[ame2016] INBOME comments

[Neal H. Walfield]

On Thu, 08 Dec 2016 05:58:19 +0100,
Daniel Kahn Gillmor wrote:
> On Wed 2016-12-07 05:54:23 -0500, Neal H. Walfield wrote:
> > AIUI, today, you can encrypt mails using most webmailers using
> > something like Mailvelope.
> 
> Have you tried actually using this?  What i hear from friends is that
> this is painful at best, and only becomes marginally less-painful when
> the webmail interface is specifically designed to interact well with
> mailvelope.

I can't imagine the pain, but FWIW this is what the BuzzFeed opsec
team is training their reporters to use.  (And, BuzzFeed has on
boarded a lot of people.)

> Once you're in the process of doing that kind of interop work, the
> webmail interface can certainly define a way to pass the headers to the
> extension.  Ideally, friendly webmail implementations would expose the
> entire mime structure, both on message composition and message
> retrieval.

Of course.  But that is exactly the point: you're going to have to
modify the webmailers a lot.