195940 - automatically encrypt mail if certificates for all mail

Status: RESOLVED DUPLICATE of bug 135636

(MailNews Core :: Security: S/MIME, enhancement)

Description

[Tobias]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4a) Gecko/20030302
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4a) Gecko/20030302

in the mail accounts security settings, you can either enable encryption for
all emails or disable it and chosse to encrypt emails manually. I would love a
third option such as "automatically encrypt mail if certificates for all mail
receipients are available". Helpful would be an additional signal in the new
message windows if this option would then encrypt the mail.

Reproducible: Always

Steps to Reproduce:

Comment 1

[Matthias Versen [:Matti]]

-> PSM

Comment 2

[Christian :Biesinger (don't email me, ping me on IRC)]

*** Bug 219929 has been marked as a duplicate of this bug. ***

Comment 3

[Nelson Bolyard (seldom reads bugmail)]

*** Bug 204387 has been marked as a duplicate of this bug. ***

Comment 4

[TT]

I'm also in favor of adding this feature.  It would be really cool.  However, I
there are some problems if the email is sent to multiple addresses.  For
instance, say an email is being sent to three people.  It wouldn't be possible
to send one email to everyone at once, because each recipient would need to have
his email encrypted with only his public key.  Mozilla would then need to send
the email out to each person separately, but that means that each recipient
would see only his name in the To: line.  He could not do a "reply-to-all".

Also, if not all of the recipients had public keys, then in addition to the
above problem, the email would be sent encrypted to some people and unencrypted
to the others.

Both of these cases would need to be addressed, preferably with options in the
preferences panel.

Comment 5

[Stephane Saux]

regarding comment #4.
S/MIME is well equipped to encrypt mail to several people at once. Each
recipient info contains the symmetric key used to encrypt the body of the email
wrapped in the that recipient public key. That address the first part of the
comment.

The second concert (sending some encrypted and some non-encrypted) doesn't
apply. This bug only requests that the mail be automatically encrypted a valid
cert for each recipient is available. Again we only send one copy of the email,
and it would either be encrypted or not (XOR).

As an aside, sending multiple copies, some encrypted, some not would be a
serious security flaw. If would give recipients of the encrypted version a false
sense that the content of the email couldn't be seen by people not on the
recipient list.

Comment 6

[John G. Myers]

Confirming as well specified feature request.

Comment 7

[John G. Myers]

..but then again, it's a dup.


*** This bug has been marked as a duplicate of 135636 ***