Re: Future OpenPGP Support in Thunderbird

2019-10-12 Thread Damien Goutte-Gattat via Gnupg-users
On Sat, Oct 12, 2019 at 08:07:58AM -0400, Mark H. Wood wrote: Humph, I was already grumpy about Mozilla products' insistence on having their own insular X.509 store, meaning that I have to install certificates twice (once for Firefox, again for *everything else*.) Slightly off-topic for this

Re: Future OpenPGP Support in Thunderbird

2019-10-12 Thread Mark H. Wood via Gnupg-users
On Sat, Oct 12, 2019 at 10:13:59AM +0300, Teemu Likonen via Gnupg-users wrote: > Philipp Klaus Krause [2019-10-08T15:34:28+02] wrote: > > > It would be really nice, if Thunderbird could add an option to use the > > gpg key storage instead of its own, [...] > > I agree with that even though I

Re: Future OpenPGP Support in Thunderbird

2019-10-12 Thread Chris Narkiewicz via Gnupg-users
On 12/10/2019 12:14, Werner Koch via Gnupg-users wrote: > After 20 years of strong resistance against implementing OpenPGP [1], they > finally seem to do it. That is a good move. Do you know why they resited OpenPGP adoption it so much? Cheers, Chris

Re: Future OpenPGP Support in Thunderbird

2019-10-12 Thread Werner Koch via Gnupg-users
On Fri, 11 Oct 2019 21:48, qwrd said: > Storing private keys on a smartcard is a noteworthy security > enhancement, and I would like to see smartcard support being available > in Thunderbird. Either via GnuPG or some other mechanism. Take a Yubikey or an OpenPGP smartcard, install Scute (pcks#11

Re: Future OpenPGP Support in Thunderbird

2019-10-12 Thread Werner Koch via Gnupg-users
On Sat, 12 Oct 2019 02:23, Robert J. Hansen said: > on Enigmail was very real. It was created by an ambiguity in how GnuPG > returns error states: just because GnuPG says "decryption OK" doesn't Nope. They did not read the documentation and did not checked error codes. We suggest for a reason

Re: Future OpenPGP Support in Thunderbird

2019-10-12 Thread Werner Koch via Gnupg-users
On Fri, 11 Oct 2019 20:18, Philipp Klaus Krause said: > They don't want users to require to install gpg first. And they don't > want to ship gpg with Windows installers, since it isn't MPL. The latter is just plain bullshit. There are even many proprietary products which bundle gpg or other GPL

Re: Future OpenPGP Support in Thunderbird

2019-10-12 Thread BruderB
Hej all, Am 12.10.19 um 08:23 schrieb Robert J. Hansen: > they're going to insist on running their own keyring internal to > Thunderbird which isn't shared with anything else. (I imagine > *importing* from a GnuPG keyring will be supported, but *sharing* a > keyring is right out.) _They_ can

Re: Future OpenPGP Support in Thunderbird

2019-10-12 Thread Jan-Peter Rühmann
Which ccomplexity? Creating the Key is the only thing that the normal User has to do, That is possible via a Menue Entry. I don´t see the Problem. Am 2019-10-11 um 21:49 schrieb Chris Narkiewicz via Gnupg-users: On 09/10/2019

Re: Future OpenPGP Support in Thunderbird

2019-10-12 Thread Robert J. Hansen
> PGP and GnuPG and the related communities have tried really hard to > build a system based on person's long-term identity keys. All that web > of trust thing relies on keys that are used relatively long time. But as > we know this doesn't work for most people. People are really bad at >

Re: Future OpenPGP Support in Thunderbird

2019-10-12 Thread Teemu Likonen via Gnupg-users
Philipp Klaus Krause [2019-10-08T15:34:28+02] wrote: > It would be really nice, if Thunderbird could add an option to use the > gpg key storage instead of its own, [...] I agree with that even though I have never really used Thunderbird. But using a custom key storage and implementation (or do

Re: Future OpenPGP Support in Thunderbird

2019-10-12 Thread Robert J. Hansen
> Why the heck don't they just run gpg the way enigmail did? Three major reasons: 1. License incompatibility. GnuPG is GPLv3, and Mozilla uses the Mozilla Public License. They're not compatible. Arguably (and I believe _correctly_) distributing GnuPG with Moz wouldn't be a dealbreaker, as