#enigmail — Public Fediverse posts

@thunderbird should at least open a path to allow us to replace their OpenPGP implementation, RNP, with other implementations, like @sequoiapgp's Octopus.

Integrating #Enigmail was not seamless. Functionality was lost, including #GnuPG's keyring and trust model. (e.g.: https://bugzilla.mozilla.org/show_bug.cgi?id=1732074)

They may have their rationale on which they made these decisions, but the negative effect on the usability of Thunderbird+PGP for those who have them for many years is real.

@thunderbird should at least open a path to allow us to replace their OpenPGP implementation, RNP, with other implementations, like @sequoiapgp's Octopus.

Integrating #Enigmail was not seamless. Functionality was lost, including #GnuPG's keyring and trust model. (e.g.: https://bugzilla.mozilla.org/show_bug.cgi?id=1732074)

They may have their rationale on which they made these decisions, but the negative effect on the usability of Thunderbird+PGP for those who have them for many years is real.

@alrs @aria The #PGP private key is encrypted with your (hashed) password: https://proton.me/support/how-is-the-private-key-stored before being uploaded to Proton's server. This is how you bootstrap on a new machine!

You can export (https://proton.me/support/download-public-private-key) or import (https://proton.me/support/importing-openpgp-private-key) the keypair as you like.

#Proton is "just" doing what people have been doing for decades with things like #Enigmail. I used #Gnus for #Emacs some 20 years ago for the same thing 😄 The achievement of Proton is to make this seem easy!

@alrs @aria The #PGP private key is encrypted with your (hashed) password: https://proton.me/support/how-is-the-private-key-stored before being uploaded to Proton's server. This is how you bootstrap on a new machine!

You can export (https://proton.me/support/download-public-private-key) or import (https://proton.me/support/importing-openpgp-private-key) the keypair as you like.

#Proton is "just" doing what people have been doing for decades with things like #Enigmail. I used #Gnus for #Emacs some 20 years ago for the same thing 😄 The achievement of Proton is to make this seem easy!

Wollte grad (nach Jahren) mal wieder ne #PGP-Verschlüsselung für meine Mails einrichten. Nun hat #Thunderbird ja inzwischen #GNUPG und das sieht ja auch alles ganz toll aus, aber was mich als alter #Enigmail User irritiert, ist das Ding mit der (fehlenden) Passphrase. Also wie ich das verstehe wird die ja (für alle Mailaccounts!?) ersetzt durch das Thunderbird-Masterpasswort. So weit so naja... Aber würde die Mails auch weiterhin gern auffm Handy abrufen (#K9). Da gibts dann n Addon, soweit hab ich das schon gesehen, aber ist dann das Masterpasswort auch da meine Passphrase? Danke schonmal für Tipps...

Bin gerade durch einen Hörer drauf aufmerksam gworden, #Enigmail supported nicht mehr #Thunderbird, obwihl es dafür entwickelt wurde. Weiss jemand mehr dazu? https://enigmail.net/index.php/en/

Bin gerade durch einen Hörer drauf aufmerksam gworden, #Enigmail supported nicht mehr #Thunderbird, obwihl es dafür entwickelt wurde. Weiss jemand mehr dazu? https://enigmail.net/index.php/en/

@sardon not that we know off. As far as we know thunderbirds current extension model does not allow even an #autocrypt compliant plugin let alone all the rest that delta offers. #enigmail used to offer full autocrypt support but when thunderbird changed the plugin model and integrated openpgp into thunderbird they went back to the old idea of "users have to consciously manage their encryption keys" ... An unfortunate old tradition. We aim for modern usable security like signal delivers.

@sardon not that we know off. As far as we know thunderbirds current extension model does not allow even an #autocrypt compliant plugin let alone all the rest that delta offers. #enigmail used to offer full autocrypt support but when thunderbird changed the plugin model and integrated openpgp into thunderbird they went back to the old idea of "users have to consciously manage their encryption keys" ... An unfortunate old tradition. We aim for modern usable security like signal delivers.

Did you know that #Thunderbird, after having integrated #OpenPGP functionality into the core, thus obsoleting #Enigmail, now imports your user's #PGP keyring into its own store, effectively forking it, leaving you with two separate keyrings to manage!

