Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature Request] Add ability to automatically decrypt outgoing messages #599

Closed
Pr0prioceptid opened this issue Feb 21, 2024 · 3 comments
Closed
Projects

Comments

@Pr0prioceptid
Copy link

Hello,
It would be nice if I could encrypt my mail locally with the anonaddy public key before sending and have anonaddy decrypt it for me before it gets to the person I'm trying to send mail to.

This is for when I'd like to hide the contents of my outgoing mail from my email provider, but the person I'm sending to isn't interested in providing their public key.

@willbrowningme willbrowningme added this to In progress in Roadmap Mar 13, 2024
@willbrowningme
Copy link
Member

I have this working and I'm currently beta testing it on addy.io.

Please drop me an email with your username if you'd like to help test it out so that I can add you as a beta tester.

@willbrowningme
Copy link
Member

In order to help beta test this you simply need to encrypt a reply/send to one of your aliases using the no-reply@addy.io public key (fingerprint - 26A987650243B28802524E2F809FD0D502E2F695). You can get the key on https://keys.openpgp.org.

When the message arrives at the addy.io server, it will attempt to decrypt it using the corresponding private key. If it is successful then it will replace the message data with the decrypted contents and send it on to the correct destination.

If you are using Mozilla Thunderbird then you will need to use their pgp alias rules configuration - https://support.mozilla.org/en-US/kb/openpgp-recipient-alias-configuration, this is because by default they do not allow you to encrypt an email using a public key that does not match the receiver's identity.

Here's an example config that you can use for your openpgp_alias_to_keys.json:

{
  "description": "Thunderbird OpenPGP Alias Rules",
  "rules": [
    {
      "domain": "anonaddy.me",
      "keys": [
        {
          "description": "Testing decrypt replies/sends on addy.io",
          "fingerprint": "26A987650243B28802524E2F809FD0D502E2F695"
        }
      ]
    }
  ]
}

This will allow you to encrypt all messages sent to aliases *@anonaddy.me using the no-reply@addy.io public key.

@willbrowningme
Copy link
Member

It will also remove any attached PGP keys (Content-Type: application/pgp-keys) when decrypting the reply/send in order to prevent you accidentally exposing your real email.

@willbrowningme willbrowningme moved this from In progress to Done in Roadmap Mar 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Done
Development

No branches or pull requests

2 participants