From mboxrd@z Thu Jan  1 00:00:00 1970
From: magnus@therning.org (Magnus Therning)
Date: Thu, 06 Sep 2007 08:02:27 +0100
Subject: [sup-talk] on sup
In-Reply-To: <1189005324-sup-9685@south>
References: <1188557360-sup-7369@bryma> <1188573751-sup-6067@south>
	<20070831171234.GD8312@die.therning.org>
	<1188773706-sup-1502@south> <1188977552-sup-60@tatooine>
	<1189005324-sup-9685@south>
Message-ID: <1189061510-sup-5845@tatooine>

Excerpts from William Morgan's message of Wed Sep 05 16:27:14 +0100 2007:
> Excerpts from Magnus Therning's message of Wed Sep 05 00:48:03 -0700 2007:
> > After thinking a little about this I think it's the receiving of
> > encrypted/signed emails that's cumbersome to deal with at the
> > moment.  If I'm not completely daft it seems like sending is
> > infinitely flexible through the hooks system.
> 
> The hooks would be an option, but I'm actually planning to stick it in
> the code directly. What I'm thinking is that decoding will just hide
> the attachment and display a little message at the top of the message
> saying "signature verified", or a big nasty message if not. For
> encoding, I would like to have some nice way of choosing
> sign/sign&encrypt/nothing on a per-message basis, but I'm not sure
> what the best UI for that is. I was originally thinking something like
> the reply-mode options, but then how would the two interact? I could
> also make each option correspond to various keyboard combinations, but
> that seems a little obtuse. I don't really like the mutt-style prompt
> at the bottom on the screen (the "minibuffer", as I style it).

Yes, the UI will be hard to get right on this.  What about adding an
extra screen with extra options for sending (encryption/signing might
only be one set of options that are needed).  That would push the
problem to being one of making sure that good, fairly powerful default
behaviours are in place.  These are the default behaviours I'd like to
see:

 - Don't sign, don't encrypt
 - Sign all out-going messages, don't encrypt
 - Sign all replies to signed messages, don't encrypt
 - Sign all replies to signed messages, encrypt replies to encrypted
   messages
 - Sign all out-going messages, encrypt all messages to recipients with
   a known public key

I hope that covers more usage so that visiting that extra screen won't
be necessary in most cases.

Making sure that it all works on emails with multiple recipients
shouldn't be too difficult.  (Signing isn't a problem, and encryption
only happens if _all_ recipients have a known public key.)

-- 
Magnus Therning                             (OpenPGP: 0xAB4DFBA4)
magnus?therning?org             Jabber: magnus?therning?gmail?com
http://therning.org/magnus

What if I don't want to obey the laws? Do they throw me in jail with
the other bad monads?
     -- Daveman