Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-24 Thread Eli Schwartz
On 8/24/20 8:12 PM, Mark wrote:
> Am I understanding this correctly, your PGP keys are no longer secured
> with their passphrase and instead relies on the global master password
> in Thunderbird? Does that not weaken or at least somewhat minimize the
> validity of the signatures? There are numerous TB password recovery
> programs out there.

Fortunately, Thunderbird will have optional support for delegating
private key actions (decrypt, sign) to an external GnuPG keyring. This
is primarily being advertised in order to support smartcards. However,
GnuPG won't care whether the private key is in the keyring directly or
used via a smartcard. ;)

See https://wiki.mozilla.org/Thunderbird:OpenPGP:Smartcards

> Another question I have is regarding keeping multiple keystores in sync,
> i.e., TB's internal one and the currently used gnupg one?
My understanding is that they won't be kept in sync at all, period --
though Enigmail's migration tool will do a one-time import from GnuPG
into TB's internal store.

This is not my ideal use case, but since I will only be using it for
public keys, not private keys, it's not a dealbreaker for me. :)

-- 
Eli Schwartz
Arch Linux Bug Wrangler and Trusted User



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-24 Thread Mark
Am I understanding this correctly, your PGP keys are no longer secured
with their passphrase and instead relies on the global master password
in Thunderbird? Does that not weaken or at least somewhat minimize the
validity of the signatures? There are numerous TB password recovery
programs out there.


Another question I have is regarding keeping multiple keystores in sync,
i.e., TB's internal one and the currently used gnupg one?


On 8/24/2020 1:15 PM, Kai Engert wrote:
> Hello,
>
> here is an article that explains the differences between Enigmail and
> the new integrated OpenPGP feature in Thunderbird 78:
>
> https://wiki.mozilla.org/Thunderbird:OpenPGP:Migration-From-Enigmail
>
> Regards
> Kai
>
> ___
> enigmail-users mailing list
> enigmail-users@enigmail.net
> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] OpenPGP & Thunderbird 78.2.0

2020-08-24 Thread Kai Engert

On 24.08.20 22:42, Phil Kane wrote:

On 8/24/2020 12:39 PM, Kai Engert wrote:


The Thunderbird team had originally announced to enable OpenPGP by
default in version 78.2.0

It has been decided to slightly postpone this for final changes and
testing by volunteers.  It's expected to be enabled in 78.2.1


I'm confused.  I'm using TB v 68.11.0 (64 bit) for Windows 10 and it
reports as the latest.  Have i missed a large series of upgrades?


You haven't.

Although Thunderbird 78 was released two months ago, we have recommended 
that all Enigmail users should continue to use Thunderbird 68 for 
another while.


The reason for waiting is: Thunderbird 78 can no longer be used with 
Enigmail. Instead, Thunderbird 78 will have integrated support for 
OpenPGP. However, that new code wasn't ready yet, so we have recommended 
that users wait.


For this reason, we have not yet enabled automatic updates from 68 to 78.

Please continue to wait until Thunderbird 68 will automatically suggest 
you to upgrade to 78.


Please also see my other email about how Thunderbird 78 will behave 
differently than Enigmail.


Regards
Kai

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] OpenPGP & Thunderbird 78.2.0

2020-08-24 Thread Phil Kane
On 8/24/2020 12:39 PM, Kai Engert wrote:
> 
> The Thunderbird team had originally announced to enable OpenPGP by
> default in version 78.2.0
> 
> It has been decided to slightly postpone this for final changes and
> testing by volunteers.  It's expected to be enabled in 78.2.1

I'm confused.  I'm using TB v 68.11.0 (64 bit) for Windows 10 and it
reports as the latest.  Have i missed a large series of upgrades?

Phil Kane




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


[Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-24 Thread Kai Engert

Hello,

here is an article that explains the differences between Enigmail and 
the new integrated OpenPGP feature in Thunderbird 78:


https://wiki.mozilla.org/Thunderbird:OpenPGP:Migration-From-Enigmail

Regards
Kai

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


[Enigmail] OpenPGP & Thunderbird 78.2.0

2020-08-24 Thread Kai Engert

FYI:

The Thunderbird team had originally announced to enable OpenPGP by 
default in version 78.2.0


It has been decided to slightly postpone this for final changes and 
testing by volunteers.  It's expected to be enabled in 78.2.1


Kai

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


[Enigmail] Upgrading info for Thunderbird 78.2

2020-08-24 Thread Patrick Brunschwig
Thunderbird 78.2 will be released soon. With that release, OpenPGP in
Thunderbird is considered complete, and Enigmail users will start to be
upgraded to Thunderbird 78. What does this mean for you:

Together with the upgrade to Thunderbird 78.2, you should obtain a
new version of Enigmail (if not, check for updates in the Addons
Manager).

That new version of Enigmail is only a "Migration Version", which will
assist you with this move.

* If you use the Enigmail/pEp Junior Mode: a web page will be opened
automatically after the upgrade, from where you can download a new pEp
for Thunderbird Plugin (https://pep.software/thunderbird/). This plugin
replaces the Enigmail/pEp Junior mode and migrates all your keys and
settings. The new pEp for Thunderbird plugin is a full installer that
needs to be downloaded and installed on your computer. This new plug-in
will run in Thunderbird 68 and in new Thunderbird 78 versions. It will
work seamlessly with the pEp mobile clients for Android and iOS and
synchronize your keys and settings across all devices automatically.
More info on sync can be found in the documentation section on
https://www.pep.security/

* If you use the Enigmail "classical" mode: a wizard will be opened,
which allows you to transfer your keys and settings to Thunderbird.
Follow the steps in the wizard.


If you want to stick to Enigmail, then you have several options:

a) stick with Thunderbird 68. I will continue to support Enigmail for
Thunderbird 68 at least until the end of 2020. You can disable automatic
upgrading in the Thunderbird options. Please note that at some point you
will no longer receive security fixes for Thunderbird 68.

b) switch to Interlink Mail & News or Postbox. I will continue to
support Enigmail for these two platforms for the foreseeable future.

-Patrick




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net