Re: Bug#466669: ITP: squirrelmail-gpg -- GnuPG plugin for SquirrelMail

["Milan P. Stanic" <mps@arvanta.net>]

On Wed, Feb 20, 2008 at 10:32:01AM +0100, Jan Hauke Rahm wrote:
> Package: wnpp
> Severity: wishlist
> Owner: Jan Hauke Rahm <info@jhr-online.de>
> 
> * Package name    : squirrelmail-gpg
>   Version         : 2.1
>   Upstream Author : Brian G. Peterson <gpg@braverock.com>
> * URL             : http://www.squirrelmail.org/plugin_view.php?id=153
> * License         : GPL
>   Programming Lang: PHP
>   Description     : GnuPG plugin for SquirrelMail
> 
>  This is a general purpose encryption, decryption, and digital signature plugin
>  for SquirrelMail that implements the OpenPGP standard using GPG.

Private key is on the webmail server? And this should be secure?
I think that warnings should be written somewhere in description about
risks with such plugin.