Kleopatra Notepad: Two step decrypt then verify
Closed, WontfixPublic

Assigned To
Authored By
• aheinecke
Dec 9 2024, 11:23 PM

Description

When PGP is used for two factor authentication by sending the user an encrypted one-time URL to use as a login page this link is usually also signed to help against phishing attacks but not in the nice combined way.

Rather a clearsigned message is encrypted. Similar to PGP/MIME where usually a multipart/signed is encapsulated in a multipart/encrypted part. So after decryption it would be nice if the notepad would automatically verify a clearsigned message if it detects it in the cleartext.

Related Objects

Event Timeline

The title says "notepad". The description says "clipboard". What do you want?

I edited the task accordingly. Here I meant Notepad. But I would also add this as an idea / improvement for the clipboard if this should get improvements.

• ebo added a project: gpd5x.
• ebo claimed this task.
• ebo removed a project: gpd5x.

I do not see a real life use case here. And the verify could be done with one additional click anyway.