Bug 3336

Summary:	Claws-Mail saves e-mails to Drafts, no way to disable it
Product:	Claws Mail (GTK 2)	Reporter:	oyvinds
Component:	Plugins	Assignee:	users
Status:	RESOLVED DUPLICATE
Severity:	major
Priority:	P3
Version:	3.10.1
Hardware:	PC
OS:	Linux

Description oyvinds 2014-11-24 20:11:55 UTC

1) Use GnuPG
2) Compose e-mail
3) Watch Claws-Mail save your e-mail IN PLAINTEXT to the server you have configured
4) Get your e-mail read by your e-mail provider

I am unable to find anywhere I can disable Claws-Mail from saving the e-mails being composed to the "Drafts" folder. This is a major security problem and makes Claws-Mail completely insecure when used with GnuPG.

Preferred behaviour would be to NEVER save your e-mails to "Drafts" when a GnuPG key is configured for an account. An alternative solution could be to save it as a message encrypted to yourself when saving to Drafts but I think the best thing to do would be to not save messages to Drafts. This could be a configuration option which is enabled by default if a GnuPG key is set.

There should probably be a configuration option to prevent it from saving anything to "Drafts" every even for non-GnuPG users.

GnuPG+Claws-Mail is to be considered unsecure and compromized with the current way it works.

Comment 1 oyvinds 2014-11-24 20:21:05 UTC

After looking more I found

Preferences -> Compose -> Writing to disble "Save to drafts"

Comment 2 Paul 2014-11-24 20:23:42 UTC


*** This bug has been marked as a duplicate of bug 2965 ***

Comment 3 Paul 2014-11-24 20:26:29 UTC

(In reply to comment #0)
> GnuPG+Claws-Mail is to be considered unsecure and compromized with the
> current way it works.

That's nonsense, an overstatement at best.
You can use a Local queue and drafts folder in an MH mailbox, and besides, IMAP accounts are not the only kind of accounts.