News for hackers. Stuff that matters.

A comment on Geary: a beautiful modern open-source email client.

Re:Geary: a beautiful modern open-source email client by dguido on Monday March 25, 2013 @05:10PM (#5439707)
I don't care if it's beautiful, or how it auto-saves drafts, I want an e-mail client designed with security from the start. Everyone seems to be up in arms about privacy these days, but people forget both how much data is available inside their mail spools and the fact that none of it is encrypted. Put S/MIME or PGP support in your roadmap as a first-class feature and I'll be interested in your mail client. Consider a text-only mode and develop with a type-safe language and I'll definitely take a second look.
[ Parent | on HN ]
Re:Geary: a beautiful modern open-source email client by betterunix on Monday March 25, 2013 @06:09PM (#5440040)
Encryption is not the be-all and end-all of security. Here is a good example: your boss sends you a signed, encrypted message that just says, "You're fired!" You send that signed message to the secretary you have a grudge against, encrypted using her public key instead of yours. Now the secretary thinks she is fired too (potentially leading to mayhem within the company). This discusses the issue in depth:

http://world.std.com/~dtd/sign_encrypt/sign_encrypt7.html

PGP and S/MIME do not encrypt the subject line of emails; this is an easy way to leak information. You also do not get encryption of References/In-Reply-To headers, and various other headers that can leak information.

[ Parent | on HN ]
Re:Geary: a beautiful modern open-source email client by mike-cardwell on Monday March 25, 2013 @06:38PM (#5440172)
In PGP and S/MIME, the ciphertext is signed. You don't encrypt a signed message, you sign an encrypted message.

You can't take a signed message that was encrypted with your public key, decrypt it, re-encrypt it with somebody elses public key, and expect it to still appear signed by the original sender when the new recipient decrypts it.

[edit] There are of course serious problems with the lack of header signing/encryption and replay attacks though I agree. Hence why I add a small note at the end of all of the pgp signed comments on my blog: "This signed text was written for https://grepular.com/ only"

[ Parent | on HN ]
Re:Geary: a beautiful modern open-source email client by koenigdavidmj on Monday March 25, 2013 @06:40PM (#5440186)
Don't such systems generally encrypt first and then sign the encrypted text, specifically to avoid this?

Your points about subject lines and other assorted headers are correct.

[ Parent | on HN ]
Re:Geary: a beautiful modern open-source email client by betterunix on Tuesday March 26, 2013 @11:12AM (#5443802)
The link I provided discusses this as well; not only are there other attacks, but those other attacks are potentially more severe. A man-in-the-middle attacker can claim credit for a message by substituting their own signature for the sender's. A naive encrypt-then-sign system will also lack non-repudiation in some cases (e.g. when using RSA signatures and encryption), and will only provide non-repudiation on the ciphertext itself (not the plaintext; this may or may not be what you want).
[ Parent | on HN ]
Re:Geary: a beautiful modern open-source email client by miloshadzic on Monday March 25, 2013 @06:14PM (#5440059)
You're right of course but I think a straightforward way to sign, encrypt and decrypt your email would be a big step forward.
[ Parent | on HN ]
Re:Geary: a beautiful modern open-source email client by dmix on Monday March 25, 2013 @06:24PM (#5440103)
Plus (nearly) all security has trade-offs. The trade offs dont necessarily trump the added benefits of the security.
[ Parent | on HN ]
Re:Geary: a beautiful modern open-source email client by illicium on Monday March 25, 2013 @06:36PM (#5440163)
Sounds like a simple solution would to duplicate the headers in the body and encrypt them along with the message. That way, even if you resend that email, the encrypted To: field would make it obvious that it was meant only for you.
[ Parent | on HN ]
Re:Geary: a beautiful modern open-source email client by miloshadzic on Monday March 25, 2013 @05:35PM (#5439860)
AFAIK Yorba uses Vala which is a native C#-like language.

I do agree with you that PGP and S/MIME would be awesome features but most people using Linux are so frustrated with default apps that I think they wanted to show their focus on the basic workflow.

[ Parent | on HN ]
Re:Geary: a beautiful modern open-source email client by brdrak on Monday March 25, 2013 @07:03PM (#5440300)
> most people using Linux are so frustrated with default apps

I'm Linux user and don't feel frustrated. Am I missing out?

[ Parent | on HN ]
Re:Geary: a beautiful modern open-source email client by skore on Monday March 25, 2013 @07:53PM (#5440481)
I've been wondering that as well. Am I missing out on some premium reserve of frustration? I really gotta try harder to feel disenfranchised.
[ Parent | on HN ]
Re:Geary: a beautiful modern open-source email client by wmf on Monday March 25, 2013 @06:04PM (#5440017)
Letting Johnny encrypt[1] sounds like an interesting topic of research, although IMO research probably shouldn't be bound to any particular product until it's no longer research.

[1] http://static.usenix.org/events/sec99/whitten.html

[ Parent | on HN ]
Re:Geary: a beautiful modern open-source email client by miloshadzic on Monday March 25, 2013 @06:08PM (#5440032)
Not sure if I understand you correctly. Wouldn't an email client with good PGP support help Johnny encrypt?
[ Parent | on HN ]
Re:Geary: a beautiful modern open-source email client by benatkin on Monday March 25, 2013 @06:07PM (#5440024)
Why don't you do some research before posting FUD? The people planning this project built Shotwell, the default photo organizer for Fedora and Ubuntu. Clearly they know what they're doing. http://en.wikipedia.org/wiki/Shotwell_(software)
[ Parent | on HN ]
Re:Geary: a beautiful modern open-source email client by orourkek on Monday March 25, 2013 @07:03PM (#5440299)
I fail to see how them building a photo organizer app has any relevance in his wish for a security minded email application. Sure, the company might know what they're doing, but nowhere in the introduction video did they discuss security - the most talked about points were usability and aesthetics. It seems to me that dguido's comment isn't actually FUD, but rather an observation about their proposal...
[ Parent | on HN ]
Re:Geary: a beautiful modern open-source email client by DanBC on Monday March 25, 2013 @05:15PM (#5439732)
Most email is sent as unencrypted text over the Internet.

Secure email is not possible unless you're all being very careful, or you're using some other protocol.

[ Parent | on HN ]
Re:Geary: a beautiful modern open-source email client by shin_lao on Monday March 25, 2013 @05:17PM (#5439749)
This is why the OP talked about S/MIME and PGP, methinks.
[ Parent | on HN ]