# GPG signed emails

**URL:** https://meta.discourse.org/t/gpg-signed-emails/20390
**Category:** Feature
**Created:** [September 24, 2014, 7:04am UTC](https://meta.discourse.org/t/gpg-signed-emails/20390 "2014-09-24T07:04:31Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![funvill](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/funvill/32/103428_2.png) [@funvill](https://meta.discourse.org/u/funvill)
#### Post date: [September 24, 2014, 7:04am UTC](https://meta.discourse.org/t/gpg-signed-emails/20390/1 "2014-09-24T07:04:32Z")

</div>

My overly security conscious group is looking for the emails that are sent from discourse to be GPG signed by discourse. Not encrypted emails but signed. Over half of our group primarily interacts with discourse via email (they are old school mailing list people)

The admin would generate a private GPG key specifically for discourse, either by a online generator in discourse or uploading the key to the settings. The admin then could enabled the signing outgoing emails with the discourse private GPG key. These messages would not be encrypted but would have a validation signature appended to the bottom of the email.

I don’t know how many other groups would need or even want this feature.  
I thought I would put it out there incase others would be interested.

---

<div class="post-metadata">

### Author: ![lightyear](https://avatars.discourse-cdn.com/v4/letter/l/848f3c/32.png) [@lightyear](https://meta.discourse.org/u/lightyear)
#### Post date: [September 24, 2014, 8:33am UTC](https://meta.discourse.org/t/gpg-signed-emails/20390/2 "2014-09-24T08:33:24Z")

</div>

Sounds like something a plugin could provide. Depending on how much you care about it, you might want to make an offer to have this build [in the marketplace](https://meta.discourse.org/category/marketplace). I don’t see much reason to add this to core, especially as you already said it is a rather small group of installations even wanting it in the first place.

---

<div class="post-metadata">

### Author: ![riking](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/riking/32/170938_2.png) [@riking](https://meta.discourse.org/u/riking)
#### Post date: [September 24, 2014, 3:37pm UTC](https://meta.discourse.org/t/gpg-signed-emails/20390/3 "2014-09-24T15:37:36Z")

</div>

For implementors: You would want to redefine some methods in `Email::Sender`.

---

<div class="post-metadata">

### Author: ![chapoi](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/chapoi/32/537252_2.png) [@chapoi](https://meta.discourse.org/u/chapoi)
#### Post date: [December 4, 2025, 11:32am UTC](https://meta.discourse.org/t/gpg-signed-emails/20390/4 "2025-12-04T11:32:26Z")

</div>


