After installation it is available in the Gpg4win start menu or online:
http://www.gpg4win.org/doc/en/gpg4win-compendium.html
-If you used Gpg4win 1.x or another program in the past, please check
-out the migration hints in the Gpg4win Compendium's appendix:
-http://www.gpg4win.org/doc/en/gpg4win-compendium_36.html
-
Please read the section "3. Known Bugs (and Workarounds)" of this
README before you start working with Gpg4win.
Gpg4win supports these platforms:
- * Operating System: Windows XP, Vista, 7, 8 (for all: 32/64 bit)
+ * Operating System: Windows XP and later Versions (for all: 32/64 bit)
- * MS Outlook: 2003, 2007, 2010, 2013
+ * MS Outlook: 2003, 2007, 2010, 2013, 2016 (2010 and later also in 64bit)
2. Changes
New in Gpg4win Version !VERSION! (!BUILD_ISODATE!)
--------------------------------------------------
+-----------------------------------------
+
+- GnuPG is now of the modern 2.1 variant. See:
+ https://www.gnupg.org/faq/whats-new-in-2.1.html
+ for more information about this.
+
+- GpgOL is now also supported for 64bit Outlook.
+
+- GpgOL for Outlook 2010 and later now uses toggle buttons
+ to let you select Encypt and Sign. The operations are done
+ when the mail is sent, including all attachments,
+ using a standard format (MIME).
+
+- GpgOL for Outlook 2010 and later now automatically decrypts mails
+ again.
+
+- All 68 KDE translations for Kleopatra are now included in Gpg4win.
+
+- Kleopatra uses an updated icon theme.
+
+- Kleopatra now shows the used curve in for ECC keys under technical
+ details.
+
+- Kleopatra has been updated to a new set of base libraries.
+
+- Binaries are now all installed in a bin subdirectory. DBus
+ and kbuildsycoa are no longer required. This fixes the startup issues
+ of Kleopatra some users were facing.
+
+- After importing a secret key in Kleopatra you will be asked to directly
+ mark it as your own key. (Ownertrust)
+
+- Kleopatra now allows you to create ECC keys in the Advanced Settings
+ during Key generation.
+
+- Kleopatras file menu now also offers to encrypt Folders.
+
+- Kleopatra has a new option to print a secret key through the paperkey tool.
+
+- GPA and Kleopatra are now registred for OpenPGP and S/MIME related file extensions.
+
+- The file encryption dialog in Kleopatra has been redesigned to reduce steps and
+ improve user experience.
-- GnuPG:
- * Fixed possible infinite recursion in the compressed packet
- parser. [CVE-2013-4402]
+- Kleopatra automatically detects the type of an input file and automatically starts
+ the corresponding action (e.g. decrypt).
- * Support for SPR332 and 532 pinpads.
+- Symmetric (password only) encryption is now accessible through Kleopatra and can
+ be combined with public-key encryption.
-- Kleopatra:
- * Kleopatra no longer crashes when using Microsoft Office IME.
+- Pinentry now enables you to inspect the typed passphrase.
-3. Known Bugs (and Workarounds)
-===============================
+- Kleopatra now supports OpenPGP Smartcards management.
-- Using smart cards with Kleopatra:
+- GpgOL for Outlook 2010 and later has a new interface to show
+ the signature / encryption state inside of Outlook.
- * OpenPGP card
- The initial setting of a smart card with Kleopatra is not yet
- possible. Please run the following steps once to use your smart
- card with Kleopatra.
- Use the gpg command line tool to create a new OpenPGP certificate
- on your card (a) or to activate your existing certificate of
- your card (b):
+- GnuPG now supports https and uses the https sks-keyserver pool
+ by default.
- (a) Create new certificate
- - Insert card.
- - Run "gpg --card-edit".
- - Switch to admin modus by enter: "admin".
- - Enter "generate" to create a new certificate.
+- GpgOL now supports sending and receiving HTML Mails
- (b) Activate existing certificate of your card
- - Import associated (public) certificate of your card (e.g.
- from certificate server or from a exported certificate file).
- - Insert card.
- - Run "gpg --card-status".
+- Kleopatra now supports to directly import missing certificates
+ when verifying a file.
- * X.509 Telesec Netkey 3 card
- Use Kleopatra to initialize your card:
- - Insert card.
- - Click on the flashing Kleopatra system tray icon (or use the
- context menu "smart card" of the system tray icon and run the
- "learn card" command directly).
+- Kleopatra has improved file verification messages.
- After finishing these steps your OpenPGP / X.509 certificate from your
- smart card is shown in Kleopatra under the tab "My certificates"
- (marked with a smart card icon).
+- Many bugfixes and minor improvements.
-- Using the Outlook Plugin "GpgOL":
+
+3. Additional Notes
+===================
+- General
+
+ * For 3.0 we plan to offer a quick switch to a more automatic mode that
+ will set the gnupg options:
+
+ auto-key-locate wkd
+ auto-key-retrieve
+ trust-model tofu+pgp
+
+ As this is not properly handled everywhere (especially Kleopatra's
+ file verification dialog) this is not yet default or easily accessible.
+
+ You can add it manually to your gpg.conf. The trust-model is fully
+ supported by GpgOL.
+
+- Kleopatra
+
+ * Netkey cards are not yet supported by the new Manage Smartcard view.
+
+- GpgOL
+
+ * It is not possible to modify mails (e.g. moving / flagging the mail)
+ while they are shown decrypted.
+ To workaround this unselect the crypto mail and then make changes
+ through the right click context menu or move it with drag and drop.
+
+ * Crypto mails forwarded as attachment are not properly handled.
+
+ * The certificate selection dialog sometimes opens in the background and
+ needs an overhaul.
+
+ * Localization is incomplete
+
+
+- GpgOL for Outlook 2003 and 2007 (deprecated):
+
+ Outlook 2003 and 2007 support is deprecated and may be removed in a
+ future version.
* You defintely should create copies of your old encrypted/signed
emails before installing GpgOL, e.g. in the form of PST files.
does not yet work.
[see https://bugs.g10code.com/gnupg/issue1102]
(Please note, using SMTP with GpgOL and Exchange seems to be work.
- Or use GpgOL with Outlook 2010/2013.)
+ Or use GpgOL with Outlook 2010 or later.)
* For Outlook 2003/2007 only:
Encrypted E-Mails occuring un-encrypted on the email server: It
Or use GpgOL with Outlook 2010/2013.
-
4. Installation
===============