Re: [Enigmail] Best way to move to TB 78

[Mark]

I have TB 78 on one machine that I installed fresh (no TB nor GPG) on
there originally and it seems to be working fine. On my main one it is
still at 68 but now shows an upgrade to 78. From what I have heard there
will no longer be any updates for 68 I will be upgrading it to 78 as well.

On 10/24/2020 2:17 AM, Patrick Brunschwig wrote:
> On 23.10.2020 15:57, Andreas Hirsch wrote:
>> Hi Patrick,
>>
>> Patrick Brunschwig schrieb am 25.09.2020 um 07:31:
>>> On 25.09.2020 07:28, Mark wrote:
>>>> Currently I'm using TB 68 with Enigmail and GPG4Win on one system.
>>>> I would like to try out TB 78 with it's Open PGP but want to test
>>>> it on a separate machine which does not have TB, Enigmail, nor
>>>> GPG4Win on it at all.
>>>>
>>>> How would be the best way to accomplish this so that it imports my 
>>>> private and public keys into it?  The mail itself can be
>>>> re-downloaded off the servers so not real worried about that. I'm
>>>> just not sure how best to handle the PGP keys.
>>> Read the following article: 
>>> https://sourceforge.net/p/enigmail/forum/announce/thread/7dcd29e5f9/
>> 'With the Thunderbird 78.2.1 release, OpenPGP in Thunderbird is
>> considered complete, and upgrading of installations from Thunderbird 68
>> to 78 was activated.'
>>
>> In the meantime, only at one pc in my bussines and private relations
>> migration was offered.
>>
>> So I have two questions:
>>
>> - do you have any information wether the automatic migration process
>> hast been stopped?
> Automatic migration has been enabled and re-disabled a few times due to
> bugs and problems with TB 78. AFAIK, migration should currently be
> enabled, but a low rate.
>
>> - do you recommend to start migration by hand?
> I can't give a recommendation. But here is a thought: if the Thunderbird
> developers would be 100% convinced that everything is perfectly fine,
> they would probably push migration more actively and at a higher rate
> than they do.
>
> -Patrick
>
>
> ___
> enigmail-users mailing list
> enigmail-users@enigmail.net
> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

-- 
PGP Key Upon Request

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Best way to move to TB 78

[Mark]

This question was originally from me. What I ended up doing is
installing GPG4Win on that other PC and used a program from Robert
Hansen that backs up and restores all the relevant GPG files. I then
restored those keys  into GPG4Win and installed Thunderbird 78 which did
import the keys into its own keystore.

There might have been easier ways but I wanted to make sure I my keys
were completely imported.

On 10/23/2020 6:57 AM, Andreas Hirsch wrote:
> Hi Patrick,
>
> Patrick Brunschwig schrieb am 25.09.2020 um 07:31:
>> On 25.09.2020 07:28, Mark wrote:
>>> Currently I'm using TB 68 with Enigmail and GPG4Win on one system.
>>> I would like to try out TB 78 with it's Open PGP but want to test
>>> it on a separate machine which does not have TB, Enigmail, nor
>>> GPG4Win on it at all.
>>>
>>> How would be the best way to accomplish this so that it imports my
>>> private and public keys into it?  The mail itself can be
>>> re-downloaded off the servers so not real worried about that. I'm
>>> just not sure how best to handle the PGP keys.
>> Read the following article:
>> https://sourceforge.net/p/enigmail/forum/announce/thread/7dcd29e5f9/
> 'With the Thunderbird 78.2.1 release, OpenPGP in Thunderbird is
> considered complete, and upgrading of installations from Thunderbird 68
> to 78 was activated.'
>
> In the meantime, only at one pc in my bussines and private relations
> migration was offered.
>
> So I have two questions:
>
> - do you have any information wether the automatic migration process
> hast been stopped?
> - do you recommend to start migration by hand?
>
> Thank You!
>
> Andreas
>
> ___
> enigmail-users mailing list
> enigmail-users@enigmail.net
> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

--
PGP Key Upon Request


___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Signed sources for Enigmail 2.2.3

[Mark]

Interesting as it is not showing up for my 68 install. I went to
addons.thunderbird.net and here is what it shows for 2.2.3

Version 2.2.3

Released Sept. 23, 2020 424.6 KiB Works with Thunderbird 77.0a1 and later


On 9/27/2020 8:21 AM, Robert J. Hansen wrote:
>> Will that be available for TB 68 as well or just 78? I just had it check
>> for updates and it didn't show any...
> 68 only.  As of TB 78, Enigmail is no longer available.
>
> ___
> enigmail-users mailing list
> enigmail-users@enigmail.net
> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

--
PGP Key Upon Request

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Signed sources for Enigmail 2.2.3

[Mark]

Will that be available for TB 68 as well or just 78? I just had it check
for updates and it didn't show any...

