[Suggestion] Encryption for stored messages and settings?

[Creativ Name]

I think it would be very cool to have encryption for the messages and settings of K-9 Mail, so that private information is secure if a phone is stolen. I'm not exactly sure how it would be implemented, though, so that if a phone is stolen while it's on, previous messages can't be accessed.

People do all sorts of private business through their e-mail these days, enough to aid in identity theft.

[Creativ Name]

If not encryption of all messages, maybe something that can protect past emails, at least. Like an option to immediately delete messages after they have been read, and an option to require a password to load settings when first logging into K-9 mail after you start your phone.

[Kurt Padilla]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Until K-9 Mail gets such features, be sure to use APG to encrypt all of your correspondence.

Kurt

- --
Sent with K-9 Mail and cryptographically signed with APG so that you can verify that I am the actual sender.
-----BEGIN PGP SIGNATURE-----
Version: APG v1.0.8

iLUEAREIAF0FAlGXsX5WHEt1cnQgUGFkaWxsYSAoQSBrZXkgZm9yIHVzZSBmcm9t
IG15IHBlcnNvbmFsIG1vYmlsZSBkZXZpY2UuKSA8a3VydC5wYWRpbGxhQGdtYWls
LmNvbT4ACgkQrP3Ut0LXc/nQnAD+O8obx+eUZXewzg08Y3kqsUpkvDaPHFiC4R+W
74O5JG0A/0uy2V9g5gTzyTX+8xjmQ8Uv1XOV+M+qfKmFNNxNU5lK
=UYQS
-----END PGP SIGNATURE-----

[Pete]

Hi Kurt,

Is AGP enabled by default or do I need to download & install an android extra?

-- 
Best Regards,

Peter Mills

 Cut costs and help save a tree. Don't print this e-mail unless it's really necessary to do so
=================================================================================================
Outgoing mail is certified Virus Free: Checked by Kaspersky Internet Security 2012 Version: 12.0.0.374 Virus Database: updated: 18/05/2013 THE CONTENTS OF THIS MESSAGE ARE CONFIDENTIAL AND ARE INTENDED FOR IT'S IDENTIFIED RECIPIENT ONLY. IF YOU RECEIVED THIS MESSAGE IN ERROR, PLEASE NOTIFY THE SENDER ASAP AND DELETE THE MESSAGE IMMEDIATELY. 
================================================================================================= 

> -- 
  

[Kurt Padilla]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

It is a separate app, but it interfaces with K-9. Once you have it setup, it will ask for a passphrase every time you send a message. Recipients will have to run APG or similar GnuPG software to decrypt/verify your messages.

Kurt

Pete <pe...@moatfarm-cp.co.uk> wrote:
>Hi Kurt,
>
>Is AGP enabled by default or do I need to download & install an android
>extra?

- --
Sent with K-9 Mail and cryptographically signed with APG so that you can verify that I am the actual sender.
-----BEGIN PGP SIGNATURE-----
Version: APG v1.0.8

iLUEAREIAF0FAlGXzaRWHEt1cnQgUGFkaWxsYSAoQSBrZXkgZm9yIHVzZSBmcm9t
IG15IHBlcnNvbmFsIG1vYmlsZSBkZXZpY2UuKSA8a3VydC5wYWRpbGxhQGdtYWls
LmNvbT4ACgkQrP3Ut0LXc/mCuwD/fCHKeTDp+sF3eCBLcTp4R3GvAeNFof6UBYgm
Hfs1t90BAJKnlt69kwDT9SJSqdnAyMwGe7eo2BBrPoK3w23ui5WH
=NpI+
-----END PGP SIGNATURE-----

[Peter]

Hi Kurt,

Thanks for your reply, which implementation of AGP do you suggest? I have found only one in the play store but it would seem as if the developer has not updated it since 2010 is this important !!

Is it a case of selecting to sign a message with AGP before sending or will all messages be encrypted as I can't be sure that ALL my recipients will have AGP installed.

Peter

Sent from my Android tablet, with K-9 Mail. Please excuse my brevity.

[Kurt Padilla]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Peter,

I am running the latest version of APG, which, unfortunately, hasn't seen an update in a while. Hopefully that will change.

You can sign whichever messages you choose, but you can only encrypt a message if you have the public key(s) for your intended recipient(s). And you won't have that if your recipients aren't also set up with APG or similar GnuPG software.

Kurt

iLUEAREIAF0FAlGYrV5WHEt1cnQgUGFkaWxsYSAoQSBrZXkgZm9yIHVzZSBmcm9t
IG15IHBlcnNvbmFsIG1vYmlsZSBkZXZpY2UuKSA8a3VydC5wYWRpbGxhQGdtYWls
LmNvbT4ACgkQrP3Ut0LXc/nuAQD+JpgX110oel0n5iZ+TUCNJZ4SrYdd9ySvBoFj
MxMGT04A/1Rc0Xb6D7DAMJV7zoo2e371v7DlmhgnuwOxEv4aMZKu
=mmKN
-----END PGP SIGNATURE-----

[Peter]

Thanks, that makes perfect sense, I'll try the version that I've found and see how it works.

Appreciate your help and time in replying.

Peter

--
Mob: 07836 784143