{"id":65868,"date":"2017-07-30T04:34:30","date_gmt":"2017-07-30T04:34:30","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/secure-messaging\/"},"modified":"2017-12-30T04:24:15","modified_gmt":"2017-12-30T04:24:15","slug":"secure-messaging","status":"publish","type":"plugin","link":"https:\/\/nl-be.wordpress.org\/plugins\/secure-messaging\/","author":295019,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_crdt_document":"","version":"0.4.1","stable_tag":"0.4.1","tested":"4.9.29","requires":"4.7.3","requires_php":"","requires_plugins":"","header_name":"Secure Messaging","header_author":"Eric Mann","header_description":"","assets_banners_color":"","last_updated":"2017-12-30 04:24:15","external_support_url":"","external_repository_url":"","donate_link":"https:\/\/paypal.me\/eam","header_plugin_uri":"https:\/\/eamann.com","header_author_uri":"https:\/\/eamann.com","rating":0,"author_block_rating":0,"active_installs":0,"downloads":1883,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":[],"upgrade_notice":{"0.4.0":"<p>Both PHP 7 and a server-installed GPG environment are required for proper operation!<\/p>"},"ratings":{"1":0,"2":0,"3":0,"4":0,"5":0},"assets_icons":{"icon-256x256.png":{"filename":"icon-256x256.png","revision":"1705367","resolution":"256x256","location":"assets"}},"assets_banners":[],"assets_blueprints":{},"all_blocks":[],"tagged_versions":["0.3.0","0.4.0","0.4.1"],"block_files":[],"assets_screenshots":[],"screenshots":[],"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[15413,15414,600],"plugin_category":[],"plugin_contributors":[79892],"plugin_business_model":[],"class_list":["post-65868","plugin","type-plugin","status-publish","hentry","plugin_tags-gpg","plugin_tags-pgp","plugin_tags-security","plugin_contributors-ericmann","plugin_committers-ericmann"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/secure-messaging\/assets\/icon-256x256.png?rev=1705367","icon_2x":"https:\/\/ps.w.org\/secure-messaging\/assets\/icon-256x256.png?rev=1705367","generated":false},"screenshots":[],"raw_content":"<!--section=description-->\n<p>Automatically encrypt certain WordPress messages using your GPG public key to ensure no one but you can ever read the message.<\/p>\n\n<p>This is primarily used to secure password reset emails so, even if an attacker were to gain access to your email account, they couldn't change your WordPress password.<\/p>\n\n<!--section=installation-->\n<h4>Requirements<\/h4>\n\n<p>This plugin requires PHP 7 or greater to operate. It <em>does not<\/em> check for PHP compatibility directly and <em>will not work<\/em> if installed on an older server.<\/p>\n\n<p>The GPG functionality requires GPG to be installed and available to WordPress. The plugin will try to test for this functionality upon activation, but <em>will not work<\/em> if GPG is unavailable.<\/p>\n\n<h4>Manual Installation<\/h4>\n\n<ol>\n<li>Upload the entire <code>\/secure-messaging<\/code> directory to the <code>\/wp-content\/plugins\/<\/code> directory.<\/li>\n<li>Activate Secure Messaging through the 'Plugins' menu in WordPress.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt>Installation Instructions<\/dt>\n<dd><h4>Requirements<\/h4>\n\n<p>This plugin requires PHP 7 or greater to operate. It <em>does not<\/em> check for PHP compatibility directly and <em>will not work<\/em> if installed on an older server.<\/p>\n\n<p>The GPG functionality requires GPG to be installed and available to WordPress. The plugin will try to test for this functionality upon activation, but <em>will not work<\/em> if GPG is unavailable.<\/p>\n\n<h4>Manual Installation<\/h4>\n\n<ol>\n<li>Upload the entire <code>\/secure-messaging<\/code> directory to the <code>\/wp-content\/plugins\/<\/code> directory.<\/li>\n<li>Activate Secure Messaging through the 'Plugins' menu in WordPress.<\/li>\n<\/ol><\/dd>\n<dt>Does the server sign messages as well?<\/dt>\n<dd><p>Not by default. On many installations, the GPG keychain folder needs to live in the <code>\/wp-content<\/code> directory and might be readable by third parties. To avoid leaking GPG secret keys, none are ever added by the system in the first place. This means the server can't sign messages before they're sent.<\/p><\/dd>\n<dt>Is there a limit to the size of the GPG key I can use?<\/dt>\n<dd><p>Not to my knowledge. We're using Pear's <a href=\"http:\/\/pear.php.net\/package\/Crypt_GPG\">Crypt_GPG<\/a> module, which defer's to the server's GPG module directly. So long as GPG itself supports a key, this plugin will as well.<\/p><\/dd>\n<dt>What if my host doesn't support GPG?<\/dt>\n<dd><p>Not every host does. Most self-hosting platforms will have GPG support by default, but some (like <em>WP Engine<\/em>) do not support the GPG subsystem and will not allow you to proactively encrypt messages.<\/p>\n\n<p>I highly suggest you look into a managed host like <a href=\"https:\/\/www.liquidweb.com\/managedwordpress\/\">Liquid Web<\/a>, who <em>does<\/em> support GPG, for your hosting needs.<\/p>\n\n<p><em>Note:<\/em> This plugin has been tested to work with both Liquid Web's managed WordPress hosting platform and the <a href=\"https:\/\/github.com\/10up\/wp-local-docker\">Dockerized WordPress<\/a> system published by <a href=\"https:\/\/10up.com\/\">10up<\/a>.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>0.4.1<\/h4>\n\n<ul>\n<li>Fix: Explicitly add Eric Mann's public key for the GPG subsystem test<\/li>\n<\/ul>\n\n<h4>0.4.0<\/h4>\n\n<ul>\n<li>Update: Store the public key fingerprint instead of the entire key for better references later<\/li>\n<li>Update: Introduce the <code>SECUREMSG_KEYCHAIN_DIR<\/code> constant for overriding where keys are stored<\/li>\n<li>Fix: Test for the presence of the GPG subsystem upon activation to prevent downstream errors<\/li>\n<\/ul>\n\n<h4>0.3.0<\/h4>\n\n<ul>\n<li>Update: Switch to the Pear GPG library for better RSA compatibility<\/li>\n<\/ul>\n\n<h4>0.2.0<\/h4>\n\n<ul>\n<li>Update: Use a new GPG library for better PHP compatibility<\/li>\n<li>Update: Add nonce checks on the profile page<\/li>\n<li>Update: Add Romanian translations<\/li>\n<\/ul>\n\n<h4>0.1.0<\/h4>\n\n<ul>\n<li>First release<\/li>\n<\/ul>","raw_excerpt":"GPG security for WordPress messaging.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/nl-be.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/65868","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nl-be.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/nl-be.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/nl-be.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=65868"}],"author":[{"embeddable":true,"href":"https:\/\/nl-be.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/ericmann"}],"wp:attachment":[{"href":"https:\/\/nl-be.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=65868"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/nl-be.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=65868"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/nl-be.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=65868"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/nl-be.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=65868"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/nl-be.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=65868"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/nl-be.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=65868"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}