flowcrypt / flowcrypt-browser Goto Github PK

FlowCrypt Browser extension for Chrome and Firefox

License: Other

HTML 2.02% JavaScript 48.45% CSS 2.01% TypeScript 47.29% Shell 0.17% Python 0.05%

flowcrypt-browser's Introduction

🌐 FlowCrypt Browser Extension (Encrypt Gmail with PGP)

👋 Try our extension
⬇ Download the FlowCrypt Browser Extension on your device from the FlowCrypt Downloads page.

💻 Developers

We develop the project in TypeScript. However, since browsers only understand JavaScript, the project needs to be transpiled to it. You need to build the project the first time you download/clone it, and then build it again after each change you make to see the result in the browser. To get started, please follow the instructions below:

Navigate to the project folder and install the tooling by running the following commands:

# 1. Navigate to the appropriate folder
$ cd some/folder/flowcrypt-browser
# 2. Install the tooling
$ npm install

To build the project (currently available for Linux and Mac only), run the following command:

$ npm run build

After executing the build command, you can find your built project in the build/chrome-consumer and build/firefox-consumer folders.

ℹ️ Note: The build folder also contains other versions of the browser extension.

✔️ To load the extension in Google Chrome, please follow these steps:

Open your Chrome browser and navigate to chrome://extensions/.
If it isn't already enabled, toggle on the Developer mode. The switch button is located at the top-right corner.
Click on the Load unpacked button.
Browse to the flowcrypt-browser/build folder and select the appropriate project version, either chrome-consumer or chrome-enterprise.

✔️ To load the extension in Firefox, please follow these steps:

Open your Firefox browser and navigate to about:debugging.
Click on the This Firefox tab.
Click on the Load Temporary Add-on button located at the top-right corner.
Browse to the flowcrypt-browser/build folder, open the firefox-consumer project version folder, and select the manifest.json file.

If you wish, you can also use the run_firefox script (npm run run_firefox) included in the package.json file to run the Firefox extension in a separate instance without interfering with the production extension installed in your browser.

Printing debug data to test logs can be accomplished using a special Debug class.

📚 Other guides

flowcrypt-browser's People

Contributors

Stargazers

Watchers

flowcrypt-browser's Issues

refactor with newest openpgp.js library

saving encrypted drafts while typing

add drafts button in new message to see a list of encrypted drafts
add info into each encrypted message, which will get converted to a clickable link to continue commposing the draft, either reply or new
for reply, opening the original conversation will result in pulling the draft from gmail with list and showing it

register all emails on keyserver, not just main one

locally encrypted / decrypted attachments

[dev] option to flush locally saved pubkeys

new message in thread deletes current draft

if window is open

search in contacts as I'm typing receiving address

only search from addresses the plugin has used (for now, unless there is easy access to search through all emails)
double check pubkey caching - seems to not be used

allow multiple receivers and encrypt for all, or none

refactor js directory structure

separate plugin js files from library files
introduce directory structure common, gmail, background[auth/migrate/..], ..
rename settings/common.js

onboarding: create or insert private key

call backend instead of MIT servers for key lookup + upload

oauth as first step of setup + check pubkey after + reduce dup keys

save my pubkey + encrypt with receiver as well as sender pubkeys

replace reply-to window with custom frame for encryption

option to submit manually added pubkey to private keyserver

gmail token refreshing on expiration

settings tab auth token refreshing / signal messaging

when token is expired and using gmail_api, only second click will currently go through

pass encrypted message through ajax request to pgp_block

badly formatted encrypted msgs before decrypting

input validation on setup: private key check

eg what if pubkey is entered

"Uncaught TypeError: Cannot read property 'toPublic' of undefined" on bad prvkey formatting (eg add a space) + unresponsive form

design: make clearer distinction when typing a secure message and when not

in a way that's visually pleasant

maybe message field background should contain a light gray lock pattern, similar experiments

very first msg after installing plugin / auth might not go through

double click protection: send message, reply

handling multiple gmail accounts

currently it will always send messages from the same account regardless of which gmail window I have open

using TAB when composing

should go field after field smoothly
should cause address search box to disappear

show version number in CryptUP plugin window + emails

ECC key support (google End-To-End)

sent with Google End-to-End
gnupg >=2.1.0 works
openpgp.js/Mailvelope doesn't work
ideally copy support from google
example:

current account should not be hard coded but fetched from gmail webpage

show last email sent in conversation + re-add reply box under

currently I need to refresh page to see it show up

refactor pubkeys.js

auto-resize pgp iframes on main window resize

signal.js -> replace with native chrome app messaging

key shortcuts to reply like "A" should also lead to a secure reply box

also a button to reply (possibly to be deleted or replaced)

allow send+receive binary attachments + refactor attachment flow + reply with attachment

replied to messages don't show in other people's threads

(always shows as a new thread) - could be because reply to and from emails are not exact/including name

wrong pubkey on keyserver notification/solution

Currently, after receiving a msg, it will say "error decrypting message, possibly wrong private key"

Instead it should check if the key it was encrypted with is the same as on the keyserver. If that is different from my current key, I should get option to update the keyserver.

(+ also keep checking this periodically even w/o receiving a msg - maybe during installation process)

Further, there should be a way to notify the other receiver that my key has updated. + they would replace the pubkey.

Later needs more thought - security.

https://mail.google.com/mail/u/1/#search/version+comment/15234bc702d22ecc
missing line between headers and block

some sort of pgp headers eg

Content-Type: multipart/signed; boundary="Apple-Mail=_204A6190-BBC2-4EDA-95A1-CE77D04B342D"; protocol="application/pgp-signature"; micalg=pgp-sha512 --Apple-Mail=_204A6190-BBC2-4EDA-95A1-CE77D04B342D Content-Type: multipart/alternative; boundary="Apple-Mail=_089C1A8D-ACE5-4035-9DDE-844E0445D516" --Apple-Mail=_089C1A8D-ACE5-4035-9DDE-844E0445D516 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8

newlines inside of message seem to be missing

import the original as a first default?