Re: [Enigmail] Nightly 59.0a1

[Ludwig Hügelschäfer]

On 22.12.17 09:57, Frank wrote:
> Hello,
> 
> when do you will make a new addon for Nightly 59.0a1 ???

Thunderbird with version numbers higher than 57 require Enigmail nightly
version: https://www.enigmail.net/index.php/en/download/nightly-build

HTH

Ludwig






signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Signed E-Mail flickering in preview and its own window

[Ludwig Hügelschäfer]

Hallo Partrick,

On 26.10.17 08:15, Patrick Brunschwig wrote:
> 
> This can be a valid result if the email is only partially signed, or if
> it's both PGP and S/MIME signed.

It is double signed, both OpenPGP and S/MIME:

--===2094097271970638626==
Content-Type: multipart/signed; micalg=sha-256;
protocol="application/pkcs7-signature";
 boundary=+permail-2017102014511105be2aed2fc6-perske+cmssigned+


--+permail-2017102014511105be2aed2fc6-perske+cmssigned+
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature";
 boundary=+permail-2017102014511105be2aed2fc6-perske+pgpsigned+


etc. etc.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Signed E-Mail flickering in preview and its own window

[Ludwig Hügelschäfer]

Hi Patrick,

On 25.10.17 16:18, Patrick Brunschwig wrote:

I could reproduce the problem on Windows with 1.9.8.3. Log and the
incrementing message come per PM.

> Could you try a nightly build of Enigmail to see if the problem persists?

The nightly doesn't flash. However, the signature is not verified. It
simply shows the signature.asc as attachment.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Thunderbird 52.4 (56) released.

[Ludwig Hügelschäfer]

On 18.10.17 20:05, David Boles wrote:
> 
> I get this popup:

Yes, but it doesn't help for debugging your case. For further help
please check if you have any exceptions in TB error console? (Tools ->
Developer Tools -> Error console)

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Thunderbird 52.4 (56) released.

[Ludwig Hügelschäfer]

On 18.10.17 18:49, David Boles wrote:
>
> Different profiles.

That's a wise decision. :-)

Do you have any exceptions in TB error console? (Tools -> Developer
Tools -> Error console)

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Enigmail stopped accepting my passphrase

[Ludwig Hügelschäfer]

On 18.10.17 01:07, Annika Schäfer wrote:
> Hi,
> 
> when I wanted to sign an email today I realised, that Enigmail does not
> accept my passphrase anymore. Trying to decrypt some old emails had the
> same result. It simply shows a message stating that the provided
> passphrase is invalid. I checked my sent emails and found a two days old
> email with a correct signature from me. My PGP-keypair is three years
> old now and I never changed the passphrase. Therefore, I either somehow
> managed to make the same mistake when typing the passphrase for the last
> three years or the passphrase I enter is correct.
> Currently I'm on Windows 8.1 with Enigmail version 1.9.8.3 and
> Thunderbird 52.4.0.
> I also have another laptop running debian that my PGP-keypair is saved
> on. This laptop has not been used for months now, but when I tried to
> decrypt some old email on this one I also got the message that my
> passphrase is incorrect. I even turned off the Wifi on this laptop prior
> to opening IceDove, to prevent it from downloading anything.
> Also, I tried to uninstall Enigmail on the Windows laptop and then
> reinstall it, but this didn't change anything, turning the laptop off
> and on again either.
> I found someone on the Internet with a similar problem who was able to
> change his passphrase using gnome-keyring, but after installing a GUI
> that was able to access gnome-keyring, it also didn't accept my passphrase.
> 
> Is there anything I could do to get my keypair working again? And if
> not, any suggestions what caused this problem, so that I can avoid it in
> the future?
> 
> Find the logentry of my last attempt to decrypt an old email attached.
> Please excuse the german error messages within the log, I'm running
> Enigmail in german. But this should only concern the displayed messages,
> as far as I can see the internal messages are in english and cover every
> error.

Well, the log is very clear: The passphrase passed to GnuPG is wrong. Do
you have special characters in your passphrase (umlauts, accented
characters, etc.)? Did you switch the language of your keyboard?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] The SSL certificate on enigmail.wiki is expired!

[Ludwig Hügelschäfer]

On 16.10.17 08:11, Az wrote:
> The SSL certificate on enigmail.wiki is expired. Please renew it.

Thanks for reporting. We'll take appropriate action.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Generate Key: Where does "Account / User ID" come from?

[Ludwig Hügelschäfer]

On 08.10.17 21:28, Alexander Buchner wrote:
> Hi,
> 
> I just noticed that the "Generate OpenPGP Key" dialog lets me choose
> between different User IDs. SO far, so good.
> Where does this info come from?
> 
> I'm asking because I can choose an account which I can't find in my
> Thunderbird Account settings. It has to be some leftover of an old account.
> Where can I find (and perhaps finally delete) this ghost account?

Well, in Thunderbird every account can have multiple identities attached
to it. It's a bit difficult to see them all, the corresponding dialog is
not easy to find.

Go to account settings, select your account. In the lower right just
above the "Ok" button there's a button "Manage identities". A list of
all identities attached to this account is displayed. Each identity can
have it's own settings, which you can reach if you press the "Edit"
button. You can also delete unnecessary identities.

HTH

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Windows "Download OpenPGP Keys" not sortable?

[Ludwig Hügelschäfer]

Hi,

On 28.09.17 23:12, Alexander Buchner wrote:
> Hi,
> 
> is it just me or are the entries in "Download OpenPGP Keys" (Enigmail
> Key Management --> Keyserver --> Search for Keys --> OK) not sortable?

No, the key list is not sortable. Might be useful in case you have a lot
of search results, though.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Auto-update fails with TB 55.0b2

[Ludwig Hügelschäfer]

Hi HJ,

On 28.07.17 17:47, H J via enigmail-users wrote:
> Hello,
> 
> I have TB 55.0b2 and the currently installed version of Enigmail
> is 1.9.7. When I use the built-in update checker, it says no newer
> versions of Enigmail are available -- but from enigmail.net I see
> that the latest is now 1.9.8.1.
> 
> The only possible wrinkle I can think of is that I Torify all my mail
> connections via Torbirdy -- but in theory that should (I think) only
> affect SMTP and IMAP. So is the Enigmail update mechanism
> broken in TB 55.0b2, broken in general, or working normally and
> only affected by my Torified connection?
> 
> Thanks in advance for any guidance,

Enigmail 1.9.7 is still the newest offered for update on
addons.mozilla.org
(https://addons.mozilla.org/de/thunderbird/addon/enigmail). Enigmail
1.9.8.1 is still being reviewed by Mozilla (this is mandatory before
being published). So, there's nothing wrong with the built-in update
checker.

You may as well install Enigmails newest version from the Enigmail
website :-)

HTH

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Display of verified in-line messages

[Ludwig Hügelschäfer]

Hi Doug,

On 16.07.17 07:29, Doug Barton wrote:
> 
> Good news, it's fixed. :)
> 
> Bad news, it was none of the above (although I did try them one by one).
> There were some stale configuration items in my gpg.conf which were
> throwing errors. Once I corrected that, the display problem I described
> in this thread with in-line messages stopped happening.
> 
> One of the errors was, "gpg: keyserver option 'verbose' is unknown" and
> the other was related to a missing keyring (I separate my keys into
> multiple different rings by category).
> 
> I'm pretty sure that I've had errors in my conf file before that didn't
> create this issue. It seems like this is something that enigmail should
> handle more gracefully, and I think it used to do so in the past,
> although I couldn't nail down a date/version. OTOH at least I have a
> consistent way to reproduce the error, so hopefully that will make it
> easier to track down.

Which GnuPG version are you running? Which were the offending commands
in gpg.conf? If possible, we'd like to reproduce the problem, this
usually helps speeding up debugging and fixing!

Ludwig

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Problem after Thunderbird 52.1.1?

[Ludwig Hügelschäfer]

Hi Yannick,

On 14.06.17 19:26, Yannick Le Roy wrote:
> Hi Martyn,
> 
> I wrote that i have not been able to open enigmail, using Unpacker.

If you have downloaded the Enigmail XPI file, you don't need to unpack
it. Just add the XPI to Thunderbirds Add-on page, either by drag and
drop or by using "Install Add-on from file".

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Problem after Thunderbird 52.1.1?

[Ludwig Hügelschäfer]

Hi Martyn,

On 14.06.17 17:00, Martyn Thomas wrote:
> I'm finding that the "creating message"message starts and never finishes.

this is a know problem. Can you try the following (inofficial) test
version of Enigmail:

https://enigmail.net/download/beta/enigmail-1.9.8-a4.xpi

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Lost draft messages

[Ludwig Hügelschäfer]

On 06.06.17 23:27, David Boles wrote:

[Drafts being encrypted]

> Menu Bar > Tools > Account Settings > OpenPGP Security > (The actual
> page is titled "Openpgp Options") > uncheck the last box/line > "Encrypt
> draft messages on saving" > click "Okay" button. You have to do this of
> each account using Enigmail.

Thanks for correcting me. Encryption of drafts CAN be disabled despite I
said the opposite.

> Sadly for some reason this setting is a default and it resets to "true"
> (checked) by itself from time to time.

Can you say, under what circumstances this did happen? This would indeed
be a bug.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Lost draft messages

[Ludwig Hügelschäfer]

Hi Simon,

On 06.06.17 21:03, Roland Siemons wrote:
> Dear Ludwig,
> 
> Where can I find my Enigmail version. I cannot find such info under the
> Enigmail menu inside TB.

Thunderbird menu -> Enigmail -> About Enigmail

> There was no request from TB/Enigmail for a pinentry. So I did not
> cancel it. The encryption just happened, apparently (which I found out
> when I tried to edit the saved draft message, and couldn't).

What happens, if you close and restart Thunderbird? Are there gpg or
gpg2 processes active before you try to edit the draft? To find out,
open the windows task manager and sort by application name.

> I am not using IMAP, so want to switch off that automatic encryption.
> Can I make that choice?

No, you can't. Draft encryption is automatically enabled for all
accounts where Enigmail is enabled.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Lost draft messages

[Ludwig Hügelschäfer]

Hi Roland,

On 06.06.17 15:32, Roland Siemons wrote:
> Dear Enigmail,
> 
> Using TB 52.1.1 + Enigmail

Which Enigmail version are you running?