Thanks

On 9/27/2020 3:06 AM, Patrick Brunschwig wrote:
> On 27.09.2020 01:29, Jonas Witschel wrote:
>> Hi,
>>
>> I noticed that Enigmail 2.2.3 was released on addons.thunderbird.net on 
>> 2020-09-23, but cannot be downloaded from enigmail.net, neither in packaged 
>> [1] nor in source [2] form. Would it be possible to upload signed sources 
>> for this release as well, please?
> Done. Sorry, I was in a hurry to release the new version before TB 78.3
> would be available.
>
> -Patrick
>
>
>
> ___
> enigmail-users mailing list
> enigmail-users@enigmail.net
> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

-- 
PGP Key Upon Request

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Best way to move to TB 78

[Mark]

Interestingso basically only imported your own key?  See that is why
I want to install it on a separate machine first before updating my
daily use one. It would be a totally fresh install on that other machine
as it doesn't have Thunderbird nor any PGP programs/keys.


On 9/25/2020 7:54 PM, Phil Kane wrote:
> The move of my originating key pair from TB68 to TB78 on a Win 10 laptop
> went very smoothly.  OpenPGP Key Manager permits me to see that key but
> not the public keys from other people, as was done by Kleopatra.  The
> "Show keys from other people" box in the OpenPGP Key Manager was
> checked.  Did I miss something or is this a bug in OpenPGP?
>
> Phil Kane
> Beaverton, OR  USA
>
> ___
> enigmail-users mailing list
> enigmail-users@enigmail.net
> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Best way to move to TB 78

[Mark]

I will give that a try and see how (well) it works. If someone has a
better idea, please let me know.

Thanks

On 9/25/2020 8:25 AM, Patrick Brunschwig wrote:
> Yes, that's a possible approach. You won't need Enigmail afterwards anymore.
>
> -Patrick
>
> On 25/09/2020 07:44, Mark wrote:
>> Thanks from my read of it I gather (as I'm starting with a blank
>> slate on that other machine) I would need to first install GPG4Win on it
>> and then copy my key files to that PC. I would then install TB78 and
>> also the "migration edition" of Enigmail to import the keys into TB78's
>> OpenPGP "database" 
>>
>> Is that correct? 
>>
>> If so, is there a need to leave that version of Enigmail installed after
>> the initial importation of those keys?
>>
>> Thanks Again
>>
>> On 9/24/2020 10:31 PM, Patrick Brunschwig wrote:
>>> On 25.09.2020 07:28, Mark wrote:
>>>> Forgive me if this is a bit off-topic but I hope someone can give me
>>>> some tips.
>>>>
>>>> Currently I'm using TB 68 with Enigmail and GPG4Win on one system. I
>>>> would like to try out TB 78 with it's Open PGP but want to test it on a
>>>> separate machine which does not have TB, Enigmail, nor GPG4Win on it at
>>>> all.
>>>>
>>>> How would be the best way to accomplish this so that it imports my
>>>> private and public keys into it?  The mail itself can be re-downloaded
>>>> off the servers so not real worried about that. I'm just not sure how
>>>> best to handle the PGP keys.
>>> Read the following article:
>>> https://sourceforge.net/p/enigmail/forum/announce/thread/7dcd29e5f9/
>>>
>>> -Patrick
>>>
>>>
>

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Best way to move to TB 78

[Mark]

Thanks from my read of it I gather (as I'm starting with a blank
slate on that other machine) I would need to first install GPG4Win on it
and then copy my key files to that PC. I would then install TB78 and
also the "migration edition" of Enigmail to import the keys into TB78's
OpenPGP "database" 

Is that correct? 

If so, is there a need to leave that version of Enigmail installed after
the initial importation of those keys?

Thanks Again

On 9/24/2020 10:31 PM, Patrick Brunschwig wrote:
> On 25.09.2020 07:28, Mark wrote:
>> Forgive me if this is a bit off-topic but I hope someone can give me
>> some tips.
>>
>> Currently I'm using TB 68 with Enigmail and GPG4Win on one system. I
>> would like to try out TB 78 with it's Open PGP but want to test it on a
>> separate machine which does not have TB, Enigmail, nor GPG4Win on it at
>> all.
>>
>> How would be the best way to accomplish this so that it imports my
>> private and public keys into it?  The mail itself can be re-downloaded
>> off the servers so not real worried about that. I'm just not sure how
>> best to handle the PGP keys.
> Read the following article:
> https://sourceforge.net/p/enigmail/forum/announce/thread/7dcd29e5f9/
>
> -Patrick
>
>

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

[Enigmail] Best way to move to TB 78

[Mark]

Forgive me if this is a bit off-topic but I hope someone can give me
some tips.

Currently I'm using TB 68 with Enigmail and GPG4Win on one system. I
would like to try out TB 78 with it's Open PGP but want to test it on a
separate machine which does not have TB, Enigmail, nor GPG4Win on it at
all.

How would be the best way to accomplish this so that it imports my
private and public keys into it?  The mail itself can be re-downloaded
off the servers so not real worried about that. I'm just not sure how
best to handle the PGP keys.

Thanks


___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Import Key Issues

[Mark]

I don't see a pinentry line at all in task manager.  It is odd

On 9/24/2020 2:48 AM, Andrew Gallagher wrote:
> On 24/09/2020 06:53, Mark wrote:
>> I'm still using Thunderbird 68.12.0 with Enigmail 2.1.8 (20200906-1507)
>> and experienced a problem when trying to import a key within Enigmail.
>> It found the key OK but when I hit OK to import it, nothing happened. It
>> just sat there and even after several minutes, nothing... It didn't
>> import the key nor give any kind of error message. Cancel also would not
>> respond so I had to close that entire window.
>>
>> Any idea what was happening with it?
> Is it opening a pinentry window somewhere unexpected? Check your process
> list to see if `pinentry` is there somewhere, and see what happens if
> you kill it.
>
>
> ___
> enigmail-users mailing list
> enigmail-users@enigmail.net
> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Import Key Issues

[Mark]

I don't see any gpg.exe processes running while it is "waiting" on
importing the key. I see scdaemon.exe and gpg-agent.exe. Progress bar is
still all gray as if nothing is going on.

