Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-09-01 Thread Werner Koch
On Mon, 31 Aug 2020 15:12, Kai Engert said: > Do you intend to use a different filename for the the 64-bit version? No. The 64 bit DLLs live in the "bin_64" directory. You can already find the gpgol plugin there. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bund

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-31 Thread Kai Engert
On 31.08.20 12:43, Werner Koch wrote: Andre will include a 64 bit version of gpgme.dll into the next gpg4win release. We hope to get a release out by next week. Hello Werner and Andre, great, thanks a lot for your help! IIUC you intend to continue to distribute a single gpg4win package, whi

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-31 Thread Werner Koch
On Sat, 29 Aug 2020 09:09, Christian Riechers said: > I'm wondering whether there will be a gpg/gpgme 64-bit binary for > Windows offered for download from gnupg.org at some point. Andre will include a 64 bit version of gpgme.dll into the next gpg4win release. We hope to get a release out by nex

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-29 Thread Christian Riechers via enigmail-users
--- Begin Message --- On 08/28/2020 8:06 PM, Kai Engert wrote: On 28.08.20 19:09, Christian Riechers via enigmail-users wrote: Yet Thunderbird does not load the DLL with the pref mail.openpgp.allow_external_gnupg set to true. There is no occurrence of 'gpgme' in the error console. I've just in

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-28 Thread Kai Engert
On 28.08.20 19:09, Christian Riechers via enigmail-users wrote: Yet Thunderbird does not load the DLL with the pref mail.openpgp.allow_external_gnupg set to true. There is no occurrence of 'gpgme' in the error console. I've just installed 32bit Gpg4Win v 3.1.12 and a 32bit Thunderbird v 78.2.0

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-28 Thread Christian Riechers via enigmail-users
--- Begin Message --- On 8/28/20 11:46 AM, Werner Koch wrote: On Wed, 26 Aug 2020 22:30, Christian Riechers said: There's just no gpgme DLL file in there. But then I'm still not sure what exactly I'm supposed to look for. Actually there are two copies of gpgme installed by Gpg4win: c:/Pro

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-28 Thread Olav Seyfarth
Hi Kai, Simply use the settings to change the master password, that has the result of using the improved protection. In theory, if you aren't worried that someone might already have broken your old one, you could even reuse the same pa

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-28 Thread Werner Koch
On Wed, 26 Aug 2020 22:30, Christian Riechers said: > There's just no gpgme DLL file in there. But then I'm still not sure > what exactly I'm supposed to look for. Actually there are two copies of gpgme installed by Gpg4win: c:/Program Files (x86)/GnuPG/bin/libgpgme-11.dll and the second copy

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-27 Thread Kai Engert
On 27.08.20 01:19, Andrew Gallagher wrote: On 26 Aug 2020, at 22:28, Kai Engert wrote: Unfortunately, old versions of NSS/Firefox/Thunderbird always used a iteration count of one (1) for the Master Password. Damn, that’s a horrendous flaw. How do I force the database to be re-encrypted wi

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-26 Thread Mark
Thanks for the clarifying that a bit. Going from 1 to 1 is definitely a start in the right direction. However it still seems low, unless I'm misunderstanding something. I know dedicated password managers such as LastPass, Bitwarden, etc., hashes that master password 100K on the client side and

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-26 Thread Andrew Gallagher
> On 26 Aug 2020, at 22:28, Kai Engert wrote: > > Unfortunately, old versions of NSS/Firefox/Thunderbird always used a > iteration count of one (1) for the Master Password. Damn, that’s a horrendous flaw. How do I force the database to be re-encrypted with the new settings? Andrew.