> When upon opening a saved draft email message for further editing, I
> receive the following error:
> "Enigmail Alert
> Enigmail Security Info
> Error - no matching private secret key found to decrypt message
> gpg: decryption failed: No secret key
> Note: The message is encrypted for the following User ID's / Keys:
> 0x1594F1502D7EF3B9 (Roland Siemons )"
> 
> That's my key! I usually can decrypt messages encrypted for myself. So,
> why can't I now?

GnuPG found that your key was not accessible. Did you cancel the
Pinentry passphrase dialog?

> Why does TB at all encrypt that draft message? Can I instruct
> TB/Enigmail to refrain from doing that? (It seems useless to me)

Enigmail does not know (and can't know) where email drafts are stored.
Many people use IMAP draft folders on the server, so not encrypting
drafts is a safety risk, that's why this feature was introduced.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Enigmail Key Management - Expiry date 1/1/70

[Ludwig Hügelschäfer]

On 25.05.17 12:45, Patrick Brunschwig wrote:
> On 25.05.17 11:39, Ludwig Hügelschäfer wrote:

>> Sorry, but I have at least one key that doesn't look good:
>>
>> gpg2 --list-key 0x36E8A8EE
>> pub   dsa1024 2007-04-25 [SC] [expires: 2099-12-31]
>>
>> This still results in Enigmail key manager (and key properties) display
>> of 1.1.00. (This is with both TB 52 and 54b1).
>>
>> Maybe we should go for 4-digit years.
> 
> This won't help. This probably simply a problem of time zones. The
> expiry date is represented as seconds after 1.1.1970. The key expiry
> date represented as long date/time in Thunderbird results in the
> following output:
> 01.01.2100, 00:00 MEZ
> 
> The same date minus one second results in:
> 31.12.2099, 23:59 MEZ

This is correct. I'm sorry, I wasn't clear enough. I think the 2 digit
year display of "00" could be misleading by being interpreted as
1.1.2000. Same could go for the late 19-nineties as opposed to 2090 up.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Problems sending PGP encrypted messages since updating to TB 52.1.0 (32-Bit)

[Ludwig Hügelschäfer]

On 5/23/17 10:06 PM, Christian Riechers wrote:
> On 5/23/17 8:28 PM, Patrick Brunschwig wrote:
>> I think that you have a few issues that are not related to Enigmail but are 
>> more general Thunderbird issues. The date error does not make any sense to 
>> me. I'm simply using a standard TB function to display the date in your 
>> locale.
> 
> I don't disagree. But the date error started only with TB 53 beta.
> There's no such problem with TB52.

This is indeed a TB issue. Just tried with 54.0.b1, see attachment.

1/1/00 shown in the attachment is in reality a key with expiry date
shown by GnuPG as "expires: 2099-12-31"

This should be reported against TB.

Ludwig


signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] regarding "how to turn off constant dialog prompt by Enigmail in background? "

[Ludwig Hügelschäfer]

Hi,

On 16.05.17 15:19, Dr M C Nelson wrote:
> Despite the discussion in the captioned thread some several years ago,
> the bug has not been fixed.
> 
> Enigmail persistently prompts for the password for openpg, stealing the
> focus in the process.
> 
> There is no apparent rhyme or reason for which email recipients or
> accounts for when it chooses to do this.
> 
> If I do not click to encrypt or sign the email, and there is no
> automatic behavior of this sort explicitly turned on, then it should not
> be happening.

There is automatic behaviour, scanning mails in the background, done by
Thunderbird processes. This triggers Enigmail decryption.

You usually solve this kind of trouble by adding a passphrase caching
time. Enigmail -> Preferences, "Basic" tab, "Remember passphrase for x
minutes of idle time." Select x.

> It is impossible to work with emails with this installed.

Agreed, but this is not normal behaviour.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Always the wrong key

[Ludwig Hügelschäfer]

Hi,

On 02.05.17 17:19, Thomas Hoffmann wrote:
> Hello,
> 
> would be nice if you could answer my question. Wehn i try to send an
> encrypted message the addon never chooses the key i click to encrypt it
> with. It always chooses a different one, i did not check in the box. You
> know how to fix this?

Do both keys belong to the same user/mail address? Are both keys
displayed as "valid"?

Ludwig

(CC'ing because not subscribed)



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Encryption and Signing

[Ludwig Hügelschäfer]

Hi Oliver,

On 12.04.17 15:42, Oliver Jay wrote:
> Hello.
> 
> I'm confused. I have send some mails using Enigmail through Thunderbird,
> but one of the "victims" could read any of the mail.
> 
> How does others decrypt my message?

Not only you, but also they need an OpenPGP key pair and suitable
software. And each of you need to have (and verify) the public key of
your recipients.

> In the encryption menu, you choose a
> reciepent and there's only my name. Is this like it should?

You can only communicate securely with those who have a suitable setup
(software and own key pair), and after you have exchanged and verified
each others public keys.

> Or do i have made an error with Enigmail/encryption?

No, you didn't. You only tried too early :-)

If you want to read more, please go here:
https://enigmail.wiki/Introduction_to_Cryptography,_PGP,_and_Enigmail

HTH

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] TBird 45.8.0 and Enigmail 2.0a1pre

[Ludwig Hügelschäfer]

On 27.03.17 19:19, David wrote:

[Screenshots]

Did you install a theme in Thunderbird? If yes, is the display correct
when you switch to the default theme?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] a flaw maybe?

[Ludwig Hügelschäfer]

Hi Dana,

On 15.03.17 15:57, Dana Booth wrote:
> I wanted to try Enigmail, wanted to get back to encryption. When I tried
> to sign a message, I realized I couldn't remember the password for my
> old key. I created a new one, but Enigmail insists on wanting to use my
> old key, even though it's been deleted. I can't find where I can make it
> use another key

You have to tell Enigmail to use the last generated key. Right now, it
uses the first it can find - and that's the old one.

You should open the settings of the account you want to use with
encryption. Then select "OpenPGP security".

Next, use the "Use specific OpenPGP key ID" should be selected. Click on
the "Select key..." button. A key listing should open. Select the key
you want to use.

If you have further questions, please ask!

Ludwig

CC'ing because you're not subscribed.




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Steps

[Ludwig Hügelschäfer]

Hi Mark,

On 10.03.17 17:54, mark crosby wrote:
> It is not clear at all how to exchange encrypted emails with others.
> 
> I have to assume (not found in FAQ) that I would have to send my public
> key to all people with whom I wish to exchange encrypted messages.

Right.

> And
> need to know if this is sent before or after they have installed
> compatible encryption software on their own computer.

No, it's not relevant to know this. They can save the key - which
appears as attachment to a mail - and keep it until they installed the
right software. Then they can import it.

> However, I cannot "find" the Enigmail keychain dialogue (shown in the
> site first steps) on my Mac in Thunderbird under the Enigmail drop-down
> menu. But I did send my key to myself as the first test. I can find the
> Enigmail Key Management dialogue, but it is different than shown in the
> help site.

Which FAQ and which first steps are you referring to?

> So - how to send public key to friends?

That's easy. Compose a mail to them and select from the menu "Enigmail
-> Attach my public key".

> Second, I assume (again not in the FAQ) that friends will need to also
> need to get the GPG plug-in/extension.

Right. They have to install the suitable Extension for their mailclient.

> But does that work in other email
> applications such as Mac Mail, MS Outlook? What is the name of each
> piece of encryption software needed for other than Thunderbird mail clients?

There is a comprehensive list available at
https://gnupg.org/related_software/frontends.html

HTH

Ludwig

(CCing because you're not subscribed)




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Impossible to generate key

[Ludwig Hügelschäfer]

Hi Anders,

On 27.02.17 16:47, Anders Bateva wrote:
> Good! Now the key manager loads all the keys.

Very good!

> I changed the expiry date,
> disabled and revoked all of them that I could. 1 or 2 I couldn't due to
> not being able to enter the correct password for them.

As Doug wrote: If you haven't used them (nothing encrypted to them) and
not send them elsewhere, just delete all you don't need any longer.

If I were you, I'd try to find out why some of the files in the ~/.gnupg
directory were owned by root. This is NOT the behaviour of a standard setup.

This is all to avoid such a painful recovery again and maybe can help
others to run into the same situation as you.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Impossible to generate key

[Ludwig Hügelschäfer]

On 21.02.17 20:55, Anders Bateva wrote:
> Debugging doesn't bugs me.
> 
> Here is the log. I noticed that, 16 times, it tried to open
> "trustdb.gpg" and had "permission denied" ("Permissão negada"). Probably
> isn't what should happen.

No, under these conditions gpg can't work satisfactory. Please repair
the permissions of your ~/.gnupg directory.

chmod -R u+rwx ~/.gnupg
chmod -R go-rwx ~/.gnupg

This can also be done via your file managers GUI.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Impossible to generate key

[Ludwig Hügelschäfer]

Hi Anders,

On 21.02.17 20:18, Anders Bateva wrote:
> gpg -K shows nothing
> 
> gpg2 -K shows the keys
> 
> So, the storage is different. But I generated all of them on gpg2 and
> they are stored on gpg2 and Enigmail access gpg2.

This is all very strange. To find the root of your problems, we would
need to see the debug log not only during startup, but during the launch
of Enigmails key manager. Sorry to bug you for more and more debugging
actions.

So please, restart Thunderbird, and immediately after it is accessible,
start Enigmails key manager. Then store the log. Thanks for your
cooperation.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] imposible to generate key

[Ludwig Hügelschäfer]

On 21.02.17 20:25, Mike Acker wrote:
> could be a problem between Enigmail and GPG2.1 .
> 
> i think gpg2.1 has only recently become available

I'm using gpg 2.1 since more than a year together with Enigmail.

> what i would try: set Enigmail to use gpg rather than gpg2.   go back
> and generate a key using gpg then rather than gpg2.1this clearly
> isn't where you want to end up but the test results could very likely be
> useful

This will not reveal the reason of Anders' problems, I'm afraid.

> you are not playing with EC Curves   are you?

Enigmail together with gpg2.1 can display EC Curve based keys perfectly.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Impossible to generate key

[Ludwig Hügelschäfer]

On 21.02.17 17:53, Anders Bateva wrote:
> Path is already set to  /usr/bin/gpg2 by default.

