| 词条 | Mailvelope |
| 释义 |
| logo = Mailvelope-logo.svg | logo size = 200px | logo alt = | logo caption = | screenshot = E2E-Krypto Web.de-Webmail 6 - Editor kompakt.png | screenshot alt = Composing an encrypted message | caption = | collapsible = | author = | developer = Mailvelope GmbH | released = {{Start date and age|2012|||df=yes/no}} | discontinued = | ver layout = | latest release version = 2.2.0 | latest release date = {{Start date and age|2018|3|6|df=yes/no}} | latest preview version = | latest preview date = | status = | programming language = JavaScript | operating system = | platform = web browser | size = | language = | language count = | language footnote = | genre = browser extension | license = AGPL (free software) | alexa = | website = {{URL|https://www.mailvelope.com/}} | repo = {{GitHub|mailvelope/mailvelope}} | standard = | AsOf = }} Mailvelope is a free software for end-to-end encryption of email traffic inside of a web browser (Firefox or Chromium) that integrates itself into existing webmail applications ("email websites"). It can be used to encrypt and sign electronic messages, including attached files, without the use of a separate, native email client (like Thunderbird) using the OpenPGP standard. The name is a portmanteau of the words "mail" and "envelope". It is published together with its source code under the terms of version 3 of the GNU Affero General Public License (AGPL). The company Mailvelope GmbH runs the development using a public code repository on GitHub. Development is sponsored by the Open Technology Fund. Similar alternatives are Mymail-Crypt[2] and WebPG.[3] FeaturesMailvelope equips webmail applications with OpenPGP functionality. It comes with preconfigurations for several popular providers like Outlook on the web and Gmail.[4] For Chromium/Chrome there's the possibility to install from an authenticated source using the integrated software extension manager "Chrome Web Store".[5] A study from 2015 examined the usability of Mailvelope as an example of a modern OpenPGP client and deemed it unsuitable for the masses. They recommended integrating assistant functionality, sending instructive invitation messages to new communication partners, and publishing basic explanatory texts.[6] The Mailvelope-based OpenPGP system of United Internet integrates such functionality and its usability earned some positive mentions in the press, particularly the offered key synchronization feature.[7][8] A usability analysis from 2016 found it to still be "worthy of improvement" ("verbesserungswürdig"), though, and mentioned "confusing wording" ("irritierende Formulierungen"), missing communication of the concept, bad password recommendations, missing negative dissociation of the more prominent modus that features only transport encryption, plus insufficient support for key authenticity checking (to thwart man-in-the-middle attacks).[3] UsageIn April 2015, De-Mail providers equipped their services with an option for end-to-end encryption based on Mailvelope that is deactivated by default[10] and can only be used in combination with Mobile TAN or the German electronic identity card.[11] In contrast to the hitherto advertised but ineffective encryption scheme De-Mail some of the same email providers now promise their customers end-to-end encrypted communication among authenticated participants without the need for expert knowledge.[12] In August 2015, the E-Mail services of Web.de and GMX introduced support for OpenPGP encryption and integrated a customized version of Mailvelope into their webmail applications for that. According to self-published figures, this affected about 30 million users.[13] FunctionalityIt implements the OpenPGP standard, a public-key cryptosystem first standardized in 1998. It's a web browser extension written in JavaScript for Firefox or Chromium (Chrome). On certain web pages it overlays its control elements which an are optically distinguished as being separate from the web application by a surrounding background of tiled lock symbols. This background can be customized to enable recognizing imitations.[3] In the back end it builds on the functionality of the program library OpenPGP.js, a free JavaScript Implementation of the OpenPGP standard. By running inside a separate inline frame, its code is executed separately from the web application and should prevent it from accessing clear text message contents.[2] The version developed in collaboration with 1&1 silently creates a pair of keys when using a setup wizard and manages all OpenPGP keys locally in the browser.[8] HistoryThe developer names the defunct software project FireGPG that was started in 2007 as an important predecessor.