securedrop
securedrop copied to clipboard
freedomofpress
Allow sources to contact specific journalists
I had a discussion with Dave Maass, media relation coordinator at EFF. He pointed out that some sources might contact a specific media organization because they want to get in touch with a specific journalist, and don't want anyone else to have access.
A way that this could work is:
Each journalist can have their own airgapped viewing station computer, and their own Tails USB stick with their own PGP key that only they know the passwords to.
Whenever a source sends a message or uploads a document, they get to choose which journalists have access to what they're about to send. The default is all journalists, and each time the source logs back in the checkboxes are in the same state as the last time the form was submitted.
When journalists login to their Tor hidden service URL, they only see sources that have chosen to encrypt information to them.
Media orgs should also be able to choose to just have one public key and share it (like how SecureDrop currently works), and the interface should be slightly cleaner in that case.
This is one of the features of globaleaks part of the 0.2 rewrite from scratch, with which we've delivered publeaks with more than 28 different media http://www.publeaks.nl . Please consider that the ability to the whistleblower to select by default or not all the recipient/journo change hardly the way journo cooperate. Additionally it is valuable to have journos to know which other journo have received the same tip (has been selected by the WB). I think that GL & SD product features will get alligned, as the use case are the same.
If this is ever implemented, we should hide the recipients as suggested in #13. See https://github.com/freedomofpress/securedrop/issues/13#issuecomment-86202424 for context.
Yo Peeps... now that I see this functionality has been added for the 0.4 release, I figure this should get some feedback from those working on it—as the existing Journalist UI is... err, problematic, and it'd be nice to see this elegantly folded-in to an updated UI.
