wallix/PEPS

Accept only PGP signed emails?

zedtux opened this issue · 3 comments

I'm considering migrating my postfix+devcot+roundcube to PEPS but I'd like to ask before regarding this point:

I'm fed up about SPAM, and I want to go for sign-your-emails-or-forget-me way. I already have my GPG key and I want to implement this in the process of the migration of my old mail setup.

So the question are :

  • Is PEPS PGP compatible?
  • Can I sign my emails in PEPS using my key?
  • Can I crypt emails in PEPS with the others keys?
  • The most important question: Can I accept ONLY GPG signed emails?

Thank you very much in advance

hbbio commented

Thanks for considering Peps. In a sense, Peps covers the case of spam fighting since the population of users is controlled. But what you suggest could be very interesting.

  • Right now, Peps is not PGP compatible, but the task is feasible since it suffices to integrate OpenPGPJS
  • Peps does not support signature as of now
  • Teams enable to encrypt messages using team keys, which are shared by groups of people
  • Once PGP support is implemented, it is trivial to reject cleartext messages

Great news for the future but I want to get this kind of solution now. I'll keep an eye on this issue while I'm considering another solution for now.

Thank you @hbbio for your comment.

@hbbio do you have any updates on this?