Anders, did you check the checkbox "Display All keys by Default"?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Impossible to generate key

[Ludwig Hügelschäfer]

On 18.02.17 13:21, Anders Bateva wrote:
> Em 16/02/2017 19:03, Ludwig Hügelschäfer escreveu:
>> On 16.02.17 21:41, Anders Bateva wrote:
>>
>>> Maybe... It's communicating with gpg (v1) instead of gpg (v2)? That
>>> symlink thing that was initially told?
>>
>> That's a possible reason. To be sure, would you please create a debug
>> log file after a startup of Enigmail (Instructions are here:
>> https://enigmail.net/index.php/en/faq?view=topic=15#faqLink_6) and
>> post it here. You may want to obfuscate personal information in the file
>> before posting it here.
>
> Log attached.

This looks all unproblematic. Enigmail finds gpg2 and will use it. There
should be no problem at all when using Enigmail. To clarify what has
happend, would you please check the output of the following commands:

gpg -K

and

gpg2 -K

(remind that K is a capital letter). If the outcome is different, then
you generated your key with one gpg version, Enigmail uses the other and
they have different storage systems.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Impossible to generate key

[Ludwig Hügelschäfer]

On 16.02.17 21:41, Anders Bateva wrote:
> 
> Em 16/02/2017 18:36, Ludwig Hügelschäfer escreveu:
>>
>> Try to open Enigmails key management. Select "Reload key cache". Is
>> there still no key pair (keys in bold and pub/sec in the Type column)
>> displayed? If not, Enigmail has a communication problem with GnuPG.
>
> Enigmail->OpenPGP key manager (or management)-> blank list
> File->Reload key cache-> blank list
> Conclusion: Enigmail has a communication problem with GnuPG.
> 
> Maybe... It's communicating with gpg (v1) instead of gpg (v2)? That
> symlink thing that was initially told?

That's a possible reason. To be sure, would you please create a debug
log file after a startup of Enigmail (Instructions are here:
https://enigmail.net/index.php/en/faq?view=topic=15#faqLink_6) and
post it here. You may want to obfuscate personal information in the file
before posting it here.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Impossible to generate key

[Ludwig Hügelschäfer]

On 16.02.17 21:24, Anders Bateva wrote:
> Em 16/02/2017 17:24, Ludwig Hügelschäfer escreveu:

>>> Now, what should I do, in order to start using the key pair on my
>>> Thunderbird client, "/gpg2 --send-keys/"?
>>> And how to "cancel" the previous key pairs, "/--delete-keys/",
>>> "/--gen-revoke/"?
>> As Doug said: If they were never used and are not uploaded or sent
>> anywhere, just delete them.
>
> I never sent an e-mail using them, but I don't know if they were
> automatically uploaded by my e-mail client.

Enigmail does not publish your public key without your consent.

>> The next thing to do is to tell Enigmail to use the last generated key.
>> You should open the settings of the account you want to use with
>> encryption. Then select "OpenPGP security". The checkbox "Enable OpenPGP
>> support" should be selected.
>>
>> Next, use the "Use specific OpenPGP key ID" should be selected. Click on
>> the "Select key..." button. A key listing should open. Select the key
>> you want to use.
>
> The Enigmail key list is blank as always.

Try to open Enigmails key management. Select "Reload key cache". Is
there still no key pair (keys in bold and pub/sec in the Type column)
displayed? If not, Enigmail has a communication problem with GnuPG.

> Wouldn't I need first to add
> the key pair generated on terminal to the Enigmail interface?

No. Enigmail uses GnuPG for key storage as well as for all cryptographic
operations.

> And to a key server? But I don't know how, would it be "--export" and 
> "--send-keys"?

This would be the next step after fixing your setup.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Impossible to generate key

[Ludwig Hügelschäfer]

Hi Anders,

On 16.02.17 18:36, Anders Bateva wrote:
> Hello I used /"gpg2 --full-gen-key/", and a key pair was generated in
> less than 10 minutes.

That's quite long and an indication of missing entropy.

> But, after generating, I used "/gpg2 -k/" and
> discovered there are 5 keys for my e-mail address on my computer.
> Appears some of the earlier tentatives of creating the key pair really
> created a key pair. Those are set to expire on 2021 or 2022. The one I
> created right now is set to expire on 2018.

Having an expiry date is not a bad idea. I once was glad that an
unusable, but uploaded key had an expiry date set. If it is near, then
you can easily extend the expiry period. Enigmail will tell you when the
expiry is near. You then can decide what to do.

> Now, what should I do, in order to start using the key pair on my
> Thunderbird client, "/gpg2 --send-keys/"?
> And how to "cancel" the previous key pairs, "/--delete-keys/",
> "/--gen-revoke/"?

As Doug said: If they were never used and are not uploaded or sent
anywhere, just delete them.

The next thing to do is to tell Enigmail to use the last generated key.
You should open the settings of the account you want to use with
encryption. Then select "OpenPGP security". The checkbox "Enable OpenPGP
support" should be selected.

Next, use the "Use specific OpenPGP key ID" should be selected. Click on
the "Select key..." button. A key listing should open. Select the key
you want to use.

If you have further questions, please ask!

Ludwig





signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Impossible to generate key

[Ludwig Hügelschäfer]

On 15.02.17 22:15, Anders Bateva wrote:

>> As I stated previously Enigmail seems to depend on /usr/bin/gpg being
>> version 2 of GnuPG.
>>
> Do you have any suggestion about this? I depend on gpg1 for my VPN
> client, and gpg2 for Enigmail. So I can't just remove "gpg1" and turn it
> into a symlink. I decided to ask on the IRC channel of the VPN provider
> too, now, as they are involved on this matter.

gpg2 and gpg1 can coexist peacefully on a machine without affecting
Enigmail operation.

Anders, did you try

gpg2 --gen-key?

What was the outcome?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] How to specify which key to use for signing?

[Ludwig Hügelschäfer]

Hi,

On 25.01.17 21:24, Thomas Nyberg wrote:
> Hello,
> 
> I have two different email addresses that I use in the same Thunderbird
> account: fi...@email.org and sec...@email.org. When I try to send an
> email as either fi...@email.org or sec...@email.org, it will always use
> the fi...@email.org's key when I try to sign an email. How do I make it
> use the other key? Why does it not try to use that key automatically
> since they're both available in my keyring and can both be found for
> encryption/decryption purposes?

Do you have two accounts or one account with two identities? If you have
two accounts, Alexander's reply is sufficient.

If you have configured one account with two (or more) identities, then
you have to go through all these identities. Go to: Tools -> Accounts ->
Select your account -> Click on "Manage Identities". A popup dialog
comes up. Then select - one after another - all your identities you want
to use with Enigmail by clicking on "Edit", selecting the "OpenPGP
Security" tab and making the approtiate settings.

This UI design is given by Thunderbird and in my eyes, well, lets say
not intuitive. Too many settings are hidden under a tiny button.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Enigmail sometimes fails to protect PGP/MIME headers

[Ludwig Hügelschäfer]

On 19.01.17 20:34, Anthony Papillion wrote:
> On 1/19/2017 1:10 PM, Ludwig Hügelschäfer wrote:

(...)

>> Sorry to ask such a stupid question, but by which means do you detect
>> that the headers are encrypted or not?
>>
> 
> Hi Ludwig,
> 
> Mostly by looking at the message in my inbox PRIOR TO decrypting the
> mail for the first time. So, for example, I will open my inbox and see a
> subject like
> 
> "How goes the day"
> 
> and when I click on it, I am prompted for my GPG password. At first, I
> thought that maybe the headers WERE encrypted and I was seeing them
> being decrypted without noticing. However, I've had someone send me an
> encrypted message with protected headers to a system that did not have
> GPG installed and I could still easily read the subject.

Please verify that these messages are really PGP/MIME messages and not
in inline format.

Thanks

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Enigmail sometimes fails to protect PGP/MIME headers

[Ludwig Hügelschäfer]

Hi Anthony,

On 19.01.17 18:13, Anthony Papillion wrote:
> On 1/19/2017 10:56 AM, Patrick Brunschwig wrote:

(...)

>> I don't fully understand what you mean with a Windows 7 system. Does it
>> happen for mails that you sent out, or mails that you received?
> 
> It actually happens both. There have been several piece of mail I've
> sent that have had the body properly encrypted but the headers are
> unprotected and several I have received with the same issue.

Sorry to ask such a stupid question, but by which means do you detect
that the headers are encrypted or not?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Thunderbird and Enigmail on multiple computers?

[Ludwig Hügelschäfer]

Hi Paul,

On 18.01.17 23:59, p...@artisticslate.com wrote:
> Robert,
> 
> I have copied over the .gnupg folder and contents (and removed the
> random_seed file), but when I go to the Account Settings on my laptop
> and click into OpenPGP Security I do not see the key from my desktop.
> Is there some additional step needed to get Thunderbird to re-read that
> folder?
> Also, under Enigmail Key Management the keys from the desktop do not
> show up.

Is "Display all Keys by Default" checked?

Restarting Thunderbird is not necessary after key relevant actions
outside of Enigmail. Just open Enigmails key management and reload the
key cache (File -> Reload key cache).

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] [SPAM] enigmail-users Digest, Vol 54, Issue 14

[Ludwig Hügelschäfer]

Hi,

On 17.01.17 20:21, Dominik Kucher wrote:
> On my Thunderbird with enigmail, at home it believes my signature is
> good but at work on my Thunderbird with enigmal it believes it broken. why?

A broken signature shows that the content (signed content or the
signature) was modified between the sending process and the receiving
process. You cannot say which part if you cannot compare the sent
original and the received copy.

If, however, you receive on different ends, and only one copy didn't
verify correctly, this proves that the disturbance was on the way to
only this special receiving end.

A typical disturbance breaking the signature could be a folded line in
the message text.

Inline PGP format is usually much more vulnerable, PGP/MIME format
provides more resistance against this problem.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Keys not showing up in Enigmail setup wizard

[Ludwig Hügelschäfer]

Hi,

On 14.01.17 05:17, Daniel P. Brown wrote:
> Hello,
> 
> I'm trying to configure Enigmail on Icedove within Tails OS. My keys
> show up in the Enigmail Key Manager, but when I'm going through the
> setup wizard, I choose the second option (experienced users setup)
> because I already have keys I want to import. I select the keys when
> prompted, but when I go to the page for "Key Selection - Create A Key to
> Sign and Encrypt Email" none of my keys show up.

