notmuch/doc
Daniel Kahn Gillmor 29648a137c crypto: actually stash session keys when decrypt=true
If you're going to store the cleartext index of an encrypted message,
in most situations you might just as well store the session key.
Doing this storage has efficiency and recoverability advantages.

Combined with a schedule of regular OpenPGP subkey rotation and
destruction, this can also offer security benefits, like "deletable
e-mail", which is the store-and-forward analog to "forward secrecy".

But wait, i hear you saying, i have a special need to store cleartext
indexes but it's really bad for me to store session keys!  Maybe
(let's imagine) i get lots of e-mails with incriminating photos
attached, and i want to be able to search for them by the text in the
e-mail, but i don't want someone with access to the index to be
actually able to see the photos themselves.

Fret not, the next patch in this series will support your wacky
uncommon use case.
2017-12-08 08:08:47 -04:00
..
man1 crypto: actually stash session keys when decrypt=true 2017-12-08 08:08:47 -04:00
man5 doc: make SEE ALSO references one-per-line 2017-10-18 22:36:39 -03:00
man7 crypto: actually stash session keys when decrypt=true 2017-12-08 08:08:47 -04:00
.gitignore Use rooted paths in .gitignore files 2017-08-18 19:42:35 -03:00
conf.py doc: add notmuch-properties(7) 2017-10-21 19:52:55 -03:00
doxygen.cfg Use https instead of http where possible 2016-06-05 08:32:17 -03:00
index.rst doc: add notmuch-properties(7) 2017-10-21 19:52:55 -03:00
INSTALL doc: remove support for rst2man 2015-01-22 08:37:25 +01:00
Makefile doc: convert sphinx based docs 2014-03-09 10:41:08 -03:00
Makefile.local build: only install known man pages 2016-11-17 08:42:23 -04:00
notmuch-emacs.rst doc: fix references in notmuch-emacs.rst 2016-11-17 08:39:04 -04:00