thinkst : thoughts...

Monday, September 19, 2011

Chrome Extension for gpg in Gmail

Last month we released an alpha version of cr-gpg. This is a simple Chrome extension to enable gpg functionality in gmail (or Apps for Domains). (If you don't know what gpg is, you should first read this and this.)

Installation :






You can grab the extension from [here] and a double click should install it , after the install is completed you should see the image above if you navigate to chrome://extensions :

Options :


Once you have installed the plugin, there are 2 required configuration options:
1) Directory with gpg binary
2) Temp folder path (writable by the browser)

(cr-gpg simply calls out to the gpg installation on your machine. Option [1] therefore is asking where it can find the gpg executable, and Option [2] is looking for a scratch directory to do its work). (We make some effort to ensure that the temp directory is well maintained). You should be able to click "Use Default" on most installations.

The "Encrypt to self" option is fairly self explanatory. If i encrypt (and send) an email to you, the encrypted email will be in my sent-items. I would be unable to read this mail though (since it has been encrypted with your public key, not mines). If you would like to be able to read the mails as well, then simply select this option (and enter your email address in the next field: "Encrypt to self Email Address")

Now click "Save" to save these options. (cr-gpg will do some basic sanity checking on your options). You can return to these options through the extensions window or by clicking the lock icon added to your browser chrome

Convenience Functions :




The other convenience functions enabled through the lock icon allow you to do simple gpg key management, encrypt and sign blocks of text.

Embedded Functions :




When typing an email in GMail, we should now see an additional link: "Encrypt Message"
(If we have the recipients public key,) simply clicking this should encrypt the mail to the recipient as seen below.



When you receive an encrypted email, simply click on "Decrypt Message".



Decrypting an email requires access to your private key (which is usually password protected.) Enter the password, Click "OK" and you should be good to go..



Give it a try [here], and let us know if you have bugs [here], comments, complaints or suggestions..

35 comments:

  1. Thanks! I've been looking for something like this. Are you going to publish it on the Chrome Web Store?

    ReplyDelete
  2. Thats a great idea Dave. We will kick it through. Please let us know if you have thoughts / ideas / bugs..

    ReplyDelete
  3. Thanks for a great tool - have been looking for this!

    Is it open source? Any way to verify security and privacy in this extension for us non-programmers?

    ReplyDelete
  4. Hi Troels.
    You are very welcome (in truth we use it a lot too) ;>
    The src is available at: https://github.com/RC1140/cr-gpg/ (but this doesn't help too much if you are a non programmer)

    What might help is knowing that we intentionally kept the tool really really simple (to minimize our chances of doing stuff wrong). We pass the heavy lifting to gpg (which regularly undergoes scrutiny by many).

    Let us know how it goes for you ;>

    ReplyDelete
  5. I could not install the extension, see screenshot here:
    http://malatsblog.blogspot.com/2011/11/cr-gpg.html

    ReplyDelete
  6. Great! I've been looking for something like this for a while. Tell Haroon to give you a promotion!

    ReplyDelete
  7. @Malat..

    We will do a quick check to see whats up (i suspect we've never run it on Win64).

    @Dave

    Done!

    ReplyDelete
  8. please fix it for win64 machines, it's a must have extension!

    ReplyDelete
  9. I'm working on a very similar extension except rather than use the gpg binary I'm working on making a JS library to handle that. Details are at: http://prometheusx.net/introducing-gmail-crypt/ Perhaps there would be some interest in working together?

    ReplyDelete
  10. i will try it Sean, god bless you if works fine :-D

    ReplyDelete
  11. Hi @malat.

    The last Chrome update that people got seemed to have a regression with plugins resulting in that error. (It should work fine on win64 now) and if you are still getting that error (with ours or other extensions), try downloading the file to a different directory (other than downloads) and adding it from there..

    ReplyDelete
  12. Should it work with new gmail theme?

    ReplyDelete
  13. Hi Anon.

    Sadly GOOG didnt give us a heads-up before changing the Theme, so we are playing catch-up. Won't work on the new theme yet (although you can use the icon to use it manually till then)

    We are on it..