The developers say they won't change that:
https://bugzilla.mozilla.org/show_bug.cgi?id=1732074

Did you know that #Thunderbird, after having integrated #OpenPGP functionality into the core, thus obsoleting #Enigmail, now imports your user's #PGP keyring into its own store, effectively forking it, leaving you with two separate keyrings to manage!

The developers say they won't change that:
https://bugzilla.mozilla.org/show_bug.cgi?id=1732074

Oh my god why didn't #Enigmail encrypt my #email? It literally indicated it will sign and encrypt it and I've imported my recipient's public key! ​:SanaeConfuzzled:​

Oh my god why didn't #Enigmail encrypt my #email? It literally indicated it will sign and encrypt it and I've imported my recipient's public key! ​:SanaeConfuzzled:​

Manchmal denke ich, M$ bezahlt #foss Projekte, dafür, wichtige Features nicht zu implementieren, Beispiel #thunderbird und #pgp: Seit #enigmail nicht mehr läuft, muss man mit dem Texteditor eine json-Datei bearbeiten, um dem Scheißprogramm zu sagen, welche Schlüssel zu welcher Mailadresse gehören. Ohne dieses Gefrickel kann man weder Mailinglisten mit mehreren Schlüsseln betreiben, noch Leute anschreiben, die Schlüssel nutzen, in denen nicht die Adresse hinterlegt ist.

#e2ee is a goal, not a promise. As far back as I can remember, forums like those supporting #Enigmail and #gpg were staffed with volunteers from the privacy community who repeatedly insisted on answering questions, like, "Is <this> (whatever this might be) totally secure?" with stock questions like, "What is it that you consider 'totally secure?" or answers such as, "Secure is a relative term, nothing is completely secure, how secure do you need your mission's communications to be?"

Phrases such as, reasonably secure should be indicators of how ridiculous it is to assume that any secure platform is EVER completely, and totally secure.

That begs the question, "Exactly how secure do you require your communications to be?" The answer is always, ... relative.

Which means that you should always believe Ellen Ripley when she says, "Be afraid. Be very afraid!"

https://www.city-journal.org/article/signals-katherine-maher-problem

#tallship #encryption #PGP #secure_communication #Privacy #FOSS

⛵

.

I think, it's really good, that @thunderbird integrated GnuPG, but it's really annoying, that I still have to manually disable encryption, when I write an e-mail to a contact, who doesn't use GPG (which are unfortunately still quite a few).
In that regard #Enigmail worked a lot better.

#GnuPG #Email #Encryption #Mozilla #Thunderbird

I think, it's really good, that @thunderbird integrated GnuPG, but it's really annoying, that I still have to manually disable encryption, when I write an e-mail to a contact, who doesn't use GPG (which are unfortunately still quite a few).
In that regard #Enigmail worked a lot better.

#GnuPG #Email #Encryption #Mozilla #Thunderbird

Hello community of #Thunderbird #OpenPGP users. I'd like to know if some of you are still stuck at Thunderbird version 68 and the old #Enigmail Add-on. Is there any missing functionality in Thunderbird 115 that is still preventing you from migrating? #PGP #GPG #GnuPG @thunderbird

Hello community of #Thunderbird #OpenPGP users. I'd like to know if some of you are still stuck at Thunderbird version 68 and the old #Enigmail Add-on. Is there any missing functionality in Thunderbird 115 that is still preventing you from migrating? #PGP #GPG #GnuPG @thunderbird

📬 GnuPG-Verschlüsselung: Fragen für den Podcast mit Werner Koch einreichen
#Intern #Interviews #Podcast #Enigmail #esimme #FreeSoftwareFoundationEurope #gnupg #Thunderbird #WernerKoch https://tarnkappe.info/podcast/gnupg-verschluesselung-fragen-fuer-den-podcast-mit-werner-koch-einreichen-276435.html

📬 GnuPG-Verschlüsselung: Fragen für den Podcast mit Werner Koch einreichen
#Intern #Interviews #Podcast #Enigmail #esimme #FreeSoftwareFoundationEurope #gnupg #Thunderbird #WernerKoch https://tarnkappe.info/podcast/gnupg-verschluesselung-fragen-fuer-den-podcast-mit-werner-koch-einreichen-276435.html

@leah Is this still the case 🙄 I remember that I discovered that shortly after #Thundebird killed #Enigmail and I was forced to migrate. That single event made me buy a usb key with #gpg support and create new all gpg stuff on the key. I cannot remember being so angry/disappointed on design decisions made by a opensource project before.

