[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
bug#25898: [PATCH 1/2] gnu: Add dovecot-trees.
From: |
ng0 |
Subject: |
bug#25898: [PATCH 1/2] gnu: Add dovecot-trees. |
Date: |
Tue, 14 Mar 2017 12:28:43 +0000 |
Ludovic Courtès transcribed 2.1K bytes:
> address@hidden skribis:
>
> > From: ng0 <address@hidden>
> >
> > * gnu/packages/mail.scm (dovecot-trees): New variable.
>
> [...]
>
> > +(define-public dovecot-trees
> > + (let ((commit "006059c8a47d68f14f73c09743e45b9a73014dbf")
> > + (revision "1"))
> > + (package
> > + (name "dovecot-trees")
> > + (version (string-append "2.0.0-" revision "." (string-take commit
> > 7)))
>
> In general there should be a comment explaining why we’re not using a
> release.
>
> > + (replace 'install
> > + (lambda* (#:key outputs #:allow-other-keys)
> > + (let* ((out (assoc-ref outputs "out"))
> > + (dovemod (string-append out "/lib/dovecot/modules")))
> > + (install-file "src/.libs/lib18_trees_plugin.so"
> > + dovemod)
> > + #t))))))
>
> I’ve removed this phase because it’s incorrect (it skips the relinking
> stage for this .so) and unnecessary anyway (“make install” does the
> right thing.)
>
> > + (description
> > + "@defn{Technology for Resting Email Encrypted Storage} (TREES) is a
> > +NaCL-based @code{Dovecot} encryption plugin.
> > +This plugin adds individually encrypted mail storage to the @code{Dovecot}
> > +IMAP server. It is inspired by Posteo's @code{scrambler} which uses
> > +OpenSSL and RSA keypairs. @code{TREES} works in a similar way, but uses
> > +the @code{Sodium} crypto library (based on NaCL).
> > +
> > +How it works:
> > address@hidden
> > address@hidden On IMAP log in, the user's cleartext password is passed to
> > the plugin.
> > address@hidden The plugin creates an argon2 digest from the password.
> > address@hidden This password digest is used as a symmetric secret to
> > decrypt a libsodium secretbox.
> > address@hidden Inside the secretbox is stored a Curve25519 private key.
> > address@hidden The Curve25519 private key is used to decrypt each
> > individual message, using lidsodium sealed boxes.
> > address@hidden New mail is encrypted as it arrives using the Curve25519
> > public key.
> > address@hidden enumerate\n")
>
> I’ve removed some of the @code here: @code is for code, identifiers,
> etc., but not for proper nouns such as Dovecot.
Don't we use @code{} for application names? I thought that's needed for
Dovecot then as well.
> Applied, thanks!
>
> Ludo’.