    ReplyDelete
  14. Installing this (or attempting) just gives "Package is invalid: CRX_FILE_NOT_READABLE"

    ReplyDelete
  15. Hi

    To fix the Package is invalid: CRX_FILE_NOT_READABLE error please follow the instructions @ (https://github.com/RC1140/cr-gpg/wiki/CRX_FILE_NOT_READABLE ) until Google fixes the issue.

    ReplyDelete
  16. thanks a lot, excellent work...!

    ReplyDelete
  17. I tried following the instructions from Jameel, but I still get the same error message.

    ReplyDelete
  18. CRX_FILE_NOT_READABLE ?
    on which OS ?

    ReplyDelete
  19. I also get the "CRX_FILE_NOT_READABLE" error while following Jameel's workaround...using XP SP3 with Chrome...any HELP available?

    ReplyDelete
  20. Hi Anonymous

    I am busy looking into this atm and will let you know as soon as I have a solution

    ReplyDelete
  21. Hi Anonymous

    I have tested this on WinXp SP3 using the latest version of chrome (Stable) with 0.7.5 of the plugin and the plugin works fine.

    If you are still having issues drop me a mail at jameel [at] thinkst.com and I will see if I can help you out further.

    ReplyDelete
  22. Still trying to figure out where the "Directory with gpg binary" is. Is this the chrome Extensions directory?

    ReplyDelete
  23. Hi Anon
    This is the directory on your system where the gpg binary is located. If you are not sure where its located , click the 'Use default' link next to the text box.

    This will use the default for your system.

    ReplyDelete
  24. Hello,

    Not yet sure if this is a bug or I am missing something obvious... Installed cr-gpg 0.7.8. It runs under Chromium 18.0.996.0 on Ubuntu 10.04 (32bit, i686).

    I compose a message to my second address (and I have the key for that address), press Encrypt message, but nothing happens. When I click Sign message, I see the passphrase prompt, but OK button does nothing.

    ReplyDelete
  25. Hi Dmitri

    From what you mentioned it sounds as if you might have a invalid path to your binary.

    Can you please verify that when you save your options you get the options saved alert box.

    Also if possible can you verify your options by either posting them here or sending me a mail @ jameel at thinkst.com.

    ReplyDelete
  26. Thank you for the quick reply, Jameel.

    There is no 'Options saved' box, but when I view Options next time, the path is correct.

    ReplyDelete
  27. For me the default path on ubuntu was incorrect. You can attempt to find it by typing "locate gpg | grep bin" in the console. For me it turned out to be /usr/bin/

    ReplyDelete
  28. Where are the gpg app on mac os?

    ReplyDelete
  29. Hi Pan.

    You need to install it from a package manager like mac ports or download and install from: http://macgpg.sourceforge.net/

    ReplyDelete
  30. Hi Pan

    You can use the command `which gpg` from the console to get the full path to the application (if its installed).

    Alternatively its general location should be @ '/opt/local/bin/gpg' which is the default location cr-gpg uses.

    ReplyDelete
    Replies
    1. I'm using WindowsXP Home. After I install the extension and try to configure the options using Default, I get an error "options saved but parameters provided invalic". It appears the path to the gpg binary is not correct - but I have no idea where it is. I'm not even certain it was installed. I've searched my hard drive for the directory and cannot find anything with "gpg" in the file name.

      Suggestions?

      Delete
    2. Hi

      The prefered method for windows is to grab the gpg application from (http://www.gpg4win.org/).
      They have a nice installer as well as various applications to get your started without the need to use the command line.

      Once you have installed gpg4win the default path should work for you unless you install to a different location. In that case use the example provided as a means to find the gpg binary.

      I hope this helps otherwise drop me a mail @ jameel at thinkst.com and I can try to help you out more.

      Delete
  31. Hi. I´m using GPGtools for mac and all I find is "/usr/local/macgpg2/bin/gpg2" which the addon do not recognize. What am I doing wrong.

    Regards
    Glenn

    ReplyDelete
  32. I found a workaround for OS X lion with GPGtools, Used the above mentioned path, and in the macgpg2 folder I copied and renamed gpg2 to just gpg, and everything works. Thank you very ,much for this excellent addon. Helps alot, Thanks again

    Regards Glenn

    ReplyDelete
  33. Hi Glenn

    Thanks for providing a solution for others as well. Hopefully this will help others when they need to get setup.

    ReplyDelete

 
home | blog | contact us | Copyright 2011 - thinkst.com