On 9/24/2020 8:44 AM, Patrick Brunschwig wrote:
> On 24/09/2020 07:53, Mark wrote:
>> I'm still using Thunderbird 68.12.0 with Enigmail 2.1.8 (20200906-1507)
>> and experienced a problem when trying to import a key within Enigmail.
>> It found the key OK but when I hit OK to import it, nothing happened. It
>> just sat there and even after several minutes, nothing... It didn't
>> import the key nor give any kind of error message. Cancel also would not
>> respond so I had to close that entire window.
>>
>> Any idea what was happening with it?
> Sometimes GnuPG waits for a (stale) lock to be released before it would
> start to do something. Check if there are running gpg process(es). As
> long as you find running instances of gpg.exe, key import will not finish.
>
> -Patrick
>

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

[Enigmail] Import Key Issues

[Mark]

I'm still using Thunderbird 68.12.0 with Enigmail 2.1.8 (20200906-1507)
and experienced a problem when trying to import a key within Enigmail.
It found the key OK but when I hit OK to import it, nothing happened. It
just sat there and even after several minutes, nothing... It didn't
import the key nor give any kind of error message. Cancel also would not
respond so I had to close that entire window.

Any idea what was happening with it?

Thanks


___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] OpenPGP & Thunderbird 78.2.0

[Mark]

Thanks for the explanation of how pEp is connected to this. I do have a
few other questions that hopefully you will answer.

1) What does the pEp addon do in addition to or better than the built in
OpenPGP? In other words what are the advantages to installing this
add-on over the built in support?  

2) Can you explain the differences between pEp junior and classic modes?

I didn't really see these answered in the FAQ

Thanks


On 9/7/2020 10:40 PM, Patrick Brunschwig wrote:
> On 07.09.2020 21:55, Phil Kane wrote:
>> On 9/6/2020 11:35 PM, Patrick Brunschwig wrote:
>>
>>> pEp for Thunderbird is not Enigmail. You won't receive an Enigmail
>>> version that will work with TB 78.
>> If that is the case, just what is pEp?  What does it replace?
> The main idea of pEp is to provide message security without bothering
> the user as much as possible. User should not need to deal with key
> management and should not need to care to enable encryption manually.
>
> If you want to know what pEp is, then read the following:
> https://www.pep.security/en/faq/
>
> Enigmail 2.0 and 2.1 contains a pEp Junior Mode. In this mode, Enigmail
> uses the pEp engine for crypto-operations, and the user interface is
> reduced to a very small set of security indicators and dialogs.
>
> As Enigmail will not support TB 78, the pEp developers decided to create
> their own add-on from scratch. The add-on is the quasi-continuation of
> the pEp Junior Mode. Those who use Enigmail in the pEp Junior Mode are
> offered to move to that new pEp for Thunderbird addon instead of being
> migrated to OpenPGP in Thunderbird.
>
> -Patrick
>
>
> ___
> enigmail-users mailing list
> enigmail-users@enigmail.net
> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] OpenPGP & Thunderbird 78.2.0

[Mark]

True, but the first (and only) place I have heard of p≡p in regards to
TB is here on this list actually with this same subject line, so I
figured it was fair game.

On 9/7/2020 4:51 PM, Robert J. Hansen wrote:
>> My asking was a sort of a joke although still not sure what the purpose
>> of p≡p based on the following text from the Thunderbird 78 blog:
>
> Given that Enigmail is not p≡p and doesn't work with TB78, perhaps
> you'd be best served asking at a mailing list that caters to one or
> the other?
>
> ___
> enigmail-users mailing list
> enigmail-users@enigmail.net
> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Enigmail, TB 78+ and security

[Mark]

Had those same concerns as there are a multitude of mozilla master
password decrypters out there. Plus keeping two key stores in sync could
be problematic.

On 9/7/2020 12:57 PM, li...@datenritter.de wrote:
> Hi all,
>
> So, Thunderbird will finally implement OpenPGP. Great! \o/
>
> Unfortunately, Mozilla as usual have their own way... /o\
>
> TB will store PGP-Keys without encryption - unless you use a master
> password. Which... must be entered on every start anyway.
>
> One password for everything might seem comfortable, but doesn't that
> mean our keys will be kept in memory without any protection? Sounds like
> a terrible idea to keep sensitive information like this in a complex and
> most probably still buggy application like TB.
>
> Enigmail asks for pasphrases on demand and comes with a timeout option.
> Keys are protected by gpg, which also handles decryption, so it would
> never spit out any key data unless there's a bug in the pgp binary. With
> enigmail and gpg a memory leak in TB would not compromise your keys. Am
> I right? (Or is gpg executed in TB's address space?)
>
> Looks like a certain loss of security to me.
>
> Also, in the future we have to maintain two separate key storages,
> because TB has to have it's Extrawurst*.
>
> The web of trust is basically dead - but keysigning by all means is not.
> TB will replace enigmail before WoT functionality has been implemented.
> If ever.
>
> ATM, this is the scariest change to deal with in the FOSS world.
> Please tell me I got it all wrong.
>
> d.
>
>
>
> (* Funny German word for special treatment.)
>
> ___
> enigmail-users mailing list
> enigmail-users@enigmail.net
> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] OpenPGP & Thunderbird 78.2.0

[Mark]

Exactly my question...

