Husk

Husk is a pass-through solution for automatic OpenPGP encryption.

Husk is an email filter (milter) for MTAs which encrypts emails while they pass through it. It facilitates Web-of-Trust technologies to use decentralized and federated certificate authorities as sources for authenticated OpenPGP certificates. It aims to reduce the amount of administrative effort of obtaining and keeping them up to date by establishing narrow, focused trust delegations. Husk can be used to encrypt emails for services which cannot encrypt on their own – like notification systems or issue trackers, or being used at the end of transport to implement zero-access encryption (for email at rest).

Husk is written in Rust and uses Sequoia PGP for encryption and certificate handling.

Status

Milestone 3 is reached and with it Husk has aquired a set of new features:

• Online sources (keyservers, WKD, DANE) are now queried for missing certificates.
• Introducers are now available: certificates are only used if they are certified by an introducer and match its list of configured domains.
• Locals are available: These are certificates hand picked and added by the administrator.

Documentation

The documentation (with install instructions) can be found here.

Website

This project has a website with more background information.

Funding

This project is funded through the NGI0 Commons Fund, a fund established by NLnet.

License

Husk is licensed under AGPL 3.0 - for details read the included license.txt file or find it online.