summaryrefslogtreecommitdiffstats
path: root/wiki/src/security/claws_mail_leaks_plaintext_to_imap.de.po
blob: cfd7de760f90c674067dd8af0f1a4646882c4a06 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
# SOME DESCRIPTIVE TITLE
# Copyright (C) YEAR Free Software Foundation, Inc.
# This file is distributed under the same license as the PACKAGE package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
"POT-Creation-Date: 2017-06-25 09:32+0300\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"Language: \n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"

#. type: Plain text
#, no-wrap
msgid "[[!meta date=\"Thu May 7 12:34:56 2015\"]]\n"
msgstr ""

#. type: Plain text
#, no-wrap
msgid "[[!meta title=\"Claws Mail leaks plaintext of encrypted emails to IMAP server\"]]\n"
msgstr ""

#. type: Plain text
#, no-wrap
msgid "[[!tag security/fixed]]\n"
msgstr ""

#. type: Plain text
msgid ""
"We discovered that *Claws Mail*, the email client in Tails, stores plaintext "
"copies of all emails on the remote IMAP server, including those that are "
"meant to be encrypted."
msgstr ""

#. type: Plain text
#, no-wrap
msgid ""
"  - When sending an email, *Claws Mail* copies the email in plaintext to\n"
"    the sending queue of the IMAP server before encrypting the email.\n"
"    *Claws Mail* deletes this plaintext copy after sending the email.\n"
"  - *Claws Mail* drafts in plaintext on the server. An email can be\n"
"    saved as draft either:\n"
"    - Manually by clicking on the **Draft** button when composing an email.\n"
"    - Automatically if you selected the **automatically save message to\n"
"      Draft folder** option in the writing preferences. This option is\n"
"      deselected by default in Tails.\n"
msgstr ""

#. type: Plain text
#, no-wrap
msgid "**All users of *Claws Mail* using IMAP and its OpenPGP plug-in are affected.**\n"
msgstr ""

#. type: Plain text
msgid "Users of *Claws Mail* using POP are not affected."
msgstr ""

#. type: Plain text
#, no-wrap
msgid "<div class=\"tip\">\n"
msgstr ""

#. type: Plain text
#, no-wrap
msgid ""
"To know if you are using IMAP or POP, choose <span class=\"menuchoice\">\n"
"<span class=\"guimenu\">Configuration</span>&nbsp;▸\n"
"<span class=\"guimenuitem\">Edit accounts&hellip;</span></span> and refer\n"
"to the <span class=\"guilabel\">Protocol</span> column in the list of\n"
"accounts.\n"
msgstr ""

#. type: Plain text
#, no-wrap
msgid "</div>\n"
msgstr ""

#. type: Plain text
msgid ""
"Unfortunately, we were not yet able to fix the problem automatically and for "
"everybody. This would require to either modify *Claws Mail* or to migrate to "
"a different application. Refer to the workarounds section to solve this "
"problem in your setup and please warn others around you."
msgstr ""

#. type: Plain text
#, no-wrap
msgid "[[!toc levels=2]]\n"
msgstr ""

#. type: Title =
#, no-wrap
msgid "Workarounds\n"
msgstr ""

#. type: Title -
#, no-wrap
msgid "Verify the content of your **Drafts** folder\n"
msgstr ""

#. type: Plain text
msgid ""
"First of all, verify the content of the **Drafts** folder on the server, "
"either through *Claws Mail* or through the web interface of your email "
"provider. Delete any plaintext email that might have been stored against "
"your will in this folder until now."
msgstr ""

#. type: Plain text
msgid ""
"Then apply one of the other two workarounds to prevent more leaks in the "
"future."
msgstr ""

#. type: Title -
#, no-wrap
msgid "Use POP instead of IMAP\n"
msgstr ""

#. type: Plain text
#, no-wrap
msgid ""
"*Claws Mail* can connect to the email server using either the IMAP or POP\n"
"protocol.\n"
msgstr ""

#. type: Bullet: '  - '
msgid ""
"With IMAP, *Claws Mail* constantly synchronizes with the server and displays "
"the emails and folders that are currently stored on the server. IMAP is "
"better suited if you access your emails from different operating systems."
msgstr ""

#. type: Bullet: '  - '
msgid ""
"With POP, *Claws Mail* downloads the emails that are in the inbox on the "
"server and possibly removes them from the server. POP is better suited if "
"you access emails from Tails only and store them in the persistent volume."
msgstr ""

#. type: Plain text
msgid ""
"To know more, see also this Yahoo! Help page on [comparing the differences "
"between POP and IMAP](https://help.yahoo.com/kb/mail-for-desktop/compare-"
"differences-pop-imap-sln3769.html)."
msgstr ""

#. type: Plain text
msgid ""
"POP is not affected at all by this security problem. When using POP, only "
"encrypted emails are sent to the server. So consider switching to POP if you "
"have an email account dedicated to your activities on Tails.  To do so:"
msgstr ""

#. type: Plain text
#, no-wrap
msgid ""
"1. Choose **File**&nbsp;▸ **Add mailbox**&nbsp;▸ **MH&hellip;** to\n"
"create a local mailbox where to download your emails.\n"
msgstr ""

#. type: Plain text
#, no-wrap
msgid ""
"1. To store the mailbox in the persistent volume, specify\n"
"<span class=\"command\">.claws-mail/Mail</span> as location.\n"
"Make sure to type the <span class=\"command\">.</span> before\n"
"<span class=\"command\">claws-mail/Mail</span>.\n"
msgstr ""