Your keys may not have the right "ownertrust" setting after importing
them. Please first go to the Enigmail key management, select your key
pair (it's showing up in bold, does it?) and select Edit -> Set Owner
Trust. A dialog pops up. Please select "I trust ultimately", as this is
your key pair and you certainly trust your own signature :-)

> I should note that I messed with the OpenPGP settings in Icedove itself
> and enabled encryption using my keys and when I opened this email to
> draft it, the encryption settings were there.

That probably doesn't hurt you.

HTH

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Typo in pt_PT

[Ludwig Hügelschäfer]

Hello Marco,

On 12.01.17 17:56, Marco A.G.Pinto wrote:
> Hello!
> 
> I was just opening an e-mail in my other computer where I have
> Thunderbird in pt_PT and it said:
> "Parte da mensagem assinado com chave desconhecida; premir o botão
> 'importar chave' para transferir a chave blah blah"
> 
> "assinado" should be "assinada" (feminine).
> 
> Just my two cents.

Thanks for this hint. However, the translations of Enigmail are kept on
http://beta.babelzilla.org/projects/p/Enigmail/ where they are
contributed by volunteers. If you want to be part of these volunteer
translators, you can register there and contribute.

Thanks again!

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Fwd: Editing Enigmail Menu

[Ludwig Hügelschäfer]

Hi,

On 06.01.17 20:07, gehrig wrote:
> Is it possible to edit the Enigmail -->Decrypt to Folder menu?
>
> I would like to decrypt all my emails to the Local Folders Inbox only.
>
> I decrypted some emails in the beginning to some wrong places.
> Now those places are in the menu, and I would like to delete them.

You already received an answer. If you didn't receive it for whatever
reason, you can read it in the archives:

https://admin.hostpoint.ch/pipermail/enigmail-users_enigmail.net/2017-January/004249.html

HTH

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Enigmail asks for password for old key

[Ludwig Hügelschäfer]

On 30.12.16 13:10, Pedro Ribeiro wrote:

> I used to have a per-recipient rule for myself, but deleted it and I've
> tried with and without it.  My gpg.conf did not exist before I added the
> default-key directive.
> 
> I only have one identify for this account, and he new
> key is specified in the Thunderbird -> OpenPGP Security account
> settings. Enigmail is set to use convenient encryption settings.
> 
> My gpg-agent.conf says this:
> ###+++--- GPGConf ---+++###
> default-cache-ttl 600
> max-cache-ttl 6000
> 
> But the PIN still doesn't get cached...

I think we have to debug one level deeper. Which OS are you running?
Which version of Enigmail and GnuPG? Do you have a parallel install of
GnuPG v1 and GnuPG v2? Are there two gpg-agent processes running under
different users?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Enigmail asks for password for old key

[Ludwig Hügelschäfer]

Hi,

On 30.12.16 03:52, Pedro Ribeiro wrote:

> Hi Ludwig,
> 
> I've added a default-key directive to my gpg.conf and got it working.

Enigmail does not need any of those directives in gpg.conf to work
properly. The other way round: they lead to problems if you e.g. change
keys and forget about old entries in gpg.conf.

If you ADD such an entry in gpg.conf and it fixes things for you shows
that something is misconfigured in your Enigmail setup. So, if you don't
mind, I'll ask the other two questions again:

Do you have a per-recipient-rule for your email address? Did you specify
the new key in account settings?

And another one: Did you specify the new key for all identities of the
account(s) configured to use with Enigmail?

Ludwig





signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Do not use short fingerprints

[Ludwig Hügelschäfer]

On 17.12.16 10:01, vv01f wrote:
> On 17.12.2016 09:52, Nico wrote:
>> But there is no way for me to check the full fingerprint. I first need
>> to import/download the key and then i can validate it. If it would be
>> shown directly with the full length, that'd be simpler and more secure.
>> Another option would be to add a hover text with the full fingerprint.
> 
> There is no such problem:
> 
> https://pgp.mit.edu/pks/lookup?search=0x48B660CA=index=on
> 
> just tell you want to knwo the fingerprint and the keyserver might tell
> you. and later after import check another time, as the connection could
> have been intercepted (X.509 and/or TLS aint perfect as well).

This is a practicable workaround.

But: Enigmail claims to be a comprehensive user interface. As such, we
should display at least the long key-Id or better the fingerprint
instead of the short prior to importing.

https://sourceforge.net/p/enigmail/bugs/316/

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Enigmail - can't view my private code

[Ludwig Hügelschäfer]

Hi Phil,

On 05.12.16 20:44, Phil Chubb wrote:
> I'm new to Enigmail.  I've apparently installed it correctly in
> Thunderbird  (45 I think - latest version) , created public and private
> keys, etc. but nothing shows up in the key management window or
> the private key side of GPA key manager and when I try and open the
> secring file via GPA, nothing shows up again.  There's apparently 6 kb
> in the file but I can't read it.  Very frustrating.  Is my private
> key really there and if so, is there any other way I can find out what
> it is?

Did you check the "Display all Keys by Default" in Enigmails key manager?

Can't speak about GPA, though.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Help

[Ludwig Hügelschäfer]

On 27.11.16 23:30, gehrig wrote:
> Ludwig Hügelschäfer, The emails are coming from different places. They
> go to my Countermail.com email. When they get to my Thunderbird program,
> they decript as plain text with html code printed on the page. I tried
> to change the message body from HTML Original to HTML Simple, no change.
> However, if I change to plain text, the message is displayed, if there
> are no pictures. If there are pictures, they are converted to URLs.
> Thanks for your reply, gehrig

This sounds as if the content-type is wrong. Can you please display the
message source (CTRL-U on Windows) and search for lines beginning with
Content-Type

There should be a line like:

Content-Type: text/html;

If you have multiple lines beginning with "Content-Type", then we would
need to see the MIME structure. The best way to analyze would be to
forward such a message as attachment(!) to me. No worries, I cannot
decrypt it, nor would I publish confidential details.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] [ENIGMAIL-1.9-BRANCH PATCH] keep options distinct

[Ludwig Hügelschäfer]

On 27.10.16 21:00, Ludwig Hügelschäfer wrote:
> Hi,
> 
> On 27.10.16 20:13, Daniel Kahn Gillmor wrote:
> 
>> Any suggestions for what to debug next?
> 
> I suppose there's nothing related in the Thunderbird error console,
> right? Enigmail master runs an import from file flawlessly. I'll compare
> master and enigmail-1.9-branch.

Just tested: enigmail-1.9-branch imports a key from file as well as
master here.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] [ENIGMAIL-1.9-BRANCH PATCH] keep options distinct

[Ludwig Hügelschäfer]

Hi,

On 27.10.16 20:13, Daniel Kahn Gillmor wrote:

> Any suggestions for what to debug next?

I suppose there's nothing related in the Thunderbird error console,
right? Enigmail master runs an import from file flawlessly. I'll compare
master and enigmail-1.9-branch.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] add on is not verified by firefox

[Ludwig Hügelschäfer]

On 14.10.16 23:53, Datse Multimedia Information wrote:
> Actually that isn't exactly an impertinent question.  It could sound
> like it, because the package format is the same for Firefox as it is
> for Thunderbird, and if you use Firefox to try to download a
> Thunderbird add-on, it has a nasty habit of trying to install it into
> Firefox.  I would say more of an "annoying feature" than a bug, but
> it could explain what happened.

Yes, that will happen when you try to install the Enigmail XPI in a
current (49.0.1) firefox.

But: The package format clearly specifies which Mozilla platforms the
.XPI is compatible with. I consider it a bug of Firefox not to clarify
the platform conformity before checking the presence and validity of the
signature. A good error handling would present the user with the following:

/
| Hey, I have detected two problems when trying to install the XPI
| (filename):
|
| 1. It is not compatible with FF xx, but only with TB (version range)
| and SM (version range)
|
| 2. It is not verified (misses an internal signature by $CA).
|
\

That should even fit on a smartphone screen.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Fwd: Enigmail Error/Bug/Problem

[Ludwig Hügelschäfer]

On 02.10.16 15:59, Ludwig Hügelschäfer wrote:
> Hi,
> 
> On 02.10.16 14:19, Rabea Seyboldt wrote:
>> [Exception... "Cannot modify properties of a WrappedNative"
>> nsresult: "0x80570034 (NS_ERROR_XPC_CANT_MODIFY_PROP_ON_WN)"
>> location: "JS frame :: resource://enigmail/mimeDecrypt.jsm ::
>> EnigmailMimeDecrypt.prototype.returnData :: line 442"  data: no]
> 
> This is probably the culprit.

Oh, Patrick was faster and - as always - more specific :-)

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Fwd: Enigmail Error/Bug/Problem

[Ludwig Hügelschäfer]

Hi,

On 02.10.16 14:19, Rabea Seyboldt wrote:
> [Exception... "Cannot modify properties of a WrappedNative"
> nsresult: "0x80570034 (NS_ERROR_XPC_CANT_MODIFY_PROP_ON_WN)"
> location: "JS frame :: resource://enigmail/mimeDecrypt.jsm ::
> EnigmailMimeDecrypt.prototype.returnData :: line 442"  data: no]

This is probably the culprit. Just to be sure: have you unchecked the
option in Enigmail preferences -> Advanced Tab -> "Only download
attachments when opened"?

You may have to enable "Display Expert Settings and Menus" in the
"Basic" tab to reach the "Advanced" tab.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] how do I get an old PGP key back after a new one has been generated?

[Ludwig Hügelschäfer]

Hi,

On 30.09.16 12:45, Susan Hawley wrote:
> Hi there
> 
> I recently had my Thunderbird moved from a PC to a Mac and in the
> process of installing enigmail on the Mac version of Thunderbird it
> generated a new PGP key. This means I cannot now access any of my old
> encrypted emails.
> 
> Do anyone know how I could reinstall my old PGP key?

Yes. Enigmail has an Backup and Restore feature. It not only transfers
keys, but also all settings. On the old machine, go to Enigmail ->
Preferences. Select the "Backup/Restore" Tab on the right. Push "Export
Settings and Keys". Select a file. You might be asked to enter the
passphrase of your private key(s).

Transfer this file to the new computer. There, go to Enigmail ->
Preferences. Select the "Backup/Restore" Tab on the right. Push "Restore
Settings and Keys". Select the transferred file. You're done.

You may have to select your old key pair to be used for your mail account.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Enigmail interferes with the display of s/mime signed messages

[Ludwig Hügelschäfer]

On 10.09.16 23:15, NoOp wrote:
> 
> Works with 1.9b1. Does not work with 1.9b2.

