Skip to content

WIP:Gpg signed and encrypted mail

jaosso requested to merge jaosso/gitlab:gpg_signed_and_encrypted_mail into master

What does this MR do?

This MR enables GPG encryption and signing for notification mails

At the moment there is no end-to-end encryption and only S/MIME signing for notification mails. So this MR will bring GPG encryption and signing of notificaiton mails to Gitlab. The encryption will be done by GPG so signing by GPG will be added too.

Describe in detail what your merge request does and why. The signing of notification mails will be enabled by the administrator of the Gitlab instance just like the S/MIME signature option that already exists.

The encryption is enabled by the user in the notification settings of his account. When enabled all notification mails send to the user will be encrypted. The public keys of the user will be added by the user through the already existing GPG-Key interface.

In addition to the encryption setting of the user there is a setting for project owner to limit notification mails for users that have enabled the encryption setting.

Feel free to share your thoughts on this feature

Does this MR meet the acceptance criteria?

Conformity

Merge request reports