Change Details

The security confirmation dialog, checks for OpenPGP keys. If no OpenPGP keys were found it should automatically try S/MIME. Possibly include a preference for whether OpenPGP or S/MIME is checked first.

~~The security confirmation dialog, checks for OpenPGP keys.~~ ~~If no OpenPGP keys were found it should automatically try S/MIME.~~ ~~Possibly include a preference for whether OpenPGP or S/MIME is checked first.~~ The original description was wrong, switching works in principle. But now a case was pointed out where it doesn't work in GnuPGVS-Desktop versions: If the sender has valid VS-conform certificates for OpenPGP and S/MIME and a recipient has a only a certificate for the protocol which is not the senders preferred one and the certificate is not VS-compliant, switching automatically away from the senders preferred protocol does not work. How to reproduce (example for recipient has S/MIME): * Sender has: VS-compliant certificates for OpenPGP and S/MIME * Recipient has: no VS-compliant certificate, here RSA 2048 S/MIME certificate * Trying to send mail results in: {F34006761} * switching manually to S/MIME shows: {F34006778} This might be unexpected, but we do not want to change this, as the recipients certificate is not VS-compliant. The sender could want to import a VS-compliant OpenPGP certificate instead or switch to a compliant one with another mail address instead of using the not compliant S/MIME certificate.

~~The security confirmation dialog, checks for OpenPGP keys.~~ ~~If no OpenPGP keys were found it should automatically try S/MIME.~~ Possibly include a preference for whether OpenPGP or S/MIME is checked first.~~Possibly include a preference for whether OpenPGP or S/MIME is checked first.~~ The original description was wrong, switching works in principle. But now a case was pointed out where it doesn't work in GnuPGVS-Desktop versions: If the sender has valid VS-conform certificates for OpenPGP and S/MIME and a recipient has a only a certificate for the protocol which is not the senders preferred one and the certificate is not VS-compliant, switching automatically away from the senders preferred protocol does not work. How to reproduce (example for recipient has S/MIME): * Sender has: VS-compliant certificates for OpenPGP and S/MIME * Recipient has: no VS-compliant certificate, here RSA 2048 S/MIME certificate * Trying to send mail results in: {F34006761} * switching manually to S/MIME shows: {F34006778} This might be unexpected, but we do not want to change this, as the recipients certificate is not VS-compliant. The sender could want to import a VS-compliant OpenPGP certificate instead or switch to a compliant one with another mail address instead of using the not compliant S/MIME certificate.