Good, that's a very small regression window. Thanks for testing! Could
you please send logs for these two?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] REPLACE the eye-challenging gray text on website

[Ludwig Hügelschäfer]

Hi,

On 06.09.16 18:08, Doug Barton wrote:
> On 09/04/2016 06:24 PM, Jim Wyman wrote:
>> Please STOP using gray text on the white background on your website.
>> (...)
> 
> While I certainly agree with your sentiments, I'm not seeing grey text
> on the enigmail web site. Can you give some example URLs?

The only page which I can think of in this context is the FAQ
http://enigmail.net/index.php/en/faq?view=category=11 where we have
grey on white text.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] FAQ / Enigmail Gpg2 and "Missing passphrase" "No secret key" error

[Ludwig Hügelschäfer]

On 01.09.16 14:42, Guillaume MULLER wrote:

(...)

> I'm not sure if I made a mistake when switching from gpg to gpg2, or
> if it is a bug in gpg2, or if there was a tool in enigmail to switch
> to gpg2, which forgot to export/import the secret keys, but I think
> it would save a lot of time to other people like me if you would
> mention the problem/solution in your FAQ!

gpg1.x and gpg2.x should be able to operate on the _same_ keyrings.
Which versions of gpg1.x and gpg2.x are you using exactly?

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Got a question

[Ludwig Hügelschäfer]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi Monica,

On 24.07.16 02:07, Monica Smith wrote:
> *I had downloaded enigmail for my program "Mozilla Thunderbird".
> 
> I just opened an email, so I followed the "Setup wizard"
> 
> I also clicked the "Setup Wizard"
> 
> So I clicked Start up Now...
> 
> I also clicked "I prefer a standard configuration"
> 
> So I let it do it's thing but that was more than an hour or 2 and
> no progress (like the pic below)
> 
> What am I doing wrong?  I'm new at this.

You didn't do anything wrong. The Enigmail Setup wizard couldn't
download the necessary GnuPG package - for unkonwn reasons.

You can do this manually instead. Fetch
https://files.gpg4win.org/gpg4win-vanilla-2.3.2.exe and start it.

After that, please restart the Enigmail setup wizard - it will detect
the existing GnuPG installation and use it automatically.

Hope this helps!

Ludwig


-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=sQrF
-END PGP SIGNATURE-

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Unverified signatures and mailing lists

[Ludwig Hügelschäfer]

On 23.06.16 01:39, Duncan Guthrie wrote:
> Dear Enigmail users,
> When I send messages to mailing lists, they have started to become
> 'unverified'. When I send the email and sign it, in my 'sent' folder
> the signature is good. However, when the mailing list receives it, the
> signature is unverified.
> Has anyone ever had similar problems, and if so, how do I fix it? I
> have begun to suspect that this may be due to the protocol being
> PGP/MIME, this producing a bad signature when processed by the mailing
> list software,

Mailman (a mailing list software) in earlier versions had problems with
PGP/MIME signatures. This list is using version 2.1.20 which is known to
work. Can't talk about other software.

> so would using inline PGP be the way forward?

If your list(s) are using mailman, you could persuade the administrator
to upgrade. If it's using other software, inline signatures may be the
way to go.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Install GNUPG

[Ludwig Hügelschäfer]

Hi,

On 21.06.16 09:07, Jp wrote:

> Hello,
> 
>   I am having trouble installing GNUPG, I install the suite from
> gpgtools.org and enigmail does not see it!

what happens when you open a Terminal application window and type

gpg2 --version

Please report the output.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Long lines in signed mails - When are they a problem?

[Ludwig Hügelschäfer]

On 10.06.16 00:29, Hauke Westemeier wrote:
> 
> Hi,
> 
> I'm using Enigmail 1.9.2 with Thunderbird 45.1.1 (Windows). I'm
> sending my e-mails as plain text (no html) and use PGP/Inline (some of
> my contacts prefer it over PGP/MIME).
> 
> If my signed e-mail contains long unbreakable text lines (especially
> links) Enigmail prints a warning about them and I can choose between
> various options how to proceed. If I choose automatic line wrap, the
> links are being split up over several which is undesirable. Therefore
> I usually send them without changes but in the dialogue box enigmail
> warns about that this might result in a broken signature. At least if
> I look at the e-mails in my send box the signature looks always (I
> checked several dozed mails) OK and other people also verified the
> signature as correct. In which circumstances does the long lines
> result in a broken signature?

This may happen, when some mail servers add a line break within the long
line. This invalidates inline signatures.

> If Thunderbird changes the line wrap
> after signing I would see this when I look at the e-mail in my send
> folder, wouldn't I?

Yes, you would, but it isn't Thunderbird...

> How likely is it that a server on the way changes
> the line wrap?

Depends - some people have experienced this, some haven't.

> I would prefer if there would be a way to define the default choice
> (like it is for the handling of attachments).

Best choice is to use PGP/MIME - it doesn't have this problem. It's
always better to avoid problems than to find and optimize workarounds.
Which of your mail contacts cannot use PGP/MIME? Can you convince them
to use newer software which is PGP/MIME capable?

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Selective encryption in one message

[Ludwig Hügelschäfer]

On 08.06.16 11:16, Hakuch wrote:

> of course there is, just because there are mail providers I trust more
> than others

I don't think the big agencies have access to the disk at providers mail
servers. But you never know which line your TCP packets travel along.
You never know who's listening where. Before Snowden such a view was
regarded as paranoid, now it isn't any more.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Selective encryption in one message

[Ludwig Hügelschäfer]

Hi,

On 07.06.16 22:12, Hakuch wrote:

> On 03.06.2016 21:34, Patrick Brunschwig wrote:
>> On 03.06.16 09:46, Dr. Christian Madelung wrote:
>>> Good day,
>>>
>>> we have been using Enigmail for a number of years now. With more users
>>> being added, we encountered a challenge:
>>>
>>>   * you write a new email
>>>   * you have 3 addressee's where you have the PGP keys
>>>   * your main addressee is a client where you don't have a key
>>>
>>> Question: Can I send this email in one go - having the client receiving
>>> it un-encrypted, while the others receive it encrypted?
>>
>> Enigmail does not support this.
>
> thats a pity, is there no plan for supporting this?

Given the fact, that an unencrypted version of the mail is sent out,
there's little benefit in implementing this.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Question re Passphrase Change Problem

[Ludwig Hügelschäfer]

Hi John,

On 24.05.16 02:01, John Viola wrote:
> Hi All,
> 
> I am having a problem with my Enigmail plugin. I recent changed the
> passphrase, and now I am unable to use my key to encrypt, decrypt, sign,
> verify, or presumable any other function. When I try to display an
> encrypted message I get the error message:
> 
> “Error - no matching private/secret key found to decrypt message Public
> key B2CA681490A25ED5 needed to verify signature. gpg: decryption failed:
> secret key not available”
> 
> However, when I look in key management the correct key is in bold. When
> I try to sign a test email to myself I get the message:
> 
> “Send operation aborted. Error - bad passphrase”
> 
> Although I am not promted for my passphrase. This problem began
> immediately after I changed my passphrase and I have changed no other
> settings. I am running Enigmail version 1.7.2 (20140829-0917)
> 
> Any guidance or recommendations on this issue would be greatly appreciated.

You already got an answer to your identical forum post:
https://sourceforge.net/p/enigmail/forum/support/thread/79dede13/

Please do not double post in the forum and the mailing list. Just choose
one and stick to that place for discussion.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Improvement suggestion for per-recipient-rules

[Ludwig Hügelschäfer]

On 16.05.16 17:35, Max Lehmann wrote:
> I've got an idea for an improvement, but I can't create a sourceforge
> account, because of some strange error.

Which error do you get?


> It'd be nice if someone of you could add this to the issues.
>
> When editing per-recipient rules, there is the button "Select keys"
> under "Use the following OpenPGP keys:". At the moment, I have to select
> every single key when editing these, which is pretty annoying when
> having lots of keys. It would be much more convenient if the keys I
> chose the last time would still be selected.
> I hope this is understandable. If not, I'll explain it with some
> screenshots.

This sounds like https://sourceforge.net/p/enigmail/bugs/604/

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Problems updating to GnuPG 2.0 and Engimail 1.9.1

[Ludwig Hügelschäfer]

On 28.04.16 01:46, Hauke Westemeier wrote:

> (...)

> Why is actually a different key server ldap://keyserver.pgp.com used
> for the first key? As I said, I set keys.gnupg.net as only key server
> in the Enigmail settings and this server is used for all others but
> the first key.

To give an answer for all: The key in question has a "preferred
keyserver URL" set on a UID, so gpg looks there, and not at the given
location by the keyserver set in Enigmail preferences.

HTH

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Enigmail interferes with the display of s/mime signed messages

[Ludwig Hügelschäfer]

Hi,

On 30.04.16 15:50, Klaus Merkel wrote:
> Hello list,
> 
> I've encountered a possible bug in the enigmail thunderbird addon. When
> the addon is enabled in thunderbird 45.0 it prohibits thunderbird from
> displaying s/mime signed messages. Is that a known behaviour? If yes is
> there a fix available?

Which version of Enigmail do you have installed? If it's not 1.9.2,
please upgrade. You are probably suffering from
https://sourceforge.net/p/enigmail/bugs/592/, fixed in 1.9.2.

Ludwig





signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Import of Key Fails

[Ludwig Hügelschäfer]

On 30.04.16 09:04, Ludwig Hügelschäfer wrote:

> Enigmail currently cannot import expired keys. This is a regression from
> 1.8.

I have created https://sourceforge.net/p/enigmail/bugs/602/ for this issue.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Key generations

[Ludwig Hügelschäfer]

Hi,

On 22.04.16 06:14, Olusegun wrote:
> Hello,
> 
> I came across your software with Mozilla Thunderbird and I will love to
> use it. While doing set up, it was about to generate both public and
> private keys... but it was just there for a long time. i did it again,
> it was the same. So I have not be able to use it.

Sorry to hear that. The observed long or hanging key generation might be
caused by a slow machine, a machine running out of entropy (like a
virtual machine), or it might be due to a bug.

In order to separate the reason, we need more infomation; could you
please report the following:

- Machine (just whether it's new or older than lets say 5 years),
- Virtual or real machine
- Operating system
- Enigmail version
- GnuPG version

Thanks!