#. type: Plain text
#, no-wrap
msgid "   [[!img claws_mail_leaks_plaintext_to_imap/add_mailbox.png link=\"no\"]]\n"
msgstr ""

#. type: Plain text
#, no-wrap
msgid ""
"1. Choose **Configuration**&nbsp;▸ **Edit accounts&hellip;**, select\n"
"your IMAP account in the list of accounts, and click **Delete** to\n"
"delete it. Doing so does not delete any email stored on the server.\n"
msgstr ""

#. type: Plain text
#, no-wrap
msgid ""
"1. Click **New** and configure this new account as specified by your\n"
"email provider.\n"
msgstr ""

#. type: Bullet: '   - '
msgid ""
"In the **Basic** tab, make sure that the **Protocol** option is set to "
"**POP3**."
msgstr ""

#. type: Bullet: '   - '
msgid ""
"In the **Receive** tab, click on the **Browse** button of the **Default "
"Inbox** option and select the **Inbox** folder of the mailbox that you "
"created in step 2."
msgstr ""

#. type: Plain text
#, no-wrap
msgid "     [[!img claws_mail_leaks_plaintext_to_imap/select_inbox.png link=\"no\"]]\n"
msgstr ""

#. type: Bullet: '   - '
msgid ""
"If you want to keep a copy of the received emails on the server, verify the "
"preferences in the **Receive** tab. We recommend you to disable the **Remove "
"messages on server when received** option until you make sure that the "
"emails are stored in the persistent volume."
msgstr ""

#. type: Plain text
#, no-wrap
msgid ""
"1. Close the preferences dialog and the list of accounts to go back to\n"
"the main window of *Claws Mail*.\n"
msgstr ""

#. type: Plain text
#, no-wrap
msgid ""
"1. Click on the **Get Mail** button to download all emails from the\n"
"inbox on the server. Emails in other folders are not downloaded.\n"
msgstr ""

#. type: Title -
#, no-wrap
msgid "Use local **Drafts** and **Queue** folders\n"
msgstr ""

#. type: Plain text
msgid ""
"If you want to continue using IMAP, you should configure your IMAP account "
"to use **Drafts** and **Queue** folders stored in Tails instead of on the "
"server. To do so:"
msgstr ""

#. type: Plain text
#, no-wrap
msgid ""
"1. Choose **Add mailbox**&nbsp;▸ **MH&hellip;** to create a local\n"
"mailbox where to save your drafts and queued emails.\n"
msgstr ""

#. type: Plain text
#, no-wrap
msgid ""
"1. Choose **Configuration**&nbsp;▸ **Edit accounts&hellip;**, select\n"
"your IMAP account in the list of accounts, and click **Edit** to edit\n"
"its preferences.\n"
msgstr ""

#. type: Bullet: '1. '
msgid "Select **Advanced** in the left pane."
msgstr ""

#. type: Plain text
#, no-wrap
msgid ""
"1. Select the **Put queued messages in** option, click **Browse**, and\n"
"select the **Queue** folder of the **MH** mailbox.\n"
msgstr ""

#. type: Plain text
#, no-wrap
msgid ""
"1. Select the **Put draft messages in** option, click **Browse**, and\n"
"select the **Drafts** folder of the **MH** mailbox.\n"
msgstr ""

#. type: Plain text
#, no-wrap
msgid "[[!img claws_mail_leaks_plaintext_to_imap/local_folders.png link=\"no\"]]\n"
msgstr ""

#. type: Title =
#, no-wrap
msgid "Long term solution\n"
msgstr ""

#. type: Plain text
msgid ""
"As for the possible long term solutions to this problem, we are considering:"
msgstr ""

#. type: Bullet: '- '
msgid ""
"Getting the development team of *Claws Mail* to [fix the problem upstream]"
"(http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=2965).  "
"We contacted them about this problem already. Please help them provide a "
"technical solution if you can."
msgstr ""

#. type: Bullet: '- '
msgid ""
"Replacing *Claws Mail* with *Icedove* (the name of *Mozilla Thunderbird* in "
"Debian). We have been willing to do so for years and this problem motivates "
"us to move faster."
msgstr ""

#. type: Title =
#, no-wrap
msgid "Technical details\n"
msgstr ""

#. type: Title -
#, no-wrap
msgid "Leak through the sending queue\n"
msgstr ""

#. type: Plain text
msgid ""
"When sending an email from an IMAP account, *Claws Mail* does the following:"
msgstr ""

#. type: Plain text
#, no-wrap
msgid ""
"  1. It connects to the IMAP server and stores a plaintext copy of the\n"
"  email in the **Queue** folder on the server.\n"
msgstr ""

#. type: Bullet: '  1. '
msgid "It encrypts the email locally."
msgstr ""

#. type: Bullet: '  1. '
msgid "It sends the encrypted email through the SMTP server."
msgstr ""

#. type: Plain text
#, no-wrap
msgid ""
"  1. It connects to the IMAP server and stores an encrypted copy of the\n"
"  email in the **Sent** folder on the server.\n"
msgstr ""

#. type: Plain text
#, no-wrap
msgid ""
"  1. It connects to the IMAP server and deletes the plaintext email\n"
"  saved in step 1 from the **Queue** folder.\n"
msgstr ""