taskGNU Herds - Free Software Association - Tasks: task #8273, [Security]: encrypt emails when it...

 
 

You are not allowed to post comments on this tracker with your current authentification level.

task #8273: [Security]: encrypt emails when it is possible

Submitted by:  Davi Leal <davi>
Submitted on:  Sat 14 Jun 2008 09:29:40 AM UTC  
 
Should Start On: Sat 14 Jun 2008 12:00:00 AM UTCShould be Finished on: Sun 14 Jun 2009 12:00:00 AM UTC
Category: SecurityPriority: 5 - Normal
Status: NonePrivacy: Public
Percent Complete: 0%Assigned to: -Deleted Account- <nicalvaro>
Open/Closed: OpenEffort: 0.00

Mon 18 May 2009 05:11:00 AM UTC, comment #3:

I am attaching an updated version of what I did mostly for the encryption topic. You should be able to do this provided you have the gnupg php extension installed. You do not need to place these scripts in the gnuherds app. I created a separate folder and apache configuration file for my testing.

Process goes ->
Download all 4 new files attached.
Set up your configuration on the server side, including the www-data public key.
Create your gpg public keys.
Upload it using newgpgkey.html . Send it.
You will see a 40 character fingerprint key. Copy that and paste to replace the fingerprint in $finger in retrieve_encryptedtest.php.
Run and retrieve the Hello World message from retrieve_encryptedtest.php

Walla. That is encryption.

(file #18159, file #18160)

-Deleted Account- <nicalvaro>In charge of this item.
Tue 14 Apr 2009 11:35:31 AM UTC, comment #2:

Nicodemo Alvaro wrote:

> Where am I going to find the all messages that are created
> for e-mail that would be necessary to encrypt/sign?


You have to search for all the locations where the "mb_send_mail(...)" function is used, and encrypt the "$body" or "$message" content so that only the destination Email can read it.

The GNU Herds webapp could try to download the public GPG key from the key servers or use what the user has specified in a new fields which should be added to the data base. This last strategy is which I think Savannah is used, that is to say, Savannah keep a field with the public GPG key of the users.

The above function is used at least at:

  • crontabs/raise_Alerts.php
  • Layer-5__DB_operation/Skills.php
  • Layer-5__DB_operation/Entity.php
  • Layer-2__Business_logic/content/forms/Entity_form.php
  • Layer-2__Business_logic/content/forms/Lost_Password_form.php

1) Encrypt so that only the destination email can read it.

2) Sign by an "GNU Herds - Free Software Association
<association@gnuherds.org>" key which we will upload
to the global key servers.

Davi Leal <davi>
Project Administrator
Tue 14 Apr 2009 01:54:33 AM UTC, comment #1:

Where am I going to find the all messages that are created for e-mail that would be necessary to encrypt/sign?

(file #17915, file #17916)

-Deleted Account- <nicalvaro>In charge of this item.
Sat 14 Jun 2008 09:29:40 AM UTC, original submission:
Davi Leal <davi>
Project Administrator

 

Attached Files
file #18161:  newgpgkey.html added by nicalvaro (326B - text/html)
file #18162:  retrieve_encryptedtest.php added by nicalvaro (678B - application/x-httpd-php)
file #18159:  Cryptography.php added by nicalvaro (3kB - application/x-httpd-php)
file #18160:  importcontrol.php added by nicalvaro (519B - application/x-httpd-php)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by nicalvaro (Updated the item)
  • -unavailable- added by davi (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 9 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Mon 18 May 2009 05:11:52 AM UTCnicalvaroAttached File-=>Added newgpgkey.html, #18161
      Attached File-=>Added retrieve_encryptedtest.php, #18162
    Mon 18 May 2009 05:11:00 AM UTCnicalvaroAttached File-=>Added Cryptography.php, #18159
      Attached File-=>Added importcontrol.php, #18160
    Mon 18 May 2009 05:01:44 AM UTCnicalvaroAttached File#17916=>Removed
    Mon 18 May 2009 05:01:27 AM UTCnicalvaroAttached File#17915=>Removed
    Tue 14 Apr 2009 01:54:33 AM UTCnicalvaroAttached File-=>Added encrypttest-class.php, #17915
      Attached File-=>Added sample-gpg-tests.php, #17916
    Fri 13 Mar 2009 06:47:13 PM UTCdaviAssigned toNone=>nicalvaro

    Back to the top


    Powered by Savane 3.1-cleanup