GpgFrontend 2.2.3

What's new in 2.2.3

v2.2.3 is recommended for all users. It is a drop-in upgrade from 2.2.2：your profiles, keys and settings carry over unchanged.

What's new

• Email module reworked. Send signed and encrypted mail over SMTP and read your mailboxes over IMAP, with a smoother workflow from writing to sending and a clearer view of which parts of each message are signed or encrypted.
• OpenPGP Structure Inspector shows what is inside any message, key or signature.
• Profile packages are truly cross-platform. Export on one operating system and open on any other, with your key databases working. Machine-specific settings stay behind.
• Key database changes apply right away, with no restart.
• Temporary profiles that are deleted completely when you close their window.
• Right-to-left text is detected automatically. (#268)
• Simpler toolbar. Encrypt and Decrypt variants share one button each.
• Redesigned key group management.
• New languages: Polish (thanks to Ralts) and Turkish (thanks to @cerob, #273).

Security and structural improvements

• Module system rewritten. Modules are signed packages, checked before they load, and can only use the features they declare. Third-party modules run only after you approve them. Modules can now add their own menus, tabs, views and settings pages, and the module manager shows which modules were refused and why.
• Profile packages rebuilt. Exported profiles always need a passphrase, damaged or tampered packages are detected, and opening one leaves no unencrypted copy on disk.
• Secrets handled more carefully. Passphrases are wiped from memory after use, and cached passphrases are kept separate for each key database.
• No partial or unverified output. Decrypted files and archives are written only after the integrity check passes, so you never get a half-written or tampered result. A failed or cancelled operation leaves nothing behind.
• Harder to encrypt to the wrong people. An optional single-recipient mode stops old checkmarks from adding extra recipients, and you can choose to confirm before encrypting to more than one person. When encryption is not possible, you are told which key is the problem and why.
• Up-to-date OpenPGP. Post-quantum encryption now follows the final standard (RFC 9980), and you are warned before mixing post-quantum and classical recipients. …

Full release notes »