On 9/7/2020 12:55 PM, Phil Kane wrote:
> On 9/6/2020 11:35 PM, Patrick Brunschwig wrote:
>
>> pEp for Thunderbird is not Enigmail. You won't receive an Enigmail
>> version that will work with TB 78.
> If that is the case, just what is pEp?  What does it replace?
>
> == Phil Kane
>
> ___
> enigmail-users mailing list
> enigmail-users@enigmail.net
> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] OpenPGP & Thunderbird 78.2.0

[Mark]

So then would it legitimate to have a version of Enigmail that continued
to work with TB 78? :)

Just curious as to what is p≡p is doing differently (better?) over the
default Open PGP implementation. We kept hearing they were doing this to
make it more streamlined and not require additional add-ons but now we
have an add-on. I'm not trying to be confrontational but honestly
wondering  why.

Thanks

On 9/6/2020 12:08 PM, Patrick Brunschwig wrote:
> The philosophy of pEp is different than the one of Thunderbird. It's
> perfectly legitimate that there's more than one solution for encryption.
>
> The Enigmail migrator in TB 78 is only for users of the classical mode
> of Enigmail. Users of pEp are offered to install pEp for Thunderbird.
> And this is now also prepared in Enigmail for TB 68.
>
> -Patrick
>
> On 06.09.2020 19:39, Mark wrote:
>> Little confused here with the messages about p≡p. If Thunderbird 78 has
>> built in OpenPGP and we no longer use Enigmail/GPG4Win, what is this
>> addon for?
>>
>> Thanks
>>
>> On 8/30/2020 12:33 AM, Patrick Brunschwig wrote:
>>> On 24.08.2020 21:39, Kai Engert wrote:
>>>> FYI:
>>>>
>>>> The Thunderbird team had originally announced to enable OpenPGP by
>>>> default in version 78.2.0
>>>>
>>>> It has been decided to slightly postpone this for final changes and
>>>> testing by volunteers.  It's expected to be enabled in 78.2.1
>>> Thunderbird 78.2.1 with OpenPGP enabled has been released now. According
>>> to the release notes:
>>>
>>> Thunderbird version 78.2.1 is only offered as direct download from
>>> https://thunderbird.net and *not* as an upgrade from Thunderbird version
>>> 68 or earlier. A future release will provide updates from earlier
>>> versions. Automatic updates are available for users already running
>>> version 78.0 or higher.
>>>
>>> -Patrick
>
> ___
> enigmail-users mailing list
> enigmail-users@enigmail.net
> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] OpenPGP & Thunderbird 78.2.0

[Mark]

Little confused here with the messages about p≡p. If Thunderbird 78 has
built in OpenPGP and we no longer use Enigmail/GPG4Win, what is this
addon for?

Thanks

On 8/30/2020 12:33 AM, Patrick Brunschwig wrote:
> On 24.08.2020 21:39, Kai Engert wrote:
>> FYI:
>>
>> The Thunderbird team had originally announced to enable OpenPGP by
>> default in version 78.2.0
>>
>> It has been decided to slightly postpone this for final changes and
>> testing by volunteers.  It's expected to be enabled in 78.2.1
> Thunderbird 78.2.1 with OpenPGP enabled has been released now. According
> to the release notes:
>
> Thunderbird version 78.2.1 is only offered as direct download from
> https://thunderbird.net and *not* as an upgrade from Thunderbird version
> 68 or earlier. A future release will provide updates from earlier
> versions. Automatic updates are available for users already running
> version 78.0 or higher.
>
> -Patrick
>
>
> ___
> enigmail-users mailing list
> enigmail-users@enigmail.net
> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

[Mark]

Thanks for the clarifying that a bit. Going from 1 to 1 is
definitely a start in the right direction. However it still seems low,
unless I'm misunderstanding something. I know dedicated password
managers such as LastPass, Bitwarden, etc., hashes that master password
100K on the client side and then another 100K on the server side. Now
that we are adding private encryption keys into that collection it is
securing, makes me a bit apprehensive.