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Thunderbird update - gnupg and gnupg2

[Ludwig Hügelschäfer]

On 23.03.16 18:19, Kevin McGuinness wrote:

> EnigmailAgentPath=/usr/lib/gnupg2/gpg-protect-tool

Enigmail is using the wrong command. Did you select the command
manually? If yes, please deselect the checkbox "Override with" at
Enigmail -> Preferences, Basic tab.

Enigmail is quite smart in detecting the right gpg command.

I'm quite convinced that you can view your keys again when this issue is
fixed.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Question regarding PGP/MIME protocol

[Ludwig Hügelschäfer]

On 23.03.16 02:12, PLML wrote:
> I have Win7 / Thunderbird latest / Enigmail (latest).
> 
> A recent Enigmail update defaults the Protocol to PGP/MIME.
> 
> Before this March update, the e-mail being sent encrypted on-screen
> before sending.
> After the update, the e-mail did not show as encrypted before sending.
> When I change the Protocol back to PGO-Inline, it shows on the screen
> encrypted usual.
> 
> Question 1.   with PGP/MIME, is the e-mail being encrypted before
> sending, the same as it shows with PGP-Inline ?

Yes.

> Question 2.  when receiving e-mail encrypted with PGP/MIME protocol, the
> top bar says it has decrypted.  Was it actually encrypted properly by
> the sender.   Sender noticed same as me above when sending.

Yes. You can look at the actual source of the message which is currently
selected by pressing CTRL-U (CMD-U on Mac). This shows you what you have
sent or received.

HTH

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Decrypt button not visible in Japanese

[Ludwig Hügelschäfer]

Hi anatak,

On 10.03.16 08:06, anatak wrote:
> Hello,
> 
> I just installed enigmail on a Japanese friend's computer.
> The decrypt button icon is not visible. The button was available through
> Thunderbird -> Preferences (オプツョン) -> toolbar layout (ツールバーの
> カスタムイズ) -> decrypt.
> 
> I put the button on his toolbar but nothing showed (also no text)
> after restoring to default the button also went missing from the toolbar
> layout menu. any idea how I can get a decrypt button ?
> 
> Windows 7 computer Thunderbird 35.5.0

- Please try to locate your Thunderbird profile directory.
- Close Thunderbird
- Rename (not delete!) the file named "xulstore.json" to e.g.
  "xulstore.json.bak"
- Start Thunderbird

After this, the layout will look different. Do you now see the decrypt
button?

This method has some collateral damage: Your folder sorting and
activated columns has been lost and must be reestablished. But sometimes
there is a wrong entry in "xulstore.json" and it makes buttons invisible
and other bugs of that sort.

If it doesn't help you, close Thunderbird and delete "xulstore.json",
and rename "xulstore.json.bak" to "xulstore.json".

In any case, please report back!

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Enigmail does not decrypt

[Ludwig Hügelschäfer]

Hi,

On 10.03.16 16:08, Michael Mayer wrote:

> Am 10. März 2016 07:37:56 MEZ, schrieb Michael Mayer :
> 
> Dear all,
> I'm using TB 38.6.0 and Enigmail 1.9.1
> Since a few days (weeks) I have trouble with this tool.
> I canno encrypt received mail with my smartphone it works :-(
> When I use PGP/MIME or I recieve PGP/MIME, I can only encrpyt files when
> I make reply.
> PGP/MIME encrpyted mails cannot be opened with my smartphone I need
> there since a few weeks always to open the attachment and then insert
> the message into AGP-tool.
> Smartphom Android K9 Mail with AGP

> Sorry i mean decrypt
> Mit freundlichen Grüßen
> Michael Mayer

The default in Enigmail 1.9x has been changed to send mails in PGP/MIME
format. You can change that at Account Settings -> OpenPGP Security,
remove the check at "Use PGP/MIME by default". Do that for all accounts
and all identities that have enabled OpenPGP support.

But please be aware that there are other senders out there that send in
PGP/MIME format. You should look out for a new software that can deal
with PGP/MIME.

HTH

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] "Add my own key to the recipients list" option vanished?

[Ludwig Hügelschäfer]

On 02.03.16 23:19, Hadmut Danisch wrote:
> Hi,
> 
> I'm using enigmail for ages, and there used to be an option „Add my own
> key to the recipients list”, which I can't find in the latest ubuntu's
> enigmail version.
> 
> Has this option been removed (and if so, what was the problem with it?)
> or is this an ubuntu specific problem?

This option has been removed with Enigmail 1.8 - generally, not only for
Linux or Ubuntu - as it made a lot of people complain that they couldn't
read their mails they sent any more.

It is now a hidden in the preferences:
extensions.enigmail.encryptToSelf, which defaults to true.

HTH

Ludwig









signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] [BUG] Character encoding mix-up when encrypting Inline.

[Ludwig Hügelschäfer]

Hi,

On 01.03.16 16:20, Lachezar Dobrev wrote:
>   When replying of forwarding a message that is in a Latin/ASCII
> compatible character set and typing text that is not Latin?ASCII sub-set
> the newly added text is lost.
> 
>   Example:
>   - Incoming mail in Windows-1252 encoding
>   - Reply/Forward to mail with Cyrillic content
>   - Send encrypted using Inline
>   
>   - The encrypted content is Latin (Base64), Thunderbird does not change
> or warn about the encoding failure.
>   - The mail is irreversibly broken, including the copy in Sent mail.
> 
>   This problem (seems to) does not occur with MIME multi-part messages.
> The encoded multi-part has UTF-8 encoding (and quoted-printable).

which Enigmail version do you have installed on which OS?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Enigmail not working anymore!!!

[Ludwig Hügelschäfer]

Hello Jan-Peter,

On 24.02.16 18:41, Jan-Peter Rühmann wrote:
> Hello
> Till today I could work with Enigmail by using GnuPG 1.4.16. Since today
> Enigmail says it won´t work anymore and changes to gpg2.
> By doing this Thunderbird now Chrashes or asks multiple times (17 times)
> for the Password everytime I try to open an signed, chrypted Mail or
> both Mail.
> I had mailed this a long time ago but nothings changed!
> I am using Kubuntu 14.04 LTE gpg 1.4.16 / gpg2 2.0.22 Thunderbird 38.6.0
> and Enigmail 1.9

Please checkout our troubleshooting guide:
https://www.enigmail.net/index.php/en/faq?view=category=11#faqLink_2

Hope this helps

Ludwig

BTW: Please trim your footer - 50kB for a mail with 5 lines is not
effective.




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Enigmail Greek Character Encoding

[Ludwig Hügelschäfer]

Hi,

On 15.02.16 17:47, Ntentos Stavros wrote:
> Hello to anyone out there!
> 
> I am a Greek user using Enigmail, and I watched the strangest thing.
> 
> If I failed (and canceled) the Pinentry (which is highly
> cancel-resistant) and then retried to open a draft message (with the
> correct password), the charset would be incorrect. I had to close the
> window (and retry my password) to get it right.
> 
> Thu 38.5.1 / Enig 1.8.2 / Win 8.1 x64 fully updated

This is most probably an issue of the Pinentry, supplied by gpg4win. Do
you have the newest version of gpg4win installed? I remember that
"cancel behaviour" got better with gpg4win 2.3.0.

You can also get support in one of their community forums/mailinglists:
https://www.gpg4win.org/community.html

HTH

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] can't import keys

[Ludwig Hügelschäfer]

On 03.01.16 03:53, Rob wrote:
> Hello again -- I'm afraid that even with  File > Import keys from File 
> in Enigmail, I get what must be errors as the window in Key Management
> remains empty.  I've tried three imports and get :

It seems, your keyring files are corrupt or not properly accessible by
gnupg.

Did you use some special folder for storing them? On a unixoid system,
they should be in a folder named .gnupg in your home directory. What is
the contents of this folder in your installation (file listing and
access rights are sufficient)?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] can't import keys

[Ludwig Hügelschäfer]

On 02.01.16 00:44, Rob wrote:
> Hi - I'm trying to import keys using the Enigmail Key Management menu
> item in Thunderbird from Ubuntu 14.04.  The picture of the start screen
> in the Ubuntu Software Center shows a title bar, a menu bar, and a
> search box, then an empty list of keys.  My window shows all that but no
> menu bar, so I can't get to the file menu and the import routines. 
> Right clicking the empty list gets a menu that allows me to export and
> delete keys, but import is not even an dimmed item in this menu.  I feel
> crippled.   Thanks for help.

I'm not familiar with Linux installations, but: Do you have any
Enigmail-related entries in the Thunderbird Error Console (Tools ->
Error Console)?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] deleting signed messages

[Ludwig Hügelschäfer]

Hi Walter,

please let's stick to replying at the bottom and trimming quotes when
posting to this list. This makes it easier for all to read.

On 01.01.16 11:45, Walter wrote:
> On 01/01/16 10:15, Ludwig Hügelschäfer wrote:
>>
>> Signed and/or encrypted messages can be deleted like every other
>> message. What happens, if you try to delete the message as usual?
>> Is this an IMAP or POP3 account?
>
> its imap
> 
> tried deleting it in every way i can think of: dragging to ubuntu
> rubbish bin etc

The "DEL" key should work on all platforms. If not, try to repair the
folder: Right click on the folder, select "properties", select "Gerneral
information" tab, click on "Repair Folder".

> also now stuck in A5 width by the look of it when i just usually just
> type right across the screen.
> (definitely enigmail formatting)

You can set the preference for selecting HTML mail versus plaintext
separately for each account: Tools -> Account Settings -> (Select your
account), then Composition & Addressing, check or uncheck "Compose
messages in HTML format".

However, be careful not to send signed only messages in inline PGP
format, as these tend to give "bad" signatures. Better uses PGP/MIME format.

> plus Ive lost my @ character(now pasting it) from the key board
> somehow, through messing around with this enigmail sw (maybe?/or my
> new laptop?)

Sorry, can't help you here - this is a general Ubuntu question. Anybody
else?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] About downloading GPG4win

[Ludwig Hügelschäfer]

On 23.12.15 15:59, Dan Datau wrote:
> Dear Enigmail Users,
> 
> This is probably a noob question, but how do I run the sha1sum command
> in Windows in order to check the integrity of the downloadfile from the
> gpg4win site https://www.gpg4win.org/download.html?
> 
> Do you need to install a .exe to do that and why can’t Windows run this
> command without installing such an .exe to compare checksums?

Well, this isn't a dumb question at all. This is the essential question
of implementing an initial trust relationship to the software you want
to use.

