Reject unencrypted incoming mail #538
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
hpk42
changed the title
hpk42
force-pushed
the
hpk/reject_unencrypted
branch
from
2de1aa7 to
1a17469
Compare
link2xt
reviewed
Mar 29, 2025
…ept incoming cleartext file if the enforceE2EE file is missing
hpk42
force-pushed
the
hpk/reject_unencrypted
branch
from
1a17469 to
c3d8de1
Compare
Co-authored-by: l <link2xt@testrun.org>
hpk42
force-pushed
the
hpk/reject_unencrypted
branch
from
b22f35b to
13c49f8
Compare
hpk42
force-pushed
the
hpk/reject_unencrypted
branch
from
923e098 to
606c615
Compare
link2xt
reviewed
Mar 30, 2025
adbenitez
reviewed
Mar 31, 2025
adbenitez
reviewed
Mar 31, 2025
Contributor
|
it seems to be missing some explanation/docs about how to use the |
adbenitez
approved these changes
Mar 31, 2025
Contributor
Author
added a section in the README 4b0d7a0 -- (and removed the wrong "inclear" left-overs in the previous commit) |
missytake
approved these changes
Mar 31, 2025
Contributor
missytake
left a comment
missytake
left a comment
There was a problem hiding this comment.
Looks reasonable, all in all :)
missytake
reviewed
Apr 1, 2025
link2xt
reviewed
Apr 1, 2025
Co-authored-by: missytake <missytake@systemli.org>
Co-authored-by: l <link2xt@testrun.org>
Co-authored-by: l <link2xt@testrun.org>
link2xt
approved these changes
Apr 1, 2025
hpk42
force-pushed
the
hpk/reject_unencrypted
branch
from
3b974a2 to
918d3e8
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
this PR produces the following changed behaviour
new chatmail addresses are created with an
enforceE2EEfile in the dovecot address dirincoming mails (port 25) are now invoking a second filtermail before-queue handler that enforces E2EE encryption if
enforceE2EEexists for recipientsBecause the
enforceE2EEfile is kept in the user mailbox directory, filtermail needs to run with permission to read from it, and this PR makes the two filtermail services (for incoming and outgoing) run as "vmail" user, similar as with "doveauth" which also needs write/read access to thepasswordfile in the mailbox directory.