On 8/26/2020 2:26 PM, Kai Engert wrote:
> On 26.08.20 21:19, Mark wrote:
>> Could you elaborate a bit more on the new and improved Master Password
>> security
>
> It's a "password based encryption" (PBE) mechanism.
>
> The password chosen by the user is used with a PBE algorithm to
> encrypt information (such as keys and individual passwords, and in our
> scenario the automatic passphrase that protects the OpenPGP secret keys).
>
> An attacker, or a "password recovery program" attempts to find the
> correct password using brute force, either trying all possible
> passwords, or trying words from a dictionary.
>
> The more time it takes to try one candidate password, the more time it
> takes for a brute force search approach to succeed.
>
> When performing PBE, one input is the password itself, and another
> variable is the "iteration count", which defines how often a
> calculation is repeated.
>
> The higher the iteration count, the more time it takes to encrypt or
> decrypt the data. The iteration count can be chosen at the time data
> is encrypted.
>
> Unfortunately, old versions of NSS/Firefox/Thunderbird always used a
> iteration count of one (1) for the Master Password.
>
> Consequently, a brute force attack could try many candidate passwords
> in a very short amount of time.
>
> With NSS 3.48 and newer, as used by Thunderbird 78, the iteration
> count has been changed to 1.
>
> The longer the password chosen by the user, the more combinations need
> to be tried by an attacker to find it.
>
> Let's say the chosen password had a complexity that previously allowed
> it to be found in 1 hour by a fast computer.
>
> With the newer software (assuming you set/updated the password with
> the new software version), it would take 1 hours to find the same
> password, or almost 14 months.
>
> Kai
>

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

[Mark]

Could you elaborate a bit more on the new and improved Master Password
security now that it is negating the use of passphrases on the private
keys?

Thanks

On 8/25/2020 7:47 AM, Kai Engert wrote:
> On 25.08.20 02:12, Mark wrote:
>> Am I understanding this correctly, your PGP keys are no longer secured
>> with their passphrase and instead relies on the global master password
>> in Thunderbird?
>
> Correct.
>
>
>> Does that not weaken or at least somewhat minimize the
>> validity of the signatures? There are numerous TB password recovery
>> programs out there.
>
> Things have improved. In older versions, the Master Password mechanism
> was weak. I had pushed for improvements last year, specifically to
> ensure the OpenPGP key protection would be sufficient.
>
> https://bugzilla.mozilla.org/show_bug.cgi?id=1562671
>
> The password recovery programs shouldn't succeed on Thunderbird 78 if
> you have set a decent passphrase.
>
>
>> Another question I have is regarding keeping multiple keystores in sync,
>> i.e., TB's internal one and the currently used gnupg one?
>
> We don't support this currently, except what Eli said in the other reply.
>
> Kai
>

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

[Mark]

On 8/24/2020 5:29 PM, Eli Schwartz wrote:
> Fortunately, Thunderbird will have optional support for delegating
> private key actions (decrypt, sign) to an external GnuPG keyring. This
> is primarily being advertised in order to support smartcards. However,
> GnuPG won't care whether the private key is in the keyring directly or
> used via a smartcard. ;)
>
> See https://wiki.mozilla.org/Thunderbird:OpenPGP:Smartcards

That sounds interesting, although still a bit unsure how (well) it will
work. I guess I will have to see it in practice first.

> My understanding is that they won't be kept in sync at all, period --
> though Enigmail's migration tool will do a one-time import from GnuPG
> into TB's internal store.
>
> This is not my ideal use case, but since I will only be using it for
> public keys, not private keys, it's not a dealbreaker for me. :)


So if you get a new or updated public key (after the initial
importation) it sounds like you may to jump through a few hoops to get
that make sure your public keyrings are in sync. Hopefully there will be
some sort of fix for this


___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

[Mark]

Am I understanding this correctly, your PGP keys are no longer secured
with their passphrase and instead relies on the global master password
in Thunderbird? Does that not weaken or at least somewhat minimize the
validity of the signatures? There are numerous TB password recovery
programs out there.


Another question I have is regarding keeping multiple keystores in sync,
i.e., TB's internal one and the currently used gnupg one?


On 8/24/2020 1:15 PM, Kai Engert wrote:
> Hello,
>
> here is an article that explains the differences between Enigmail and
> the new integrated OpenPGP feature in Thunderbird 78:
>
> https://wiki.mozilla.org/Thunderbird:OpenPGP:Migration-From-Enigmail
>
> Regards
> Kai
>
> ___
> enigmail-users mailing list
> enigmail-users@enigmail.net
> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Can TB's received mail overview indicate the signature/encryption state of e-mails?

[Mark]

Thanks for explaining. I took another look at it and it seems the pen
only shows up after clicking on the message. 

On 7/23/2020 11:57 AM, Patrick Brunschwig wrote:
> There is a pen icon and a key icon. The pen is for "signed" and the key
> is for "encrypted". Both icons are only displayed if the corresponding
> action was successful/valid.
>
> Patrick
>
>

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Can TB's received mail overview indicate the signature/encryption state of e-mails?

[Mark]

Can you elaborate on what all it will indicate? The only icon I have
seen in it is the pencil which I assume just means signed.

Thanks

On 7/16/2020 10:00 PM, Patrick Brunschwig wrote:
> Adalbert Hanßen wrote on 16.07.2020 08:02:
>> Can Thunderbird's received mail overview indicate the signature/encryption 
>> state of e-mails?
>>
>> I am thinking about an additional column with coloured dots at messages with 
>> wrong signatures or on those can't be decrypted successfully.
> Such a column is already available (Column Enigmail).
>
> -Patrick
>
>
>
> ___
> enigmail-users mailing list
> enigmail-users@enigmail.net
> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Confusing Warning

[Mark]

Hi Olav,

I see where a mailing list software might cause issues with the message
and make it look like it was tampered with.  I will mention that to them
and see if they do anything about it.