[17] Thomas Oberndörfer started developing Mailvelope in spring 2012 and the first publication was version 0.4.0.1 on August 24. Mario Heiderich and Krzysztof Kotowicz of Cure53 did a security audit on an alpha version from 2012/2013.[5] Among other things, the separation from the web application and its data structures was enhanced based on its findings. In February 2014, the same group analysed the library OpenPGP.js which Mailvelope is based on. Version 0.8.0 from the following April included the corrections that stem from it and brought about support for signing messages. In May 2014, iSEC Partners published an analysis of the Firefox extension.[3] Version 1.0.0 was published on August 18, 2015. The webmail software Roundcube senses and supports Mailvelope as of version 1.2 from May 2016.[20] References1. ^1 2 {{citation|surname1=Akash Badshah|surname2=Anurag Kashyap|surname3=Kenny Lam|surname4=Vikas Velagapudi|title=SendSecure |language=German|url=http://courses.csail.mit.edu/6.857/2014/files/24-badshah-kashyap-lam-velagapudi-sendsecure.pdf|format= courses.csail.mit.edu}} [1][2][3][4][5][6][7][8][9][10][11][12][13]2. ^1 2 3 4 {{citation|surname1=Verena Schochlow|surname2=Stephan Neumann|surname3=Kristoffer Braun|surname4=Melanie Volkamer|periodical=Datenschutz und Datensicherheit|title=Bewertung der GMX/Mailvelope-Ende-zu-Ende-Verschlüsselung |volume=40|issue=5|publisher=Springer Fachmedien|publication-place=Wiesbaden|pages=295–299|language=German|doi=10.1007/s11623-016-0599-5}} 3. ^1 {{cite web|title=Mailvelope|trans-title=|periodical=Right to Hide|publisher=Hungarian Civil Liberties Union (HCLU)|url=http://www.righttohide.com/app-chat-mailvelope-hu|deadurl=|format=|accessdate=2016-09-26|archiveurl=|archivedate=|last=|date=|year=|month=|day=|language=German|pages=|quote=}} 4. ^1 2 {{citation|surname1=Mario Heiderich|surname2=Krzysztof Kotowicz|title=Pentest-Report Mailvelope 12.2012–02.2013 |language=German|url=https://cure53.de/pentest-report_mailvelope.pdf|format= cure53.de}} 5. ^1 {{citation|surname1=Scott Ruoti|surname2=Jeff Andersen|surname3=Daniel Zappala|surname4=Kent Seamons|title=Why Johnny Still, Still Can’t Encrypt: Evaluating the Usability of a Modern PGP Client |language=German|arxiv=1510.08555}} 6. ^1 {{citation|surname1=Patrick Beuth|periodical=Die Zeit|title=GMX und Web.de: Der schnellste Weg zur verschlüsselten E-Mail |publication-place=Hamburg|language=German|url=http://www.zeit.de/digital/datenschutz/2015-08/gmx-webde-mail-verschluesselung-pgp-anleitung|format= zeit.de}} 7. ^1 2 {{cite web|title=GMX und Web.de integrieren PGP in ihre Mail-Dienste|trans-title=|periodical=c’t|publisher=|url=http://www.heise.de/ct/ausgabe/2015-19-GMX-und-Web-de-integrieren-PGP-in-ihre-Mail-Dienste-2783359.html|deadurl=|accessdate=2015-12-28|archiveurl=|archivedate=|last=|date=|year=|month=|day=|language=German|pages=|quote=}} 8. ^1 {{cite web|title=De-Mail. Ende-zu-Ende-Verschlüsselung mit PGP gestartet|trans-title=|periodical=heise Security|publisher=|url=https://www.heise.de/-2616388|deadurl=|format=|accessdate=2016-09-25|archiveurl=|archivedate=|last=|date=|year=|month=|day=|language=German|pages=|quote=}} 9. ^1 {{cite web|title=De-Mail integriert Ende-zu-Ende-Verschlüsselung mit PGP|trans-title=|periodical=heise online|publisher=|url=https://www.heise.de/-2570632|deadurl=|format=|accessdate=2016-09-25|archiveurl=|archivedate=|last=|date=|year=|month=|day=|language=German|pages=|quote=}} 10. ^1 {{cite web|title=Web.de und GMX führen PGP-Verschlüsselung für Mail ein|trans-title=|periodical=heise online|publisher=|url=https://www.heise.de/-2786133|deadurl=|format=|accessdate=2016-09-25|archiveurl=|archivedate=|last=|date=|year=|month=|day=|language=German|pages=|quote=}} 11. ^1 {{cite web|title=PGP-Verschlüsselung von De-Mails im Browser|trans-title=|periodical=c't|publisher=|url=http://www.heise.de/ct/ausgabe/2015-12-Test-PGP-Verschluesselung-von-De-Mails-im-Browser-2641912.html|deadurl=|accessdate=2015-12-28|archiveurl=|archivedate=|last=|date=|year=|month=|day=|language=German|pages=|quote=}} 12. ^1 {{cite web|title=FAQ – Mailvelope|trans-title=|periodical=mailvelope.com|publisher=|url=https://www.mailvelope.com/de/faq|deadurl=|format=|accessdate=2016-09-25|archiveurl=|archivedate=|last=Thomas Oberndörfer|date=|year=|month=|day=|language=German|pages=|quote=}} 13. ^1 {{cite web|title=PGP-Unterstützung: Neuer Roundcube-Webmailer veröffentlicht|trans-title=|periodical=Golem.de|publisher=|url=http://www.golem.de/1605/121052|deadurl=|format=|accessdate=2016-09-25|archiveurl=|archivedate=|last=|date=|year=|month=|day=|language=German|pages=|quote=}} }} External links{{Commonscat}}
3 : Software add-ons|Cryptographic software|Free software programmed in JavaScript |
| 随便看 |
|
开放百科全书收录14589846条英语、德语、日语等多语种百科知识，基本涵盖了大多数领域的百科知识，是一部内容自由、开放的电子版国际百科全书。