curl / Mailing Lists / curl-library / Single Mail


Re: curl and PGP/GPG

From: Aleksandar Lazic <>
Date: Sat, 26 May 2018 11:18:44 +0200

Hi Patrick.

Am 25-05-2018 19:03, schrieb Patrick Monnerat:
> On 05/25/2018 06:30 PM, Alain Reymond wrote:
>> Hello Patrick,
>> Thank you for your answer.
>> We use HTML because we found it easy to use sendgrid to send emails.
>> But
>> we can easily change to SMTP.
>> My concern was how can I create an email using curl (like we do now),
>> attach files, encrypt and send it.
>> We would like to use gpg. A message encrypted with gpg is easy to
>> decrypt with Thunderbid/Enigmail as it is automatically recognized as
>> an
>> gpg-encrypted email.
>> Thank you for the links. I'll have a look at it.
>> Regards,
>> Alain
> Please, don't top-post:

That's one of the main problems with gmail, IMHO.

>> Le 25/05/2018 à 17:32, Patrick Monnerat a écrit :
>>> On 05/25/2018 02:53 PM, Alain Reymond wrote:
>>>> Hello,
>>> Hi Alain,
>>>> is there a way to use cURL to send emails encrypted with GPG ?
> Note also that mail encryption is currently NOT secure
> (CVE-2017-17688):

Please be more precise!

The encryption is still secure.
The attack works because of *not good* gpg/smime implementation in the
mail clients.

The bottom line for me is, don't use HTML emails!
Plaintext mails are still secure, IMHO.

You can read the full statement from the gpg developer at this link

I find it gross negligence from eff to tell everyone

*don't use encryption in e-mails*


This is OT here so sorry for the rush but I think this efail
needs to bring down to a rational discussion.



> -------------------------------------------------------------------
> Unsubscribe:
> Etiquette:

Received on 2018-05-26