[Gpg4win-devel] Gpg4win and Claws Mail

[Andrej Kacian]

Hello,

after being slightly disappointed by yet another Gpg4win release with
an ancient Claws Mail version (3.9.1 is over 2 years old), and after
reading the remarks at http://wiki.gnupg.org/Gpg4win/Roadmap, I would
like to open a discussion about the way forward.

Keeping 3.9.1 is not really acceptable from security point of view, if
for nothing else, then because of the recent SSL/TLS vulnerabilities,
and mail servers ceasing to support SSLv3 en masse, making Claws Mail
3.9.1 unable to even talk to most of them.

After some time of neglect, we are currently preparing an updated
Windows release, and things look good for keeping it reasonably
supported for the foreseeable future.

As I see it, there are two options:

a) You drop Claws Mail from Gpg4win, and we drop GnuPG, GPGME and GPA
   from our Windows package, like the mentioned Roadmap wiki page
   suggests.

b) Claws Mail stays in Gpg4win, and we work together to keep it
   updated.

Personally, I would prefer option A, not because I don't like to work
with others, but because it would make things simpler - we could drop
lot of dependency libraries, and so could you. It would also allow both
projects to provide new releases without waiting for the other one.

Looking forward to hearing your opinions, guys.

Regards,
-- 
Andrej