Bug#898819: enigmail: Asks to trust my evil32 twin key

[Uwe Kleine-König]

On Wed, May 16, 2018 at 10:37:21AM +0200, Uwe Kleine-König wrote:
> Package: enigmail
> Version: 2:2.0.2-1
> Severity: normal
> 
> Hello,
> 
> from time to time I get an enigmail information dialog reading:
> 
>   Your secret key "Uwe Kleine-König " (key ID 307F
>   F63B BBD2 84AF BEE8 BCBF 13CC 4EB4 3266 9BD6) has missing trust.
> 
>   We recommend that you set "You rely on certifications" to
>   ultimate in key properties.
> 
>   [ ] Do not show me this dialog again
> 
>   { Open Key Properties } { Close }
> 
> This is irritating (and IMHO dangerous) because all configured accounts
> use explicitly my real key. (In the Account Settings for the
> u...@kleine-koenig.org address (and all others, too) I have selected "Use
> specific OpenPGP key ID: 0x0D2511F322BFAB1C1580266BE2DCDD9132669BD6".)
> So enigmail shouldn't even consider
> 307FF63BBBD284AFBEE8BCBF13CC4EB432669BD6.

Probably related to this, I just got a dialog:

Enigmail Alert

The key Uwe Kleine-König  (key ID 
0x13CC4EB432669BD6) is revoked.

  { Close }

when trying to send a mail which then resulted in a failure to send.

Best regards
Uwe


signature.asc
Description: PGP signature

Bug#898819: enigmail: Asks to trust my evil32 twin key

[Uwe Kleine-König]

Package: enigmail
Version: 2:2.0.2-1
Severity: normal

Hello,

from time to time I get an enigmail information dialog reading:

Your secret key "Uwe Kleine-König " (key ID 307F
F63B BBD2 84AF BEE8 BCBF 13CC 4EB4 3266 9BD6) has missing trust.

We recommend that you set "You rely on certifications" to
ultimate in key properties.

[ ] Do not show me this dialog again

{ Open Key Properties } { Close }

This is irritating (and IMHO dangerous) because all configured accounts
use explicitly my real key. (In the Account Settings for the
u...@kleine-koenig.org address (and all others, too) I have selected "Use
specific OpenPGP key ID: 0x0D2511F322BFAB1C1580266BE2DCDD9132669BD6".)
So enigmail shouldn't even consider
307FF63BBBD284AFBEE8BCBF13CC4EB432669BD6.

Best regards
Uwe

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (700, 'testing'), (600, 'unstable'), (500, 'unstable-debug'), 
(500, 'stable'), (499, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.16.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages enigmail depends on:
ii  gnupg2.2.5-1
ii  gnupg-agent  2.2.5-1
ii  gnupg2   2.2.5-1
ii  gpg-agent [gnupg-agent]  2.2.5-1
ii  thunderbird  1:52.7.0-1

Versions of packages enigmail recommends:
ii  pinentry-gnome3 [pinentry-x11]  1.1.0-1+b1

enigmail suggests no packages.

-- no debconf information