467558 - easier to use encryption features

Status: UNCONFIRMED

(Thunderbird :: Security, enhancement)

Description

[Dan H]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.4) Gecko/2008102920 Firefox/3.0.4
Build Identifier: 2.all

I am required to use encryption for email on my job.

Half the time when I reply, I have SOME of the recipients certs, and am missing SOME.  This creates a huge raft of tedious steps.  Namely:

PROBLEM #1:
- going to the "message security" dialog, see who I don't have a cert for
- closing that dialog, manually deleting those email addresses
- if the list is long, this might take several go-rounds to remove all... plus I might accidentally delete a recipient that I DO have a cert for

FIX #1: 
- give me a one-click way on the "message security" dialog to "remove all recipients for which I have no cert"

PROBLEM #2:
- now I have to remember who I deleted (for no cert) and send them a "please send me a signed email so I have your cert next time" message

FIX #2:
- update FIX #1 to do this: "remove all recipients for which I have no cert from THIS encrypted message" but also "and put all those recipients for which I have no cert" in to a NEW message with boilerplate text, that says "please send me a signed email so I have your cert next time".

PROBLEM #3:
- then as they send me their certs, I have to remember -- somehow -- that they need that specific message

FIX #3:
- keep a list -- per outstanding "please send me your cert" recipients of the messages that I intended to send... and PROMPT ME to send the messages originally intended for them under encryption when i DO receive that person's cert.

PROBLEM #4:
- so now NONE of the original recipients truly has the complete "to" list as I would have... 

FIX #4:
- for all stages of this "partial email trail", leave the mail BODY To/CC headers "intact", as if all recipients were receiving the encrypted message (so that when someone DOES received it they know who was SUPPOSED to get it... and will not be dropped from the thread just because I personally didn't have their cert), but allow the SMTP "sumbit mail" only address the mail to those for whom them message is properly encrypted....


Wow... sorry that is a mouthful.  But it drives me CRAZY every time I have to do this... which is a few emails per week.

Thanks for considering this!



Reproducible: Always

Steps to Reproduce:
See "details".
Actual Results:  
See "details".

Expected Results:  
See "details".

See "details".