If you're installing GPG4WIN using the Enigmail Setup wizard then it
will do this for you, it will verify the checksum.

If you're doing download and installation manually, you need an
executable program to calculate the checksum, there is no preinstalled
one on windows.

If you're feeling this is too scary for you (use a downloaded program to
verify the integrity of a downloaded program), then you should ask a
friend who is well versed in doing such tasks.

HTH

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Own signature not valid?!?

[Ludwig Hügelschäfer]

On 31.10.15 18:19, Bernhard Kleine wrote:
> Hi Ludwig,
> 
> a line wrap issue may have happened: But I can not see in thunderbird
> how to avoid it.

This preference now seems to be hidden in Thunderbird, unfortunately.

Go to Preferences -> Advanced -> General, click on "Config Editor",
confirm the warning. A listing of all preferences appears. Type "wrap"
into the search field. The important setting is:

mailnews.wraplength  default  integer  72

Do you have the same value? If not, try to set it to 72 and repeat the
failed procedure (just forward the mail to yourself).

> Enigmail 1.8.2 thunderbird 38.3.0 gpg4win of yesterday

There is some logic in Enigmail to avoid signature verification errors
due to wrapping effects, but it relies on the Thunderbird setting.

HTH

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Own signature not valid?!?

[Ludwig Hügelschäfer]

On 31.10.15 20:28, Olav Seyfarth wrote:
> Hi Bernhard,
> 
> Am 31.10.2015 um 20:06 schrieb Bernhard Kleine:
> [...]
> 
> THIS message was NOT plaintext but HTML!

Ah, thanks for the hint! This was a combined HTML+Plaintext mail,

(Content-Type: multipart/alternative + Content-Type: text/plain; +
Content-Type: text/html;)

Didn't recognize this, as I'm always viewing the plaintext part, thanks
Olav!

> If you use HTML, you MUST use
> PGP/MIME. If you want to use INLINE PGP (which is preferrable with
> mailing lists) then you MUST NOT use HTML but plain text. To do so
> without changing your setup, use SHIFT+Compose or SHIFT+Reply to
> commpose a new message or reply to a message. That way, Thunderbird
> invokes the PLAINTEXT editor.

Yes. If you want HTML or combined HTML+plaintext mail, always stick to
PGP/MIME. There may be mail clients which cannot cope with this, but
they're on retreat ;-)

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Own signature not valid?!?

[Ludwig Hügelschäfer]

Hi Bernhard,

On 31.10.15 20:06, Bernhard Kleine wrote:
> 
> It becomes interesting: A testmail to Ludwig could be encrypted, that
> was correctly shown in the SENT folder, without the line break ´, which
> is BTW 72 as I have not changed it.

Encrypted or Signed+Encrypted are never a problem. Didn't receive a test
mail, though.

> However when signed there was the
> same error as before. I wonder whether Enigmail signs before Thunderbird
> has line-broken the message.

Are you perhaps composing in HTML format and the mail is converted to
plaintext upon sending?

The signature of this mail (20:06) to the list didn't verify, too.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Own signature not valid?!?

[Ludwig Hügelschäfer]

On 31.10.15 16:32, Bernhard Kleine wrote:
> 
> Hi,
> 
> this is my first mail to this list.
> 
> I send a mail to the gpg4win-user list and signed it with my key. When I
> read the mail in the SENT folder I see:
> Fehler- Uberprufung der Unterschrift fehlgeschlagen which translates to
> Error - Signature could not be verified.
> 
> How could that be possible? I have deposited my public key in the
> keyserver since long and for a long time the signature could well be
> verified. May I ask for help and explanation?

Which version of Enigmail are you using?

A "failed signature verification" means, that either mail text or
signature was changed after the signing process. As there's no
transmission process involved in your case, a line wrap issue may have
happened. Inline PGP format is susceptible for such failures. Please
either check your wrap settings or use PGP/MIME format.

HTH

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Display partly signed messages

[Ludwig Hügelschäfer]

On 24.09.15 11:25, Anne Wilson wrote:

>> Additional to that, you may have a per-recipient rule for this mailing
>> list. Enigmail -> Edit Per-Recipient Rules. Enter "enigmail" into the
>> search box to limit the displayed rules if necessary. Is there any rule?
>> If yes, is the PGP/MIME setting at "Never" or "Yes, if selected in
>> message composition"?
>>
> That was the culprit.  It was set to "if selected".  I've changed it
> now.  Not sure whether I will need to restart TBird to make it re-read,
> but if not, this should now be in pgp/mime format.

It is :-) A changed per-recipient rule does not need a restart to be
recognized. If Enigmail would have required a Thunderbird restart, it
would have told you. I think, the only restart in conjunction with
Enigmail is necessary after its installation itself - just like every
other add-on.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

[Enigmail] Display partly signed messages (was: No more "Untrusted Good Signature"s)

[Ludwig Hügelschäfer]

On 23.09.15 13:12, Anne Wilson wrote:
> On 23/09/2015 10:07, Ludwig Hügelschäfer wrote:
>>
>> Enigmail shows the following markers:
>>
>> | * *BEGIN ENCRYPTED or SIGNED PART* * | (...) |
>> ** *END ENCRYPTED or SIGNED PART* **
>>
> I've seen similar, though I can't recall exactly how/where :-)  Call it
> a senior moment.  Anyway, I read in Thunderbird, and what I see is the
> attached.

Well, actually, I must admit that I didn't look right: When viewing
Doug's message, these markers are _not_ displayed. However, they are
displayed when viewing _your_ message. Difference: Doug's is in PGP/MIME
format, and yours is inline. The signed content is reaching until the
horizontal line, but this is not indicated as it should be. I think we
discussed this earlier on this list, but I cannot find an open bug right
now.

[Footers]
>> This is not part of Dougs message when sent and therefore cannot be
>> part of his signature.
>>
> Makes sense.  In the older times I have seen some mailing list footers
> completely invalidate signatures.  On one mailing list I stopped signing
> because over and over people asked why they were seeing "bad signature".

This should get better when using PGP/MIME format, but this can lead to
very confusing results if there are readers on the list with no PGP/MIME
aware mail clients. On this list, however, PGP/MIME is welcome and
encouraged - we all should have the right software.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Display partly signed messages

[Ludwig Hügelschäfer]

On 23.09.15 15:40, Patrick Brunschwig wrote:

> We cannot display the borders of PGP/MIME messages. The current
> Thunderbird infrastructure simply does not foresee such a use-case.

Right, thanks for reminding me. This was the outcome of the discussion
starting at:

https://admin.hostpoint.ch/pipermail/enigmail-users_enigmail.net/2013-March/000721.html

for reference of the interested.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Display partly signed messages

[Ludwig Hügelschäfer]

On 23.09.15 18:46, Anne Wilson wrote:

> Going slightly OT, perhaps, but
> 
> Now I'm completely confused.  I'm certain I changed a setting
> somewhere to use pgp/mime, after reading a thread here, but off-hand I
> can't see where.  Not only that, but when I send a message with an
> image attached I get a popup asking if the whole message should be
> sent with pgp/mime - or is that only encrypted messages? Come to think
> of it there is an implication that the whole, text and image, is in
> some way "wrapped" before handling.

All your messages in this thread were in inline format except the
message with the picture (dated Wed, 23 Sep 2015 12:12:34 +0100), which
was in PGP/MIME format, maybe because Enigmail asked you when attaching
the picture.

You can change the default format in account settings, OpenPGP tab.
Check or uncheck "Use PGP/MIME by default".

Additional to that, you may have a per-recipient rule for this mailing
list. Enigmail -> Edit Per-Recipient Rules. Enter "enigmail" into the
search box to limit the displayed rules if necessary. Is there any rule?
If yes, is the PGP/MIME setting at "Never" or "Yes, if selected in
message composition"?

> Sorry for taking up your time, but I am seriously interested, and
> hopefully all this will be useful to someone else when searching archive
> s.

This is why we're answering here :-)

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] No more "Untrusted Good Signature"s

[Ludwig Hügelschäfer]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi Lyle,

On 21.09.15 21:11, Lyle wrote:
> How can I stop this email and many many others that I keep
> receiving. I get 5-10 a day to different peoples and I have tried
> to find a place to unsubscribed and have had no luck. I don't have
> a clue what this even about. Thanks in advance.

please go to
https://admin.hostpoint.ch/mailman/options/enigmail-users_enigmail.net,
enter
your mail address and click on "Unsubscibe".

HTH

Ludwig

-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQIcBAEBCgAGBQJWAFgRAAoJEDrb+m0Aoeb+jFgQANlM4a3oZ/YgUQ6xqbyvRNuW
rH2B/6eeGl7e3GBkvxKp8WKlFnZs16htii858Nf0RJt/E2v2ddiPlw48MnRCZDRw
gV1giWGiyL/KRIA5rTbkWnLQuUYufL8jdKxljKU2Oexv+vgC9xXaVDxsToQ3vDmj
QuOY7BccX3hS/jrhJ1eFJcKlsHTHeMfHRk4NPF8r39iRGIEzVI+OuTdRC5zkkJWj
HjQevZTO/F8BLMehhQseT5VEMw0uzn44L6qNC68cXCx0jg5tdqU4FzFc711N6xKl
fB5nDNcbC37K6yihG9H/IQQ/ovZAQlWEr/Qrglwa0Q5FLAsR6+VaEaRnizkUOJP/
ygCCP4IelkHc1DW9K2uojDSobe/SKOZ4P8xjHAybwY3GJUWXhi/v32SrAxpuTYkk
7VV+VOWkNW33n2zW1+JeMMCBO1lqKJ6pgpw9gx/Ner4ax5L0nEjEdkV3eVMtrdk1
w+oZZXtBn1eG35EhfCOchYGdlBcsWabVJ5SRG0GXYQsuw6UwomVojYNABim34it/
a2/4pHLARN6RJIRSXLiz60KZkof7Y53JtaLL9diwJincD3188F7ektiThn2wRyWS
UtsAML5GFaJuZr/R/UDjxt6p8dlQdZn2wxRr/chdUzCldfYatT+JWu2NFbDm5ful
aG+NamXgIVD4sss5188i
=1b8x
-END PGP SIGNATURE-

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] No more "Untrusted Good Signature"s

[Ludwig Hügelschäfer]

Hi,

On 20.09.15 05:06, Robert J. Hansen wrote:
> (Forgive the HTML: this is one of the few times where I think it’s
> worthwhile.  This email uses color to convey information.)
>
> (...)
>
> … Bam.  A simple UX that everyone sees, which conveys the most important
> information at-a-glance.  If more detailed information is needed, we
> present it in human-friendly language and embed within the language
> links to help people do common tasks related to keys.
> 
> Further, this UX is completely independent of the trust model used by
> GnuPG.  If you want to use the Web of Trust, no problem.  If you have
> --trust-model=always set, no problem.  If you’re using TOFU, no problem. 
> 
> What do y’all think?

