sudo apt-get install mutt lynx

mkdir -p ~/.mutt/cache/headers
mkdir ~/.mutt/cache/bodies
touch ~/.mutt/certificates
touch ~/.mutt/muttrc
touch ~/.mutt/mailcap

### Create a file ~/.mutt/passwords and add
set smtp_pass= "your-pass"
set imap_pass= "your-pass"


### Cipher with gpg
gpg --gen-key
gpg -r your_mail@gmail.com -e ~/.mutt/passwords
shred ~/.mutt/passwords
rm ~/.mutt/passwords


### Create ~/.mutt/mailcap file and add
text/html; lynx -dump %s; nametemplate=%s.html; copiousoutput


### Edit ~/.mutt/muttrc with

# SSL hardening
set ssl_force_tls=yes
set ssl_starttls=yes
set ssl_use_tlsv1=no
set ssl_use_tlsv1_1=no
set ssl_use_tlsv1_2=yes
set ssl_verify_dates=yes
set ssl_verify_host=yes

#TOFU (this does not work in debian, you should install openssl libraries...)
#unset ssl_usesystemcerts
#set certificate_file=~/.mutt/gmailcerts

set from= "user@gmail.com"
set realname= "name surname"
set imap_user= "user@gmail.com"
set folder = "imaps://imap.gmail.com:993"
set spoolfile = "imaps://imap.gmail.com/INBOX"
set postponed="imaps://imap.gmail.com/[Gmail]/Drafts"

set editor="vim +13 -c 'set nobackup' -c 'set noswapfile' -c 'set nowritebackup' -c 'set tw=72 ft=mail noautoindent'"

bind index G imap-fetch-mail #Refresh botton is now G

set certificate_file = "~/.mutt/certificates"

set smtp_url ="smtp://user@smtp.gmail.com:587"
set move = no
unset record
set imap_keepalive = 900

set mailcap_path = "~/.mutt/mailcap"
auto_view text/html

###passwords with GPG encryption
source "gpg -d ~/.mutt/passwords.gpg |"

#source ~/.mutt/gpg.rc
# Use GPGME
set crypt_use_gpgme = yes
set crypt_autosign = yes
set pgp_sign_as = AAAABBBB
set pgp_timeout = 3600
set pgp_good_sign="^gpgv?: Good signature from "
# Sign replies to signed email
set crypt_replysign = yes
# Encrypt replies to encrypted email
set crypt_replyencrypt = yes
# Encrypt and sign replies to encrypted and signed email
set crypt_replysignencrypted = yes
# Attempt to verify email signatures automatically
set crypt_verify_sig = yes
# fetch keys
set pgp_getkeys_command="pkspxycwrap %r"



# key binds
bind compose p  pgp-menu
macro compose Y pfy "send mail without GPG"