Talk:Message security

From MozillaZine Knowledge Base

This article claims to be an overview of message security but it really seems to be an overview of S/MIME. It doesn't even explicitly state that enigmail supports encryption and digital signing too. I would have expected it to discuss both, have a short discussion of some of the tradeoffs in which one you choose, and a brief mention of common problems you might encounter such as using multiple identities with S/MIME or word wrapping problems with enigmail. Tanstaafl 01:01, 7 July 2007 (UTC)

I think we could split it into three articles:
  1. Message security. A general introductory article on public-key cryptography and other general message security topics (symmetric-key cryptography is already discussed at Protecting the contents of the profile - mail). This part is missing in current article but it's indispensable to well understand both S/MIME and PGP. It can be easily copied from some Wikipedia articles.
  2. S/MIME message security. Based on the current article.
  3. PGP message security. A new article on PGP and Enigmail to be started. --Armando 08:31, 7 July 2007 (UTC)
I don't think most users care about the technical details, or if they do, it doesn't necessarily help them with the immediate problem of how do they get started. I'd prefer to see the current document be an overview that applies to both S/MIME and enigmail that helps somebody choose one or the other , get a rough idea of what each can do from a users perspective (not a technical perspective), and a 40,000 foot view of whats involved in getting started, linking to other articles for "how to" information and the wikipedia etc. for more technical details.
The article also doesn't deal with some basic questions I've seen raised in the forums such as how do you tell what cipher/key strength was used , what happens if I want to export a encrypted message, and what are the side effects (if any) of deleting an attachment in a signed encrypted message? Tanstaafl 07:20, 8 July 2007 (UTC)