Bug 3336 - Claws-Mail saves e-mails to Drafts, no way to disable it
Summary: Claws-Mail saves e-mails to Drafts, no way to disable it
Status: RESOLVED DUPLICATE of bug 2965
Alias: None
Product: Claws Mail
Classification: Unclassified
Component: Plugins (show other bugs)
Version: 3.10.1
Hardware: PC Linux
: P3 major
Assignee: users
URL:
Depends on:
Blocks:
 
Reported: 2014-11-24 20:11 CET by oyvinds
Modified: 2014-11-24 20:26 CET (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description oyvinds 2014-11-24 20:11:55 CET
1) Use GnuPG
2) Compose e-mail
3) Watch Claws-Mail save your e-mail IN PLAINTEXT to the server you have configured
4) Get your e-mail read by your e-mail provider

I am unable to find anywhere I can disable Claws-Mail from saving the e-mails being composed to the "Drafts" folder. This is a major security problem and makes Claws-Mail completely insecure when used with GnuPG.

Preferred behaviour would be to NEVER save your e-mails to "Drafts" when a GnuPG key is configured for an account. An alternative solution could be to save it as a message encrypted to yourself when saving to Drafts but I think the best thing to do would be to not save messages to Drafts. This could be a configuration option which is enabled by default if a GnuPG key is set.

There should probably be a configuration option to prevent it from saving anything to "Drafts" every even for non-GnuPG users.

GnuPG+Claws-Mail is to be considered unsecure and compromized with the current way it works.
Comment 1 oyvinds 2014-11-24 20:21:05 CET
After looking more I found

Preferences -> Compose -> Writing to disble "Save to drafts"
Comment 2 Paul 2014-11-24 20:23:42 CET

*** This bug has been marked as a duplicate of bug 2965 ***
Comment 3 Paul 2014-11-24 20:26:29 CET
(In reply to comment #0)
> GnuPG+Claws-Mail is to be considered unsecure and compromized with the
> current way it works.

That's nonsense, an overstatement at best.
You can use a Local queue and drafts folder in an MH mailbox, and besides, IMAP accounts are not the only kind of accounts.