[Enigmail] About Supprting BCCed Recipients

Patrick Brunschwig patrick at mozilla-enigmail.org
Tue May 12 08:18:23 PDT 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Up to now, Enigmail gave a warning if encrypted emails are sent to BCCed
recipients because GnuPG would store the key ID's of all recipients in
the encrypted message. In order to overcome this privacy issue, there is
an option that allows to tell GnuPG not to write some of the key ID's
into an encrypted message ("--no-throw-keyids" and
"--hidden-recipient"). If such "anonymous" key ID's are found in a
message, GnuPG would probe all secret keys until one of them allows to
decrypt the message.

Unfortunately, hiding the keys in a message is an optional part of the
OpenPGP standard; PGP (in particular) is known not to support it.

And here comes my question: please help us out by lettings us know how
many of your correspondents use a tool like PGP such that they would not
be able to decrypt messages with hidden keys by participating in the
poll on our forum:
<http://mozilla-enigmail.org/forum/viewtopic.php?f=3&t=599>

Thanks,
Patrick
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEVAwUBSgmTPncOpHodsOiwAQi4KggAuM4MgxMZR4qeDHSnMuSWxaIMBv5vtFDN
W1sJ0tFsnDCZD9ghzRhngsRYIIM80fB2HTkVffe0Yql1Dt6FkKWGwXtdxCE/tKUs
tSLrQkF99uG9P6pgawt3cOEpnG5wL+jzbwVCFfn7k1RVLJ1uH6YAZ64oV0GlMUTz
0IDnIv4tZFFwBu8e9vM7Tt6Ji/rJQ5XRtoqizpTs2MzBRfvUB0IRhloglxthHWiy
2DM0UUZQqJaSRTj2uEPi4wn6hCW9JEFldFri0FSiqt4WHemN/1rQsQAnww4d1EFn
IkPJ1PECktGToJ0WfKO9pGJSLSrldk/60XIrGYe0ewBuNM41ZtRS2Q==
=UGuP
-----END PGP SIGNATURE-----


More information about the Enigmail mailing list