Why would one like say "Unverified signature" as well as "Bad signature" 

Thanks,

Mark


On 7/2/2020 2:24 AM, Olav Seyfarth wrote:
>
> Hi Mark,
>
> if GnuPG/Enigmail report "BAD signature" then either was the message
> tampered with, or (which is more likely), Microsofts Mailing List
> software broke their own signature. So that's something that you
> should report to Microsoft (and provide them with the full mail source
> code as it resides in your inbox now).
>
> The part of your question concerning the ambiguity of which part is
> verified by the signature may be related but is an issue that is not
> fully solvable by enigmail since parts of that mail would need to be
> displayed separately, ultimately leading to a different Thunderbird UI.
>
> Olav
>
>
> ___
> enigmail-users mailing list
> enigmail-users@enigmail.net
> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

[Enigmail] Confusing Warning

[Mark]

I get security notification emails from MS that are PGP signed.  I'm not
sure what part it not signed as when I click on details it on says the
following information. Also confusing is that key is in my keyring and I
certified it.

Am I missing (or misunderstanding) something here? 

Part of the message signed
Unverified signature
Public key 6CC73355668F7B75 used to verify signature

BAD signature from Microsoft Security Notifications


___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Alert about Thunderbird 78

[Mark]

I just got a alert to update to Thunderbird 68.10.0 but there are no
release notes for it, so holding off until I see what it add/fixes.

On 6/30/2020 12:07 PM, Patrick Brunschwig wrote:
> Michael Gillan  wrote on 29.06.2020 23:33:
>> Hi,
>>
>> I have been getting a message popping up when I open thunderbird like
>> the one below.  It refers to version 78 of Thunderbird.  However as far
>> as i know Thunderbird is still only available up to version 68.*.*. 
>>
>> Is the message genuine or a mistake?
> That message is genuine. Thunderbird 78 will soon be released, that's
> why we added this dialog in Enigmail.
>
> -Patrick
>
> ___
> enigmail-users mailing list
> enigmail-users@enigmail.net
> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] OpenPGP Support in Thunderbird 77.0b3

[Mark]

I've never heard of Interlink so went to check out the website. It looks
like it might be an option depending on what TB 78.x looks like. Anyway
I didn't see Enigmail listed on the extensions page for it 
https://interlink-addons.binaryoutcast.com/extensions/



On 6/30/2020 1:08 PM, Patrick Brunschwig wrote:
>
> Enigmail is available for:
> * Postbox (https://postbox-inc.com), a commercial product
> * Interlink (https://binaryoutcast.com/projects/interlink/), a
> community-driven product.
>
> Both are currently based on TB 52. Postbox is actively maintained and
> its UI differs quite a bit from Thunderbird (I think it's nicer, but
> that's to some degree a matter of taste). Interlink is also maintained,
> but I'm not sure how actively and things like security fixes.
>
> -Patrick
>
>
> ___
> enigmail-users mailing list
> enigmail-users@enigmail.net
> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] OpenPGP Support in Thunderbird 77.0b3

[Mark]

I just went in and disabled the auto install updates until I see how
(well) it works.

On 5/20/2020 7:46 AM, Andrew Gallagher wrote:
> Thanks, Patrick!
>
> On 20/05/2020 15:23, Patrick Brunschwig wrote:
>> Details are available from the following post:
>> https://mail.mozilla.org/pipermail/tb-planning/2020-May/007621.html
> ...
>> Aligned with this release, I created a first beta version of
>> Enigmail 2.2. Enigmail 2.2 is a special release that serves one single
>> purpose: help users migrate their keys and settings from Enigmail/GnuPG
>> to Thunderbird -- nothing more.
> I notice from the tb-planning email that (for understandable reasons)
> they intend to go ahead with releasing TB 78 regardless of the state of
> its PGP support. If this is not sufficiently stable or featureful, will
> we have to hold back on upgrading TB until some future release, or will
> we still be able to install a fully-functional version of Enigmail?
>
> Thanks,
> A
>
>
> ___
> enigmail-users mailing list
> enigmail-users@enigmail.net
> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Future OpenPGP Support in Thunderbird

[Mark Rousell]

On 08/10/2019 08:08, Patrick Brunschwig wrote:
> The Thunderbird developers have announced that they will implement
> OpenPGP support in Thunderbird 78 [1]. Support for Thunderbird in
> Enigmail will therefore be discontinued.

Wow.

Patrick, first of all I'd like to thank you for all the effort you have
put into Enigmail (and will continue to put into it). Without your
brilliant work it is clear that Thunderbird would not have been as
successful as it has been.

I am certain that I would not have been a longtime user of Thunderbird
if it had not been for the old addon ecosystem, especially Enigmail. In
particular for me, your response to bugs has been quick and effective.

Whilst OpenPGP support should ideally of course have been built into
Thunderbird from the beginning (alongside S/MIME support) I have to say
that, as things now stand, I have more confidence in the development and
project management of Enigmail than of Thunderbird itself.

I fully understand that you, Patrick, do not have the time to re-develop
Enigmail from scratch to support the new addon ecosystem. And I should
be pleased that OpenPGP encryption will be built into TB core in the
near future. And yet I find myself having misgivings about how well the
future of Thunderbird will be managed or how sustainable future
development will be, especially when the project is ultimately not the
master of its own platform's fate.

Time will tell.

