#1367·stalwart

: Outgoing Encryption Gateway

Author: vifinoCreated Apr 1, 2025Updated Jul 18, 2026
Labelsenhancement

Which feature or improvement would you like to request?

There are many services, like ticket systems or CRMs, that send possibly sensitive data to users via plain mails. Unfortunately, not many have support for sending encrypted emails on their own.

I'd love to see Stalwart be able to encrypt outgoing messages (for specific recipients) on its own using S/MIME and GPG. I can imagine that Stalwart already has a bunch of the necessary elements implemented, like the actual S/MIME or GPG encryption.

What I imagine is necessary:

  1. Addition of an encryption function somewhere in the outgoing path (Sieve extension? Routing option?)
  2. Some form of storage for the certificates. For local destinations, the same public keys as for at-rest encryption could be used, but something more flexible is necessary for the rest.

Decrypting incoming mails is explicitly not in scope of this feature request due to its complexity, but perhaps also very nice to have.

Is your feature request related to a problem?

I'm having a problem with...

Code of Conduct

  • I agree to follow this project's Code of Conduct