diff doc/components.rst @ 4352:382dc6e62b6e

doc (components, encryption): add documentation on autocrypt for client and email gateway: fix 456
author Goffi <goffi@goffi.org>
date Fri, 28 Feb 2025 09:23:35 +0100
parents 35d41de5b2aa
children
line wrap: on
line diff
--- a/doc/components.rst	Fri Feb 28 09:23:35 2025 +0100
+++ b/doc/components.rst	Fri Feb 28 09:23:35 2025 +0100
@@ -977,6 +977,18 @@
 (in technical terms, it's by telling it to use MIME and OpenPGP) before sending it to the
 gateway. This only works with clients implementing this specification.
 
+Autocrypt
+~~~~~~~~~
+
+The gateway relays "Autocrypt" headers, which is a way to share public keys without
+relaying them to a key server. In layman's terms, it's a way to exchange encryption data
+to be able to encrypt messages automatically. However, while better than not using
+end-to-end encryption, this method is not as secure as proper management of encryption
+keys and authentication of the peer we're talking to.
+
+Please refer to `Wikipedia's Autocrypt page`_ for more details, in particular on its
+security model
+
 
 .. note::
 
@@ -989,4 +1001,5 @@
 .. _XEP-0106 (JID Escaping): https://xmpp.org/extensions/xep-0106.html
 .. _XEP-0131 (Stanza Headers and Internet Metadata): https://xmpp.org/extensions/xep-0131.html
 .. _XEP-0498 (Pubsub File Sharing): https://xmpp.org/extensions/xep-0498.html
+.. _Wikipedia's Autocrypt page: https://en.wikipedia.org/wiki/Autocrypt