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-26 Thread Kai Engert
On 26.08.20 21:19, Mark wrote: Could you elaborate a bit more on the new and improved Master Password security It's a "password based encryption" (PBE) mechanism. The password chosen by the user is used with a PBE algorithm to encrypt information (such as keys and individual passwords, and in

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-26 Thread Christian Riechers via enigmail-users
--- Begin Message --- On 8/26/20 8:53 PM, Eli Schwartz wrote: On 8/26/20 2:10 PM, Christian Riechers wrote: On 8/25/20 2:29 AM, Eli Schwartz wrote: On 8/24/20 8:12 PM, Mark wrote: Also, what is the 'system library search path' on Windows? Is it the same as the $PATH environment variable? I've

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-26 Thread Eli Schwartz
On 8/26/20 3:12 PM, Mark wrote: > > On 8/24/2020 5:29 PM, Eli Schwartz wrote: >> Fortunately, Thunderbird will have optional support for delegating >> private key actions (decrypt, sign) to an external GnuPG keyring. This >> is primarily being advertised in order to support smartcards. However, >>

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-26 Thread Mark
Could you elaborate a bit more on the new and improved Master Password security now that it is negating the use of passphrases on the private keys? Thanks On 8/25/2020 7:47 AM, Kai Engert wrote: > On 25.08.20 02:12, Mark wrote: >> Am I understanding this correctly, your PGP keys are no longer sec

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-26 Thread Christian Riechers via enigmail-users
--- Begin Message --- On 8/26/20 8:29 PM, Kai Engert wrote: On 26.08.20 20:10, Christian Riechers via enigmail-users wrote: The bad news is, on Windows 10 it does not work at all. With TB78.2.0 all I get is the error 'The secret key that is required to decrypt this message is not available' whe

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-26 Thread Mark
On 8/24/2020 5:29 PM, Eli Schwartz wrote: > Fortunately, Thunderbird will have optional support for delegating > private key actions (decrypt, sign) to an external GnuPG keyring. This > is primarily being advertised in order to support smartcards. However, > GnuPG won't care whether the private k

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-26 Thread Eli Schwartz
On 8/26/20 2:10 PM, Christian Riechers wrote: > On 8/25/20 2:29 AM, Eli Schwartz wrote: >> On 8/24/20 8:12 PM, Mark wrote: >>> Am I understanding this correctly, your PGP keys are no longer secured >>> with their passphrase and instead relies on the global master password >>> in Thunderbird? Does t

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-26 Thread Kai Engert
On 26.08.20 20:10, Christian Riechers via enigmail-users wrote: The bad news is, on Windows 10 it does not work at all. With TB78.2.0 all I get is the error 'The secret key that is required to decrypt this message is not available' when attempting to open an encrypted message. Gpg4Win 3.1.12 is

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-26 Thread Christian Riechers via enigmail-users
--- Begin Message --- On 8/25/20 2:29 AM, Eli Schwartz wrote: On 8/24/20 8:12 PM, Mark wrote: Am I understanding this correctly, your PGP keys are no longer secured with their passphrase and instead relies on the global master password in Thunderbird? Does that not weaken or at least somewhat mi

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-25 Thread Kai Engert
On 25.08.20 02:12, Mark wrote: Am I understanding this correctly, your PGP keys are no longer secured with their passphrase and instead relies on the global master password in Thunderbird? Correct. Does that not weaken or at least somewhat minimize the validity of the signatures? There are n

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-24 Thread Eli Schwartz
On 8/24/20 8:12 PM, Mark wrote: > Am I understanding this correctly, your PGP keys are no longer secured > with their passphrase and instead relies on the global master password > in Thunderbird? Does that not weaken or at least somewhat minimize the > validity of the signatures? There are numerous

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-24 Thread Mark
Am I understanding this correctly, your PGP keys are no longer secured with their passphrase and instead relies on the global master password in Thunderbird? Does that not weaken or at least somewhat minimize the validity of the signatures? There are numerous TB password recovery programs out there

[Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-24 Thread Kai Engert
Hello, here is an article that explains the differences between Enigmail and the new integrated OpenPGP feature in Thunderbird 78: https://wiki.mozilla.org/Thunderbird:OpenPGP:Migration-From-Enigmail Regards Kai ___ enigmail-users mailing list enig