Data Being Saved?

[ghost]

It's quite possible that I missed something while looking at the code, but it looks like message data (to, from, encrypted message) are being saved by the server. Is that correct?

[wiegelmann]

Thanks for review. Message will be deleted after successful transfer https://github.com/encrypt-to/encrypt.to/blob/master/app/mailers/message_mailer.rb#L21-L26

[ghost]

As important as privacy is for an application like this, I would strongly recommend that this be changed to persist as little information as possible - even temporarily.

The application can be made to function without saving any of this, that would be the best situation for end users.