[Tickets #12479] Re: Can not send encrypt mail if sender's personal cert does not exist in Horde

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: https://bugs.horde.org/ticket/12479
------------------------------------------------------------------------------
  Ticket             | 12479
  Updated By         | st.vogelsang at gmx.de
  Summary            | Can not send encrypt mail if sender's personal cert
                     | does not exist in Horde
  Queue              | IMP
  Version            | 6.1.3
  Type               | Bug
  State              | Not A Bug
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


st.vogelsang at gmx.de (2014-11-20 09:54) wrote:

>> Two users: User1 & User2.
>>
>> 1. User2 import/create personal PGP/SMIME cert into Horde.
>> 2. User1 does not import/create personal PGP/SMIME cert into Horde,
>> but only import User2's PGP/SMIME public key into Horde
>> 3. User1 send a PGP/SMIME encrypt mail to User2, then error message appears.
>> PGP Error: Could not retrieve public key for User1 at .....
>> SMIME Error: No smimePublicKey entry found for User1 at .....
>>
>> Horde version: Horde Groupware Webmail Edition 5.1.1
>>
> This is how sending encrypted messages works. If you don't have  
> access to the senders public key, there is no way to decrypt the  
> message by the sender. Only the recipient would be able to decrypt  
> it. This is why you should always encrypt messages with both the  
> recipients *and* your own public key.

Well actually this is a missing feature! Since this is exactly; what the user
is requesting -> a single sided encrypted message! Otherwise I do not need
asymmetric cryptography if I force everyone to have two keys.

Getting an own Certificate, which might take days, delay an answer of email
that just need to be encrypted and send immediately. On the other hand why
should I forced to encrypt my emails in the send folder when I have an
encrypted hard disk.