Thank you once again for all the effort you've put in. You've made a
massive contribution to every user of Enigmail and the past success of
Thunderbird.

-- 
Mark Rousell
 
 
 

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] [SOLVED] One recipient sees an attached .asc file, but another sees it inline

[Mark Rousell]

On 08/09/2018 15:27, Patrick Chkoreff wrote:
> Second, I misquoted my friend.  He is not using "PGP Tray" or anything
> that was ever connected with Symantec.  He is using two things:  Windows
> Privacy Tray (which is connected with GnuPT) and a plugin for Pegasus.
> Both are very old and only do very simple things, but they make using
> GPG simple and reliable for him.

Ah, that does make sense. A lot of people find a system that works for
them and then never change it.


-- 
Mark Rousell
 
 
 

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] [SOLVED] One recipient sees an attached .asc file, but another sees it inline

[Mark Rousell]

On 07/09/2018 23:47, Patrick Chkoreff wrote:
> so Mr. Brunschwig has done great work in a very
> tricky domain.

Agreed. :-)


-- 
Mark Rousell
 
 
 

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] [SOLVED] One recipient sees an attached .asc file, but another sees it inline

[Mark Rousell]

On 07/09/2018 22:58, Patrick Chkoreff wrote:
> Mark Rousell wrote on 09/07/2018 05:53 PM:
>
>> What mail client is Bob using? The first message part header you
>> quoted[1] is correct for PGP/MIME which I would have thought any modern
>> mail client should be able to decode.
> Oh, he's using Outlook or something.  He uses the "PGP Tray" to decrypt
> the clipboard.  He's not using any built in support in the email client.
>  An odd duck.

I believe that 'PGP Tray' is part of Symantec's PGP email encryption
software. Either that or it's a very old version of the PGP software. I
vaguely seem to recall that PGP Tray was part of PGP Desktop before
Symantec bought it. But that was a very long ago.

As far as I am aware, up to date PGP from Symantec can handle PGP/MIME
but I would have thought that virtually no one outside of a corporate
environment would be using this nowadays.

-- 
Mark Rousell
 
 
 

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] [SOLVED] One recipient sees an attached .asc file, but another sees it inline

[Mark Rousell]

On 07/09/2018 22:31, Patrick Chkoreff wrote:
>> Can anybody think of something more I can do to force Enigmail NOT to
>> set up one of those "encrypted.asc" file attachment things, 
> OK I think I figured something out.  I went into the Per-Recipient rules
> and set PGP/MIME to "Never".  I sent a message to my friend Bob and saw
> this:
>
> MIME-Version: 1.0
> Content-Type: text/plain; charset=utf-8
> Content-Language: en-US
> Content-Transfer-Encoding: 8bit

What mail client is Bob using? The first message part header you
quoted[1] is correct for PGP/MIME which I would have thought any modern
mail client should be able to decode.




Footnote:-
1: If this is the message part header (which you quoted)

Content-Type: application/octet-stream; name="encrypted.asc"
Content-Description: OpenPGP encrypted message
Content-Disposition: inline; filename="encrypted.asc"

then this will be in the main message header:

Content-Type: multipart/encrypted;
 protocol="application/pgp-encrypted";
 boundary=""


 

-- 
Mark Rousell
 
 
 

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] pEp annoyance?

[Mark Rousell]

On 22/08/2018 00:33, Mark Rousell wrote:
> Christian,
>
> On 21/08/2018 19:56, Christian Riechers via enigmail-users wrote:
>> I have no idea. I'm just sending a plaint text email to the mailing list.
>
> Very curious, thanks.
>
> Looking at the headers, it would seem that your messages are
> encapsulated as inline RFC822 attachments by the server
> mailman012.mail.hostpoint.ch, although whether it's the Mailman
> software or some other software doing it I don't know. I can't see why
> it's happening.

Ah, I think I've got it: I think it's to do with a Mailman list setting
combined with your originating domain's DMARC policy (I presume it's the
p=reject policy you use). This results in Mailman wrapping your original
message as an inline RFC822 attachment.


-- 
Mark Rousell
 
 
 

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] pEp annoyance?

[Mark Rousell]

Christian,

On 21/08/2018 19:56, Christian Riechers via enigmail-users wrote:
> I have no idea. I'm just sending a plaint text email to the mailing list.

Very curious, thanks.

Looking at the headers, it would seem that your messages are
encapsulated as inline RFC822 attachments by the server
mailman012.mail.hostpoint.ch, although whether it's the Mailman software
or some other software doing it I don't know. I can't see why it's
happening.

-- 
Mark Rousell
 
 
 

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] pEp annoyance?

[Mark Rousell]

On 20/08/2018 21:40, Christian Riechers via enigmail-users wrote:

> Also on my work computer showing the hangs, there is no
> pep-json-server running.


Apologies for hijacking this thread and I realise I've probably not been paying 
attention (and it could be due to my old software) but why do your messages all 
appear to be inline RFC822 attachments?

Which feature is causing this? Or is it an emergent property due to an 
interaction with the mail list software?


-- 
Mark Rousell
 
 
 

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] A postmortem on Efail

[Mark Rousell]

On 20/05/2018 17:42, Robert J. Hansen wrote:
> Because each time GnuPG floats the possibility of ending PGP 2.6
> compatibility, there's enough user outrage -- and not enough user
> support -- to roll the decision back.  I agree that it's pants-on-head
> crazy, but it's a crazy demanded by the community.

