Bug 472426

Summary:	Enable checking if OpenPGP encryption is possible by default
Product:	[Applications] kmail2	Reporter:	Bernhard E. Reiter <bernhard>
Component:	crypto	Assignee:	kdepim bugs <kdepim-bugs>
Status:	REPORTED ---
Severity:	normal
Priority:	NOR
Version:	unspecified
Target Milestone:	---
Platform:	Other
OS:	Linux
Latest Commit:		Version Fixed In:

Description Bernhard E. Reiter 2023-07-20 10:38:51 UTC

KMail shall enable encryption in the default configuration
if my recipients want to get emails encrypted to them by OpenPGP/MIME.

Many recipients that want to receive encrypted emails, publish their public OpenPGP
via the web key directory standard (WKD). KMail shall check if they did.
The can be enabled by the identity option: Automatically encrypt messages when possible"
as shown with: https://wiki.gnupg.org/EMailClients/KMail


STEPS TO REPRODUCE
1.  on a fresh account start kmail with vanilla settings, add an email account. be online.
2. open an new email
3. enter an email address for someone that has their OpenPGP pubkey published via WKD (e.g. mine at bernhard.reiter@intevation.de)

Variant for 1: use an old account with a newer kmail. Expectation: KMail asks the user once that it enables the option during migration.

OBSERVED RESULT
Encryption is not enabled, it is not shown that this recipient offers to send them encrypted email.

EXPECTED RESULT
The indicator before the email address shows the public keys indication by the little icons.
The encrypt button is enabled.

Comment 1 Bernhard E. Reiter 2023-07-20 10:46:21 UTC

Maybe the label of the option "Automatically encrypt messages when possible" is suboptimal because it does not mention the checking part (like trying to get the pubkey in the local storage via WKD or otherwise). Maybe it is an improvement to say:

"Check if we can encrypt to recipients and enable encryption for an email if possible for all."

or

"Check if recipients offer to encrypt to them. Suggest to encrypt for an email automatically if possible".


Both would explain better that there are two steps and that the suggestion can be ignored, by deselecting the encryption setting later.