Rework encryption / signing key / certificate selection in KMail
Closed, ResolvedPublic

Description

This is about -> Edit Identity -> Cryptography settings.

Currently this shows the short keyid and all secret keys / all keys for encryption in the dialog.
In my opinion this would be better as a combo box that is prefiltered to only include keys where a UserID matches the configured mailbox.

Preselection should be similar to KeyForMailboxJob. E.g. the most recently generated valid key. (They should all be ultimately valid).

The Combo Box should also allow to select "generate key" which would start a KeyGeneration Job with default values and Name / Mailbox values taken from the identity dialog when the config is commited.

For compatibility with old users who may have configured keys that do not have a UID matching the Mailbox the old dialog could still be kept around and available as a fallback.

Here is a mockup how this could look in the Accountwizard. I imagine something similar in identity config.

Wherever you display key-ids please consider:

https://help.riseup.net/en/security/message-security/openpgp/best-practices#dont-rely-on-the-key-id

With "keyid-format 0xlong" in gpg.conf KMail as in KDEPIM 16.04.3 seems to display long key-ids.

dvratil added a subscriber: dvratil.Oct 4 2016, 1:21 PM

@aheinecke the combobox is implemented, should we close this task then?

aheinecke closed this task as Resolved.Oct 4 2016, 1:22 PM

Yep, thanks.