[Gpg4win-devel] GPGOl 2010 feedback from Tom Webster

[Bernhard Reiter]

Here is some feedback, forwarded with permission from Tom.

----------Original Message----------
From: "Webster Tom"
Sent: Wednesday 23 April 2014, 16:10:41
To: "Bernhard Reiter" <bernhard at intevation.de>
Subject: RE: [Gpg4win-users-en] gpgOL and Outlook 2010

I have finally found the time to help point out some of the interface and 
workflow issues I encountered in GpgOL.

I have included some screenshots to help illustrate some of the points.


General

* The "Select Keys" window brings all other Outlook windows to a halt, 
freezing the application.
* Outlook 2010 has stability issues when interacting with GpgOL.
* If a user selects to encrypt an email, it should be encrypted when the user 
clicks the "Send" button. This way, the user can mark a message for 
encryption or signing, but continue to edit the message.
* Encrypting files separately from emails is very dangerous, users assume that 
the contents of the email (including attachments) are encrypted when 
the "Encrypt" button is clicked. This results in users sending sensitive 
attachments unencrypted.
* Files should be encrypted automatically if the message is marked for 
encryption.
* Selecting keys for file and message encryption separately is annoying to 
users and very time consuming on emails with many recipients. The "Select 
Keys" dialog should only show once the user has clicked "Send" and the system 
cannot auto-match a key to someone in the list.

Screenshot 1

* If only PGP keys are present on the system, x.509 shouldn't be shown.
* When using hosted Exchange, the recipient field shows the full user DN, this 
is confusing to users.

Screenshot 2

* Checkboxes don't behave as expected.
* Right clicking to select a key or certificate only works once (if you right 
click, then left click in whitespace, you can no longer right click the 
selection area).

Screenshot 3

* The "Select a key" list should be sorted alphabetically by default.

The best advice I can give is this: Emulate the interface of Enigmail with 
Mozilla Thunderbird. I believe this is the proper way to implement a GPG 
interface in a mail client. It makes informed assumptions about user behavior 
and includes options important for system administrators and users.
------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 1.PNG
Type: image/png
Size: 48296 bytes
Desc: not available
URL: <http://lists.wald.intevation.org/pipermail/gpg4win-devel/attachments/20140423/881e7dc6/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 2.PNG
Type: image/png
Size: 11675 bytes
Desc: not available
URL: <http://lists.wald.intevation.org/pipermail/gpg4win-devel/attachments/20140423/881e7dc6/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 3.PNG
Type: image/png
Size: 17190 bytes
Desc: not available
URL: <http://lists.wald.intevation.org/pipermail/gpg4win-devel/attachments/20140423/881e7dc6/attachment-0005.png>