

Stefan Schlott stefan.schlott at ulm.ccc.de
Mon Apr 29 14:12:51 CEST 2013


On 29.04.2013 11:40, Ian Eiloart wrote:

> Also, what kind of secure list would have automated processing of
> message content as a requirement?

imho you're asking the wrong question ;-) _All_ network communication
should be encrypted, it is a pity that mail encryption is so little adopted.


> If a message is gpg encrypted, then
> every sender would require the public keys of every recipient, would
> they not?

No. The idea here that the recipient of a mail sent to a mailing list is
the (trusted) mailman server, thus the only key needed is the mailing
list public key. Mailman has access to its secret key, decrypts the
incoming message and re-encrypts it for each recipient.


Stefan.


More information about the Mailman-Developers mailing list