Re: [arch-general] Tbird 78.2 enable Master Password of GPG keys stored in profile unencrypted

2020-09-16 Thread Archange via arch-general



Le 16 septembre 2020 17:42:42 GMT+04:00, Severus  a 
écrit :
>
>
>On 9/16/20 15:46, Archange via arch-general wrote:
>> Le 16/09/2020 à 12:41, David C. Rankin a écrit :
>>> All,
>>>
>>>   Just a heads up. SuSE has been doing work with Thunderbird 78.2 trying to
>>> prepare for a move to it with the openPGP replacement for Enigmail. One 
>>> issue
>>> that has come from that is the realization that unless you enable a Master
>>> Password for thunderbird passwords, once you import your GPG keys, they will
>>> be stored unencrypted in your thunderbird profile. If you have never set a
>>> mater password for thunderbird before (I haven't), it looks like that will 
>>> be
>>> required with 78.2 hits.
>> 
>> Or just keep using GnuPG for private key handling, which is what I will
>> be doing.
>> 
>> Regards,
>> Archange
>> 
>Would it  be backported with security patches if we did not upgrade to
>78 series?

What would be backported?

I’m saying that even with Thunderbird 78, I’ll keep using GnuPG for private key 
handling since this is thanksfully supported.

Regards,
Archange


Re: [arch-general] [off-topic] Alternative to Thunderbird, with GPG support, caldav + cardav support, and ics remote webcal support and syncing

2020-09-16 Thread Javier via arch-general
On 9/16/20 3:51 AM, Bjoern Franke via arch-general wrote:
> Hi,
> 
>>
>> BTW, I just realized kmail doesn't support autocrypt either, :(  So 
>> defnitely kontact is not an alternative.
>>
> 
> did you stick on something now? I'm using Thunderbird for seveal years now, 
> switched to Evolution for short times from time to time, but some things were 
> also annoying like the big status bar which seems to be independent of the 
> screen size and theme. I remember using Kontact 10 years ago and it was 
> bloated and I got no idea why the whole Akonadi layers exists and if it would 
> scale.
> Somehow it's a pity that Sylspheed / Claws and other clients are not capable 
> of using CardDav/CalDav.
> 
> Regards
> Bjoern


It seems there are no alternatives, I'm afraid, :(.

The closer keeps being Kontact, but Kontact, besides not supporting autocrypt, 
and being bloated, discontinued some time back its support to windows.  It also 
has issues with ICS remote web calendars, it doesn't sync them, just load them 
statically without ever syncing them, which is an issue for work office365 ICS 
calendar, and others remote calendars requiring syncing from time to time.  The 
only thing where Kontact (well Kmail) is the way, is its support for gnupg, 
which for me is a plus, since I don't want to keep public keys on the gnupg 
keyring as well as on a TB database, and I'd still prefer to use the gnupg 
agent.  However given the lack of other features, plus not really liking 
akonadi, neither how bloated it is, then it didn't become the option for me 
unfortunately.

The hope might be getting extensions that would enable autocrypt for TB in the 
future.  But still, TB wouldn't be using gnupg, its keyring, neither its agent, 
so even if such extension would show up, it wouldn't be the option I was 
looking for, but perhaps the closest compromise available...

Greetings !

-- 
Javier



signature.asc
Description: OpenPGP digital signature


Re: [arch-general] Tbird 78.2 enable Master Password of GPG keys stored in profile unencrypted

2020-09-16 Thread Severus


On 9/16/20 15:46, Archange via arch-general wrote:
> Le 16/09/2020 à 12:41, David C. Rankin a écrit :
>> All,
>>
>>   Just a heads up. SuSE has been doing work with Thunderbird 78.2 trying to
>> prepare for a move to it with the openPGP replacement for Enigmail. One issue
>> that has come from that is the realization that unless you enable a Master
>> Password for thunderbird passwords, once you import your GPG keys, they will
>> be stored unencrypted in your thunderbird profile. If you have never set a
>> mater password for thunderbird before (I haven't), it looks like that will be
>> required with 78.2 hits.
> 
> Or just keep using GnuPG for private key handling, which is what I will
> be doing.
> 
> Regards,
> Archange
> 
Would it  be backported with security patches if we did not upgrade to
78 series?



signature.asc
Description: OpenPGP digital signature


Re: [arch-general] [off-topic] Alternative to Thunderbird, with GPG support, caldav + cardav support, and ics remote webcal support and syncing

2020-09-16 Thread Bjoern Franke via arch-general

Hi,



BTW, I just realized kmail doesn't support autocrypt either, :(  So defnitely 
kontact is not an alternative.



did you stick on something now? I'm using Thunderbird for seveal years 
now, switched to Evolution for short times from time to time, but some 
things were also annoying like the big status bar which seems to be 
independent of the screen size and theme. I remember using Kontact 10 
years ago and it was bloated and I got no idea why the whole Akonadi 
layers exists and if it would scale.
Somehow it's a pity that Sylspheed / Claws and other clients are not 
capable of using CardDav/CalDav.


Regards
Bjoern


Re: [arch-general] Tbird 78.2 enable Master Password of GPG keys stored in profile unencrypted

2020-09-16 Thread Archange via arch-general
Le 16/09/2020 à 12:41, David C. Rankin a écrit :
> All,
>
>   Just a heads up. SuSE has been doing work with Thunderbird 78.2 trying to
> prepare for a move to it with the openPGP replacement for Enigmail. One issue
> that has come from that is the realization that unless you enable a Master
> Password for thunderbird passwords, once you import your GPG keys, they will
> be stored unencrypted in your thunderbird profile. If you have never set a
> mater password for thunderbird before (I haven't), it looks like that will be
> required with 78.2 hits.

Or just keep using GnuPG for private key handling, which is what I will
be doing.

Regards,
Archange


[arch-general] Tbird 78.2 enable Master Password of GPG keys stored in profile unencrypted

2020-09-16 Thread David C. Rankin
All,

  Just a heads up. SuSE has been doing work with Thunderbird 78.2 trying to
prepare for a move to it with the openPGP replacement for Enigmail. One issue
that has come from that is the realization that unless you enable a Master
Password for thunderbird passwords, once you import your GPG keys, they will
be stored unencrypted in your thunderbird profile. If you have never set a
mater password for thunderbird before (I haven't), it looks like that will be
required with 78.2 hits.

-- 
David C. Rankin, J.D.,P.E.