Bug 3336 - Claws-Mail saves e-mails to Drafts, no way to disable it
Summary: Claws-Mail saves e-mails to Drafts, no way to disable it
Status: RESOLVED DUPLICATE of bug 2965
Alias: None
Product: Claws Mail
Classification: Unclassified
Component: Plugins (show other bugs)
Version: 3.10.1
Hardware: PC Linux
: P3 major
Assignee: users
URL:
Depends on:
Blocks:
 
Reported: 2014-11-24 20:11 CET by oyvinds
Modified: 2014-11-24 20:26 CET (History)
0 users

See Also:


Attachments

Description oyvinds 2014-11-24 20:11:55 CET
1) Use GnuPG
2) Compose e-mail
3) Watch Claws-Mail save your e-mail IN PLAINTEXT to the server you have configured
4) Get your e-mail read by your e-mail provider

I am unable to find anywhere I can disable Claws-Mail from saving the e-mails being composed to the "Drafts" folder. This is a major security problem and makes Claws-Mail completely insecure when used with GnuPG.

Preferred behaviour would be to NEVER save your e-mails to "Drafts" when a GnuPG key is configured for an account. An alternative solution could be to save it as a message encrypted to yourself when saving to Drafts but I think the best thing to do would be to not save messages to Drafts. This could be a configuration option which is enabled by default if a GnuPG key is set.

There should probably be a configuration option to prevent it from saving anything to "Drafts" every even for non-GnuPG users.

GnuPG+Claws-Mail is to be considered unsecure and compromized with the current way it works.
Comment 1 oyvinds 2014-11-24 20:21:05 CET
After looking more I found

Preferences -> Compose -> Writing to disble "Save to drafts"
Comment 2 Paul 2014-11-24 20:23:42 CET

*** This bug has been marked as a duplicate of bug 2965 ***
Comment 3 Paul 2014-11-24 20:26:29 CET
(In reply to comment #0)
> GnuPG+Claws-Mail is to be considered unsecure and compromized with the
> current way it works.

That's nonsense, an overstatement at best.
You can use a Local queue and drafts folder in an MH mailbox, and besides, IMAP accounts are not the only kind of accounts.

Note You need to log in before you can comment on or make changes to this bug.