@cosullivan

Hi Christine,

Good to see you!

I too was saddened a couple of years back when #Thunderbird dropped support for #Enigmail. Glad to see you using #gpg and it's indeed odd you can't find the key at #MIT or one of the other traditional keyservers - indeed, it's supposed to be an "upload once and find anywhere" technology, but we now have #Keyoxide, which takes care of that and is gaining prominence in more than just OpenPGP identity 🙂

https://fosstodon.org/@keyoxide

#tallship

⛵

.

In days gone by I used to use #Enigmail to #ecrypt #e-mail messages where possible (precious few of my correspondents use encryption, sadly). This used to be an addon for #Thunderbird but support for it was dropped some time ago as native support for #OpenPGP was incorporated into it. After a long hiatus, I decided to get back to seeing how to use the new interface, particularly with version 102 of Thunderbird. It looks pretty easy once you’ve configured the settings.

#Encryption #GPG #PGP

@snoky No worries. :) #pEp had to move on to it's own component for #Thunderbird as #Enigmail is not available for TB 78 and later.

Con #Qubes lo sencillo es complicado y lo complicado es sencillo. Me cansé de Thunderbird 78, entonces configure un Qube con el template de Ubuntu 18.04 y ahora tengo mi #thunderbird 68 con #enigmail y soy casi feliz.

Upgraded Thunderbird to 78.7.1. This version removes the Enigmail add-on and uses Thunderbird's built-in PGP support. They provided a migration wizard which does the export and import seamlessly. A major email client providing PGP support out of the box is a big step for email privacy.

The new version has a more modern look with flat icons.

I noticed that it shows quoted parts in a different color. There is better visual distinction between mails in a mail thread.

#Thunderbird #PGP #Enigmail

@deimidis

#Enigmail es muchísimo más completo, el incorporado parece una versión 0.5 de Enigmail.

Lo que no perdono:
- No funciona el cifrado oportunista (siempre cifrar si tienes la llave pública del destinatario)
- No se puede elegir el passphrase a utilizar en la llave privada. Te pone una clave aleatoria que la maneja Thunderbird.

Hay otros temas, pero si esas dos cosas funcionaran, estaría bastante aceptable.

https://support.mozilla.org/en-US/kb/openpgp-thunderbird-howto-and-faq

¡#Thunderbird, devuélvenos #enigmail!

Hat sich schon mal jemand darüber beschwert, dass die neue* Ende-zu-Ende-Verschlüsselungsfunktion von #Thunderbird ein riesiger Rückschritt im Vergleich zu #Enigmail ist?
* seit Thunderbird 78

#OpenPGP in #Thunderbird78 is getting on my nerves quite a bit: Even though I have migrated all my keys via #Enigmail I have to trust all of my public keys again by goig to the key management and checking each key manually. #Thunderbird tells me that there is no key available every single time when I want to send an encrypted mail to anyone I already have an imported public key for. Why doesn't it directly ask me to set the trust level? Who thought that this approach was a good idea? 🤬

Dear #Enigmail, what the f*** are you testing?
I need to manually resize the window in order to recognize that there are actual buttons you ask me to interactive with ...
#fail 🤦‍♂️ #gpg #gnupg #Thunderbird

Una considerazione relativa a Thunderbird e il supporto a OpenPGP.

Bene ma non benissimo:

```
At this time, Thunderbird uses its own copy of keys, and doesn't support synchronizing keys with GnuPG. The exception is the mechanism offered for smartcards, which could be used to use the personal keys managed by GnuPG
- Thunderbird's FAQs
```

In pratica nessuna integrazione con Gnome e KDE (li abbiamo provati entrambi) cosa che invece Enigmail gestiva.

#thunderbird #gnome #kde #openpgp #enigmail

Aceptable el cifrado en la nueva versión de #Thunderbird. Lo único que me disgusta es que no tiene cifrado oportunista donde si tienes la clave pública del destinatario, el mensaje se cifra automáticamente (a lo #enigmail).
Entonces cifras todo o nada por defecto. #privacidad

Si no cifras por defecto, es fácil mandar sin cifrar algo que debería estar cifrado. Si cifras todo por defecto te acostumbras a tener un error cuando mandas un correo a alguien que no encripta.

Enfin #gnupg intégré à #thunderbird 78
Plus besoin donc de l'extension #enigmail 😊