Gpg4win Wishlist
This page is intended for feature ideas and descriptions that could be implemented in the future.
GPA
Allow creation of keys larger than 3072 bits
With recent revelations about NSA activity 4096 bits should be the bare minimum for most people setting up new keypairs. Gpg4win/GPA don't make this easy to do. I suggest making 4096 bits the default keysize for an RSA key and allowing the user to go much higher (upto 8K key at least) in the advanced configuration "create new key" input GUI.
Kleopatra
First start Wizard
When starting Kleopatra for the first time on Windows it currently starts up with an empty Window. It would be better if Kleopatra would launch a wizard that guides a new user through the first steps and would offer at least options to import existing certificates / generate new certificates. It might also offer some configuration help. For example to configure keyservers.
Improved Smart Card handling
GUI for Revocation certificates
Kleopatra should allow you to generate and publish a revocation certifcate for your certificates.
Additional localizations
Kleopatra is KDE Software and thus available in 50 Languages. There could be optional "Language pack downloads" made available for those languages or at least for all the languages that the Gpg4win installer supports.
GpgOl
Note: Microsoft dropped the exchange client extension interface that GpgOl used in Outlook 2010. Because of this there are now basically two Versions of GpgOl one for Outlook 2010 and later Versions and another one for Outlook 2003 - 2007. Please mark feature ideas for those versions with an (Ol 2010+)
PGP/MIME (Ol 2010+)
Yes that one,.. The big problem here is that Outlook and Exchange mangle the MIME structure and we have to use tricks to correctly implement it. Full support for PGP/mime in an Outlook and Exchange environment might even be impossible. Another problem are restrictions on the way how we can display decrypted and/or verified Data in a way that is secure and user friendly.
In Body Sign/Encrypt (OpenPGP) (Ol 2010+)
For the basic support it would be nice if there was an option to combine the sign encrypt options to create a combined PGP Message. This feature would only be available for OpenPGP (similar as with the clipboard).
Pinentry
- Checkbox for "Show Passphrase" A checkbox that disables the obfuscation of the Passphrase in the input field. This could help with the input of complex passphrases if you are sure that no one watches over your Shoulder ;)
- Add these features also to the GTK+ Version of the Pinentry.
- Improve the native Windows Passphrase which is part of the vanilla intaller. For example it could be tied to the Windows taskbar, so that a user knows where to look for it.
- Or create a static pinentry-qt4 binary that does not depend on the Qt DLL's and could be included in the vanilla / light installers.
General
Improved Encoding handling
- Test / fix filename problems for gpgEx with Unicode characters (e.g. issue1324)
- Fix console output encoding of gpg
- Fix gpgol < 2010 encoding Problems
- Proactively hunt encoding Problems and tackle them.
File extension handling:
Gpg4win should register file extensions like .asc .gpg .pk7 etc. and open an appropriate Software / Dialog to handle those files when they are double clicked in the Windows explorer. FWIW, gpgme now has an identify feature which works similar to file(1) by looking at the content of a file. As of now it is able to detect binary CMS message and armored PGP messages. We should extend that to binary PGP messages.
Comprehensive Video Tutorials
It would be nice to have a set of clear and short Video tutorials that explain a single use case. With the idea that you can link to those if you want to send someone a short "User friendly" explanation how they can securely communicate with you. Some ideas:
- How to generate an OpenPGP Key and distribute your public key.
- How to encrypt/sign files
- How to handle encrypted and signed files
- How to use the rudimentary Outlook 2010 / 2013 support
- Working with encrypted Text and the Clipboard.
Remove necessity to reboot in the installer:
The Gpg4win installer should get a proper handling of running processes and make sure that everything is killed correctly when updating / uninstalling so that the Windows 98'ish "Reboot Now" will usally not anymore happen.