And, in my view, this user demand in turn demands that GnuPG continues
to provide the ability to decrypt legacy-encrypted data (albeit, as in
my messages to the GnuPG Users list, via a new legacy option that forces
users to make some sort of charge in order to use it).


-- 
Mark Rousell
 
 
 

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

[Enigmail] Lost Key Rings!

[Matthew Mark Drew via enigmail-users]

--- Begin Message ---
Help

Enigmail can no longer find my Key Rings (happened after a botched
upgrade of GPG4Win) - I have tried re-installing GPG, GPG4WIN and
Enigmail, nothing works and I see no option that allows me to manually
point Enigmail to the Ring's location.

Need Help!

Thanks
--- End Message ---
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

[Enigmail] Steps

[mark crosby]

It is not clear at all how to exchange encrypted emails with others.

I have to assume (not found in FAQ) that I would have to send my public
key to all people with whom I wish to exchange encrypted messages. And
need to know if this is sent before or after they have installed
compatible encryption software on their own computer.

However, I cannot "find" the Enigmail keychain dialogue (shown in the
site first steps) on my Mac in Thunderbird under the Enigmail drop-down
menu. But I did send my key to myself as the first test. I can find the
Enigmail Key Management dialogue, but it is different than shown in the
help site.

So - how to send public key to friends?

Second, I assume (again not in the FAQ) that friends will need to also
need to get the GPG plug-in/extension. But does that work in other email
applications such as Mac Mail, MS Outlook? What is the name of each
piece of encryption software needed for other than Thunderbird mail clients?

Thanks!

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] XUL and Enigmail

[Mark Rousell]

On 10/11/2015 18:31, Robert J. Hansen wrote:
> To start things off, here's my contribution: what would people think
> about abandoning GnuPG in favor of moving to OpenPGP.js, a Javascript
> implementation of OpenPGP?  This would make installing Enigmail vastly
> simpler, as we'd no longer have a dependency on a third-party
> application.  Also, we'd only have to support one codebase, instead of
> dealing with people who were using GPGTools, GPG4Win, distro-provided
> GnuPG, and more.

As long as OpenPGP.js can inter-operate transparently with GnuPG (on the
same machine) then that would be fine in principle in my opinion. But it
has to be utterly inter-operable such that the end user effectively
cannot tell the difference and can switch freely between OpenPGP.js in
Enigmail and GnuPG used with other software.

The above is a pragmatic reply but the following comments are
possibly... religious. ;-)

Is GnuPG substantively broken? It really does seem to me that C or C++
are the best place to do encryption. I see no special advantage that
Javascript brings for this job, other than that it is today's fad in
this particular context.

Additionally, one of the recurring problems with open source projects
seems to me to be 'start-over-itis': That is the desire to start over
because a cool new technology or tool has come along. My view is that
longevity is born of long term compatibility and stability, and
compatibility and stability are born of sticking with a codebase that is
well-tested and known to work. Thus replacing a key part of the code
base for reasons that are anything but overwhelming (i.e. the existing
code is irretrievably broken) is an error. So the question to my mind
is: Is GnuPG irretrievably broken for Enigmail?


-- 
Mark Rousell
 
 
 



___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Webmail use

[Mark Kurowski]

I check out mailvelope every now and then.  I'm pretty sure  that it can
sign, and it can encrypt, but it can't yet sign an encrypted message. 
Also, in my experience with it, a small but significant percentage of
messages get screwed up by gmail (or perhaps mailvelope itself).

So, it might very well ease your friend into the process, but don't be
alarmed when you get a bad signature from her.  :-)

Mark

On 1/10/2015 2:02 PM, Bryant Evans wrote:
 Thanks!

 I've downloaded it, installed it and am tsting it. I am also doing my
 due diligence to look for any reported problems. I appreciate the
 solution. Since it uses OpenPGP I can continue to use Enigmail myself
 but let her use the webmail.

 B
 On 1/10/2015 2:54 PM, Alexander Buchner wrote:
 On 10.01.2015 15:37, Alexander Buchner wrote:
 On 10.01.2015 14:35, Bryant Evans wrote:
 First of all, let me offer a hearty Thank You to those who have worked
 so hard to make Enigmail such a useful and important tool. Your time is
 a gracious gift to those of us who use the product.

 I have done some searching but find no direct answer to this question:
 Is there a way Enigmail can be used with web based email sources such as
 gmail? I was think of a kind of right-click function to
 encrypt/decrypt/sign/verify a message using only a web browser. If not,
 could you point me in a better direction?

 Thank you!
 I never used it but I read that my mail provider supports something
 called mailvelope. Perhaps this is something you can look into.

 https://posteo.de/en/blog/email-encryption-in-your-browser-with-mailvelope
 Here is the direct link:
 https://www.mailvelope.com/

 It seems to be suitable for your purposes.




 ___
 enigmail-users mailing list
 enigmail-users@enigmail.net
 To unsubscribe or make changes to your subscription click here:
 https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net



 ___
 enigmail-users mailing list
 enigmail-users@enigmail.net
 To unsubscribe or make changes to your subscription click here:
 https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net