Wow, I like that very much! This goes into the same direction of the two
buttons (sign/encrypt) in the compose window which got really good
feedback. It's logical, consequent and simple. You get an overview on
first glance.

Don't know yet how to display these three items withing the message
header, in a graphical sense. I'll make a suggestion.

This UI change covers about 90% of daily use and Enigmail can implement
it independently and instantly.

But I think, we've still got to look into the wording of key details.
One of the most misunderstood terms there is "ownertrust". Also - as
already pointed out - "validity" is not clear. And: We "sign" messages,
but until today we also "sign" a key/certificate, expressing that it
belongs to the promised person. The double use of the term "signature"
has led to quite frequent misunderstandings. We really should use
"certify" for the latter.

These new terms should also be used within GnuPG and other OpenPGP clients.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Key Management Owner Trust

[Ludwig Hügelschäfer]

On 16.09.15 22:27, Jacob L Anawalt wrote:

> Would you like a formal bug report?

After thinking about this for a time, I'd rather suggest to completely
remove the feature "Display untrusted keys".

It is misleading; it doesn't do what it promises: to show "trusted"
keys. Trusted keys are "valid" keys. Instead, the filter works on
"Ownertrust".

Varying ownertrust of a specific key doesn't make this key more or less
trustworthy. Instead, the ownertrust value of a specific key influences
the weight, by which certifications done by this key are regarded in
trust calculations for OTHER keys.

For me, suppressing the view of all keys I haven't assigned an
ownertrust value doesn't give any value.

I can't set an ownertrust on a key when I haven't met this person in
real life and judged how carefully his person does identity+key
fingerprint checks. This would ideally be done by judging how this
person did check MY identity and fingerprint. In this case, we would
have exchanged certifications on each others key.

What I'd regard as useful: A function which only displays keys I have
signed AND which have not set an ownertrust value. This would be a
reminder to do that.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Enigmail V1.9

[Ludwig Hügelschäfer]

On 17.09.15 17:51, Robert J. Hansen wrote:
>> encrypting the headers will not stop traffic analysis
> 
> This is technically true, but irrelevant.

Yes. Anonymous remailers exist.

Ludwig





signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Weird behaviour using "Import Key" button

[Ludwig Hügelschäfer]

On 16.09.15 19:56, Alexander Buchner wrote:

> Thanks for looking into this!
> I now updated to a nightly build and I can confirm that the bug is fixed
> there.

:-) Thanks for reporting!

> By the way: Is there already a planned release schedule for a next
> stable version?

https://sourceforge.net/p/enigmail/wiki/Planning%20for%20version%201.9/

Note the "tentative".

Ludwig





signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Key Management Owner Trust

[Ludwig Hügelschäfer]

On 17.09.15 05:30, Robert J. Hansen wrote:
>> Alternately, we *know* that the existing language confuses a lot of 
>> people, and enigmail has an opportunity to drive the language 
>> regularization process by using a reasonable, clean vocabulary
>> itself.
> 
> It sounds a lot like the "something must be done; this is something;
> ergo we must do it" fallacy.
> 
> Enigmail is used in a lot of places, and there's an entire community of
> trainers who teach it to others.  Changing the terminology on them once
> is understandable, especially if it fixes problems.  Changing it twice
> in quick succession seems rude to the trainers, who will have to adapt
> their teaching materials, FAQs, manuals, webpages, etc., twice.
> 
>> I don't think that any enigmail development should wait on results
>> -- enigmail should help make the results happen.
> 
> I emphatically disagree.

Could we please take this discussion to another, more appropriate place?

GnuPG-devel or GnuPG-users appear to be better suited to me.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Key Management Owner Trust

[Ludwig Hügelschäfer]

On 16.09.15 01:15, Jacob L Anawalt wrote:
(...)

> My observation with my keyring has been that "Display invalid keys"
> only hides revoked and expired keys from my list. It may do more than
> that for a keyring with keys in more states than mine. Like your
> experience, I still have a lot of keys with "-" or "unknown" in the
> Key Validity column with that filter turned off.

Keys with validity hidden when "Display invalid keys" unchecked:

  'i':invalid
  'e':expired
  'r':revoked
  'D':disabled

> (...)

> Viewing a sampling of the keys using gpg, the "stuck" ones that say
> "unknown" in the Owner Trust column of Enigmail say "trust: undefined"
> in the gpg output. The key I have set to trusted in Enigmail says
> "trust: full" in gpg. My default key that says ultimate in Enigmail
> says "trust: ultimate" in gpg. The rest of the keys that show "-" in
> Enigmail say "trust: unknown" in gpg:
> 
> Owner Trust mapping
> Enigmail  GnuPG  trust value
> ultimate  ultimate6
> trusted   full5
> marginal  marginal4
> untrusted never   3
> unknown   undefined   2
> - unknown 

Thanks for looking this up!

> I got the trust values from gpg --export-ownertrust. The entries that
> show up as "-" in Enigmail and "unknown" in GnuPG don't export. I
> expect this is because an ownertrust was never assigned to those keys.
> Keys in that state stay out of the trusted keys list, but once
> assigned via Enigmail or gpg to a trust value of 2, 4, 5, or 6 they
> show up in the list.
> 
> I think that a key with trust a value of 2 should not be in the list,
> just like ones without a trust value assignment and the ones with
> trust value of 3.

Enigmail does not use the --export-ownertrust, but instead it uses
--list-keys and --with-colons. The documentation of all output is in the
doc/Details of GnuPG source code, which for "Ownertrust" is quite fuzzy
compared with the rest.

Enigmail should hide the following codes if "Display untrusted keys" is
unchecked:

- / Unknown (i.e. no value assigned)
n / Untrusted

I think we should both hide the "unknown"/"undefined" and
"untrusted/never". I don't think, we should change the labelling before
the OpenPGP summit comes up with a new unified language.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Key Management Owner Trust

[Ludwig Hügelschäfer]

On 15.09.15 20:49, Jacob L Anawalt wrote:
> 
> OK, if "Display untrusted keys" should filter, or not, keys that I trust
> to sign other keys (ownertrust), then why are 0xBADFOOD and 0xDEADBEEF
> in the list with tat option unchecked?
> 
> I believed that was what the filter did as 0x8675309 did not appear in
> the list until I set ownertrust, but it does not leave the list even if
> I set it's ownertrust back to unknown.

After some tests I can observe similar behaviour if I uncheck "Display
invalid keys": There still are a lot of keys with "-" or "unkown" in the
key validity column. It is not clear where the limit for filtering the
display is defined. However, unchecking "display untrusted keys" seems
to work for me. All keys with "-" are hidden, but I don't have any keys
with "unknown" owner trust, which might conceal the bug for me.

I'll look into this.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Weird behaviour using "Import Key" button

[Ludwig Hügelschäfer]

On 11.09.15 16:35, Andreas Hirsch wrote:
> Alexander Buchner schrieb am 2015-09-11 um 16:25:
> 
>> Enigmail Security Info
>>
>> Part of the message signed
>> Unverified signature
>> Public key E6EDB692DE259A3F needed to verify signature
>>
>> UNTRUSTED Good signature from Stefan Huber 
> 
> everything ok

No, that's not ok. Enigmail claims it would need the key, but 1 line
later says "Untrusted good signature from " which it couldn't
without having the key. So, this is contradicting and weird indeed.

> in respect to the fact that you did'nt sign the key ;-)

Please do NOT give such advice. People really shouldn't sign other keys
without having verified their correctness.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] New enigmail archives/signs with outdated, disabled key

[Ludwig Hügelschäfer]

On 02.09.15 20:24, Lars Noodén wrote:

> The error message between the message body and the headers is :
> 
>   Enigmail Error - decryption failed; click on 'Details'
>   button for more information.

Is this a message sent from you or sent from another person? What
happens, if you re-enable your old key? Disabling of an old key is not a
good idea if you want to decrypt stuff which is encrypted using this key.

> When I click on Details and choose View Key Properties I get shown
> Primary User ID, Key ID, and Fingerprint which are for the wrong key.

Well, as said: You must use the key for which this message has once been
encrypted to. If it is disabled, it cannot be used and you get an error
message.

> If I try to sign an outgoing message, I get this:
> 
>   Key 0x not found or not valid.  The (sub-)key
>   might have expired.
> 
> If I go into Engimail -> Key Management -> Key properties for that key,
> it shows that the key is valid and expires next year.

Do you get prompted for the passphrase or does the error prompt happen
before?


[gpg.conf]

> gpg.conf is stock, I haven't changed it.  Here are the active lines:
> 
>  $ egrep -v "^#|^$" gpg.conf
>  keyserver hkp://subkeys.pgp.net
>  use-agent
> 
>  default-key  FE35B305

Is this the keyId of your old (disabled) or of your new key? Does the
undesired behaviour go away if you comment out this line (put a # at the
first column)?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] New enigmail archives/signs with outdated, disabled key

[Ludwig Hügelschäfer]

On 02.09.15 19:56, Lars Noodén wrote:
> 
> I can encrypt and send to another machine and decrypt there using the
> same ~/.gnupg contents.
> 
> I also went through the Enigmail setup wizard again to reset the key and
> it still shows the right key but when I try to decrypt, Enigmail still
> looks for the wrong key.

The key to decrypt is always selected automatically. The key-Id of the
receiver(s) is/are embedded in the message. You cannot decrypt a given
message with another (newer) key. What makes you think it Enigmail looks
for the wrong key? Please give us the exact error message.

Do you have any additional settings like "encrypt-to" in your gpg.conf file?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] pinentry crashes, only on Enigmail?

[Ludwig Hügelschäfer]

:

On 01.09.15 12:19, Mike Acker wrote:
> there is a discussion of pinentry problems here: Pinentry problems
> http://www.solvusoft.com (...) pinentry-exe/

Please do not post HTML here.

Please do not post links to sites with generalized - and probably
machine generated - advice for windows applications only. It is not
helpful at all, as the OP is obviously on a unixoid system.



Thanks

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net