Mercurial > libervia-backend
diff doc/components.rst @ 4352:382dc6e62b6e
doc (components, encryption): add documentation on autocrypt for client and email gateway:
fix 456
author | Goffi <goffi@goffi.org> |
---|---|
date | Fri, 28 Feb 2025 09:23:35 +0100 |
parents | 35d41de5b2aa |
children |
line wrap: on
line diff
--- a/doc/components.rst Fri Feb 28 09:23:35 2025 +0100 +++ b/doc/components.rst Fri Feb 28 09:23:35 2025 +0100 @@ -977,6 +977,18 @@ (in technical terms, it's by telling it to use MIME and OpenPGP) before sending it to the gateway. This only works with clients implementing this specification. +Autocrypt +~~~~~~~~~ + +The gateway relays "Autocrypt" headers, which is a way to share public keys without +relaying them to a key server. In layman's terms, it's a way to exchange encryption data +to be able to encrypt messages automatically. However, while better than not using +end-to-end encryption, this method is not as secure as proper management of encryption +keys and authentication of the peer we're talking to. + +Please refer to `Wikipedia's Autocrypt page`_ for more details, in particular on its +security model + .. note:: @@ -989,4 +1001,5 @@ .. _XEP-0106 (JID Escaping): https://xmpp.org/extensions/xep-0106.html .. _XEP-0131 (Stanza Headers and Internet Metadata): https://xmpp.org/extensions/xep-0131.html .. _XEP-0498 (Pubsub File Sharing): https://xmpp.org/extensions/xep-0498.html +.. _Wikipedia's Autocrypt page: https://en.wikipedia.org/wiki/Autocrypt