Re: [Enigmail] From Circumvention

2015-03-08 Thread Phil Stracchino
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 03/07/15 19:02, Doug Barton wrote: Compare this for to get an idea of my context ... https://panopticlick.eff.org/ Your browser fingerprint appears to be unique among the 5,091,038 tested so far. - -- Phil Stracchino Babylon

Re: [Enigmail] From Circumvention

2015-03-07 Thread Patrick Brunschwig
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 06.03.15 17:05, Philip Jackson wrote: On 03/03/15 18:27, Philip Jackson wrote: On 03/03/15 15:44, Robert J. Hansen wrote: Really easy: 1. The Help button beside Convenient encryption settings is sometimes unresponsive. I saw this bug

Re: [Enigmail] From Circumvention

2015-03-07 Thread Lars Noodén
On 07.03.2015 21:45, Rainer Blome wrote: ... Looking at the headers, the character encoding strikes me as a potential leak, as some values, such as charset=windows-1252, hint at the probable OS used. Either Thunderbird or Enigmail often set my replies to windows-1252 instead of normal UTF-8

Re: [Enigmail] From Circumvention

2015-03-07 Thread Rainer Blome
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ian, good point, thanks for this link! Just followed the instructions, let's see what's left. @All: Some people can see some of my social network. That's just a fact of life, and I live with this, as everyone else does. Does this mean that I tell

Re: [Enigmail] From Circumvention

2015-03-07 Thread David
On 3/7/2015 1:22 PM, Phil Stracchino wrote: On 03/06/15 19:23, David wrote: On 3/6/2015 3:37 PM, Phil Stracchino wrote: On 03/06/15 15:16, David wrote: I am confused by this request. What difference does it make if 'someone else' knows whose public is on your public keyring? If they know

Re: [Enigmail] From Circumvention

2015-03-07 Thread Phil Stracchino
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 03/06/15 19:23, David wrote: On 3/6/2015 3:37 PM, Phil Stracchino wrote: On 03/06/15 15:16, David wrote: I am confused by this request. What difference does it make if 'someone else' knows whose public is on your public keyring? If they

Re: [Enigmail] From Circumvention

2015-03-07 Thread Rainer Blome
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am 07.03.2015 um 02:39 schrieb Ian Mann: http://blog.linuxprogrammer.org/How%20to%20Sanitize%20Thunderbird%20and%20Enigmail.html This sanitizes some of the information. The article suggests that extensions.enigmail.addHeaders needs to be turned

Re: [Enigmail] From Circumvention

2015-03-07 Thread Patrick Brunschwig
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 03.03.15 15:44, Robert J. Hansen wrote: 1. The Help button beside Convenient encryption settings is sometimes unresponsive. I saw this bug with my own two eyes (thanks, Dmitri!) and can confirm it. Could it be that the help window was

Re: [Enigmail] From Circumvention

2015-03-07 Thread Matthew Woehlke
On 2015-03-06 15:16, David wrote: I am confused by this request. What difference does it make if 'someone else' knows whose public is on your public keyring? Hello, David, I am a keyserver administrator. Please send me your complete address book. Thanks! (I hope I make my point? I'm *not*

Re: [Enigmail] From Circumvention

2015-03-07 Thread Doug Barton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I took a look at that URL, and I see two problems there. First the data that they suggest you hide is not particularly meaningful. Second, the fact that you are hiding it will make you stand out from the crowd more than not hiding it would. One

Re: [Enigmail] From Circumvention

2015-03-07 Thread Onno Ekker
On 7-3-2015 02:39, Ian Mann wrote: http://blog.linuxprogrammer.org/How%20to%20Sanitize%20Thunderbird%20and%20Enigmail.html This sanitizes some of the information. Ian https://en.wikipedia.org/wiki/Security_through_obscurity ___ enigmail-users

Re: [Enigmail] From Circumvention

2015-03-07 Thread Philip Jackson
On 07/03/15 20:55, Lars Noodén wrote: On 07.03.2015 21:45, Rainer Blome wrote: ... Looking at the headers, the character encoding strikes me as a potential leak, as some values, such as charset=windows-1252, hint at the probable OS used. Either Thunderbird or Enigmail often set my replies

