GnuPG Encrypted outgoing topic notification emails

[frigidaire_amer (Frigidaire Americain)]

Hello,

We switched our encrypted mailing list to a Discourse forum with no regret. Thanks for the great work!

When we switched to Discourse (obviously forcing https usage), we agreed to disable email notifications to prevent the sending of information without encryption. However, now, we miss email notifications

Would it be possible to implement GnuPG encryption only for outgoing topic notification emails? Our only threat model is passive eavesdropping.

Someone already started a topic about that (then the topic was closed):

PAID: PGP Encrypted emails

I’d like a plugin to: Store a site-wide public/private key pair for signing system emails Store public PGP keys in user profiles Redact the message topic the subject Sign and encrypt all outgoing mail Block sending emails to those who do not have a key on file I’d like this to be Apache 2.0 Licensed, and publicly released. I’d do this myself, but I’ve never written a line of Ruby . If interested, let me know what the cost would be.

(even if I disagree about the signature stuff which add complexity for a low-value)

Do you think a lot of hacks are needed to complete this feature? Or even a ruby newbie could implement it?

Thanks!

[mpalmer (Matt Palmer)]

The topic you reference got closed because it was in the “marketplace”; to keep things manageable, topics get “expired” out of that category periodically.

As far as implementation goes, I doubt this would go into core any time soon (there’s a lot of more important features to add for general use), but I could definitely see it as a useful niche for a plugin. There might be a few hooks that need to be added to core in order for the plugin to catch the e-mails at just the right point in the processing chain and decrypt/encrypt, but I wouldn’t think it’d be out of the reach, technically, of a suitably motivated individual.