[tor-bugs] #5463 [BridgeDB]: BridgeDB must GPG-sign outgoing mails

[Tor Bug Tracker & Wiki]

#5463: BridgeDB must GPG-sign outgoing mails
-----------------------------+----------------------------
     Reporter:  rransom      |      Owner:  isis
         Type:  enhancement  |     Status:  needs_review
     Priority:  normal       |  Milestone:
    Component:  BridgeDB     |    Version:
   Resolution:               |   Keywords:  bridgegb-email
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+----------------------------

Comment (by rransom):

 Replying to [comment:18 isis]:

 > I'm going to add timestamps too, so that an earlier email cannot be
 replayed. I.e., when the NSA is like "Yo', we got the extra wiretaps
 installed around the boxes with those IPs. Let's resend and get 'em."

 OpenPGP already includes a timestamp in the signature packet, but adding a
 timestamp in the text is a good idea too, ''if'' users won't be confused
 by the time zone.  (MUAs which display the timestamp are likely to display
 it adjusted to the user's TZ; unfortunately, the one MUA I used with
 OpenPGP support didn't display the timestamp.)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5463#comment:19>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online