Re: [Enigmail] From Circumvention

2015-03-07 Thread Ian Mann
Doug, I am not into an rebellious or criminal activity. I became interested in enigmail and PGP around a year ago as a matter of general interest. I am an OAP, (Old Aged Pensioner). I was surprised at how easy it was to set up, perhaps I just found the right material. The link below

Re: [Enigmail] From Circumvention

2015-03-07 Thread Ian Mann
The comments on the original web page state the aim of the changes...namely disclosing less. Comments You should take care to disclose as little as possible about the privacy tools you use, if only to make it harder to run automated, targeted attacks against your computers and accounts.

Re: [Enigmail] From Circumvention

2015-03-07 Thread Ian Mann
Read a PDF on DIME and viewed a You Tube video made at DefCon. Lavinson's system has a server, Magma and an email client Volcano, built on Thunderbird. The gist of it was that the metaddata would be hidden more and encrypted as part of the email process. That would make the emails more of a

Re: [Enigmail] From Circumvention

2015-03-06 Thread Rainer Blome
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am 06.03.2015 um 21:37 schrieb Phil Stracchino: On 03/06/15 15:16, David wrote: I am confused by this request. What difference does it make if 'someone else' knows whose public is on your public keyring? If they know whose public keys are on

Re: [Enigmail] From Circumvention

2015-03-06 Thread Ian Mann
54f85f52.20...@2904.cc 54fa0b25.50...@gmail.com 54fa1001.9020...@caerllewys.net 54fa451e.8060...@gmail.com In-Reply-To: 54fa451e.8060...@gmail.com Subject: Re: [Enigmail] From Circumvention X-BeenThere: enigmail-users@enigmail.net X-Mailman-Version: 2.1.17 Precedence: list Reply-To: Enigmail user

Re: [Enigmail] From Circumvention

2015-03-05 Thread Ralph Wozelka
On 2015-03-05 14:51, Stefan wrote: Hi, Am 05.03.15 um 07:42 schrieb Ludwig Hügelschäfer: On 04.03.15 23:33, Rainer Blome wrote: Am 04.03.2015 um 13:18 schrieb Patrick Brunschwig: We could also implement something like an automatic monthly check of all keys on keyservers. Would this

Re: [Enigmail] From Circumvention

2015-03-05 Thread Stefan
Hi, Am 05.03.15 um 07:42 schrieb Ludwig Hügelschäfer: On 04.03.15 23:33, Rainer Blome wrote: Am 04.03.2015 um 13:18 schrieb Patrick Brunschwig: We could also implement something like an automatic monthly check of all keys on keyservers. Would this amount to sending your PGP address book to

Re: [Enigmail] From Circumvention

2015-03-04 Thread Phil Stracchino
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 03/04/15 07:18, Patrick Brunschwig wrote: On 03.03.15 15:44, Robert J. Hansen wrote: 4. If you've disabled encryption and/or signing for a message (when it would normally be present), Enigmail is too polite about it. They'd like to see a

Re: [Enigmail] From Circumvention

2015-03-04 Thread Alexander Buchner
On 04.03.2015 13:18, Patrick Brunschwig wrote: We could also implement something like an automatic monthly check of all keys on keyservers. I would like to see this, since I experience that people never to rarely update the keys from keyservers manually. signature.asc Description: OpenPGP

Re: [Enigmail] From Circumvention

2015-03-03 Thread Ian Mann
Enigmail saved my family's life. That is a real enlightening statement. Living in Australia it's hard to imagine what it must be like for some folk in the countries where an email can get you arrested. Thanks for that insight. You folks do great work, glad you are enjoying the fellowship of

Re: [Enigmail] From Circumvention

2015-03-03 Thread Philip Jackson
On 03/03/15 15:44, Robert J. Hansen wrote: Really easy: 1. The Help button beside Convenient encryption settings is sometimes unresponsive. I saw this bug with my own two eyes (thanks, Dmitri!) and can confirm it. While we are talking about this 'help' button, I'll add a