Re: [Enigmail] test implementation for auto encryption available in test-branch

2014-04-21 Thread Daniel Kahn Gillmor
Hi Nico-- thanks for your work on this; i'm really glad to see people thinking it through in detail. Responses in more detail below, along with a more radical proposal that hopefully we can use to think through the desired behavior. On 04/21/2014 04:11 PM, Nicolai Josuttis wrote: Let me try

Re: [Enigmail] test implementation for auto encryption available in test-branch

2014-04-20 Thread Daniel Kahn Gillmor
On 04/20/2014 07:12 PM, Daniel Kahn Gillmor wrote: I think it's a really bad idea to make encryption contingent on trust settings; it should only be contingent on validity. let me explain this a bit further: * setting non-zero ownertrust on someone's keys puts you at risk of being willing

Re: [Enigmail] trust the keys of all recipients is problematic text

2014-03-26 Thread Daniel Kahn Gillmor
On 03/26/2014 09:57 AM, Mike Acker wrote: On 03/25/2014 06:21 PM, Daniel Kahn Gillmor wrote: hi enigmail folks-- 1ee310b5bcdb86f225cc11ca0ae2138a7aaba992 addresses bugs 212 and 179 with a menu option called trust the keys of all recipients. I think what this implies is that when sending

Re: [Enigmail] Using Enigmail for mailing lists

2014-03-17 Thread Daniel Kahn Gillmor
On 03/16/2014 11:46 AM, Boris Month wrote: me and some friends of mine want to exchange encrypted emails on our mailing list. Does enigmail support encryption for multiple recepients? How would you encrypt information on a mailing list? You might be interested in schleuder, which is an

Re: [Enigmail] How do I choose amongst multiple keys for a recipient?

2014-02-05 Thread Daniel Kahn Gillmor
On 02/05/2014 10:06 AM, Onno Ekker wrote: Well, to me it would also make sense to encrypt to the newest key by default (by creation date), which would eliminate the need to create a per recipient rule in most cases... Having per recipient rules also brings the necessity to manage and maintain

Re: [Enigmail] signing broken, sometimes

2014-01-30 Thread Daniel Kahn Gillmor
On 01/30/2014 09:08 AM, Nathan Andrew Fain wrote: it appears the enigmail has issues when the text of lines will get wrapped. What I believe is happening is that the signature is made before the text is converted to its unformatted version and line-wrapped. So, the signature is created on this

[Enigmail] [PATCH] select only the first fingerprint for any key, instead of the last

2014-01-09 Thread Daniel Kahn Gillmor
This addresses http://sourceforge.net/p/enigmail/bugs/239/ --- ui/content/enigmailCommon.js | 5 - 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/ui/content/enigmailCommon.js b/ui/content/enigmailCommon.js index b10375c..e19d9b0 100644 --- a/ui/content/enigmailCommon.js +++

Re: [Enigmail] Automatically decrypt/verify messages not working in 1.6 or 1.5?

2013-12-14 Thread Daniel Kahn Gillmor
On 12/14/2013 09:23 AM, Patrick Brunschwig wrote: On 13.12.13 22:29, Daniel Kahn Gillmor wrote: in http://bugs.debian.org/732067, a user reports that the checkbox Automatically decrypt/verfiy messages in the OpenPGP menu isn't working any more. Apparently, the menu option is only

Re: [Enigmail] Key not found or not valid

2013-12-14 Thread Daniel Kahn Gillmor
On Wed 2013-01-16 09:12:09 -0500, Patrick Brunschwig wrote: On 15.01.13 21:10, Daniel Kahn Gillmor wrote: Question B -- Would patches be welcome to improve the terminology around validity and trust? Sure, yes :-) It's been a while, but I've finally sent a patch to the list

[Enigmail] Automatically decrypt/verify messages not working in 1.6 or 1.5?

2013-12-13 Thread Daniel Kahn Gillmor
in http://bugs.debian.org/732067, a user reports that the checkbox Automatically decrypt/verfiy messages in the OpenPGP menu isn't working any more. Apparently, the menu option is only available when show expert preferences is chosen in the OpenPGP preferences dialog. The inital report came in

[Enigmail] [PATCH 3/4] Fix english grammar

2013-12-10 Thread Daniel Kahn Gillmor
--- ui/locale/en-US/enigmail.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ui/locale/en-US/enigmail.properties b/ui/locale/en-US/enigmail.properties index 74021fa..ea5141a 100644 --- a/ui/locale/en-US/enigmail.properties +++ b/ui/locale/en-US/enigmail.properties

[Enigmail] [PATCH 2/2] add subprocess support for GNU/kFreeBSD (debian)

2013-11-14 Thread Daniel Kahn Gillmor
This patch records the library name and constants expected for debian GNU/kFreeBSD. Without this line, enigmail 1.6 on that platform fails with: [ERROR] enigmail.js: Enigmail.setAgentPath: subprocess.call failed with 'TypeError: platformDefaults[gXulRuntime.OS.toLowerCase(...)] is undefined'

Re: [Enigmail] [PATCH 2/2] .xpi generation should fail if components are missing

2013-11-12 Thread Daniel Kahn Gillmor
On 11/12/2013 12:27 PM, Patrick Brunschwig wrote: This patch won't work for Thunderbird 19 and newer, as the referenced ${enigDllFile} (line 153) is only generated on Gecko version = 18. Thus the files would not match. this seems like something that genxpi should know about, no? If it knows

[Enigmail] debugging failed verification

2013-11-12 Thread Daniel Kahn Gillmor
i'm trying to use the standard enigmail debugging capability to figure out why a message is failing verification in enigmail. The message is clearsigned PGP/MIME, and it verifes correctly in another MUA (notmuch, using libgmime). Other clearsigned PGP/MIME messages verify correctly. When i

Re: [Enigmail] debugging failed verification

2013-11-12 Thread Daniel Kahn Gillmor
On 11/12/2013 02:19 PM, ernie wrote: I have been following this thread for some time. That's interesting, because i just started this thread a few hours ago! Out of curiosity, are these problems win a flavor of Widows or Linux? I don't use Windows, so i don't know if these are problems on

[Enigmail] [PATCH 2/2] .xpi generation should fail if components are missing

2013-11-11 Thread Daniel Kahn Gillmor
Without this change, zip would happily carry on even if some elements are missing due to other undetected failures in the build process. It's better to catch errors in the .xpi generation at build time, rather than at install or runtime. --- genxpi | 2 +- 1 file changed, 1 insertion(+), 1

[Enigmail] [PATCH] avoid warning: variable 'rv' set but not used [-Wunused-but-set-variable]

2013-11-11 Thread Daniel Kahn Gillmor
This patch allows the build to proceed cleanly when using -Wunused-but-set-variable and without FORCE_PR_LOG --- src/nsEnigMsgCompose.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/nsEnigMsgCompose.cpp b/src/nsEnigMsgCompose.cpp index 2bc3f7a..91ca07e 100644 ---

Re: [Enigmail] C99 adoption

2013-11-11 Thread Daniel Kahn Gillmor
On 11/11/2013 05:43 PM, Michael Norrish wrote: As for //, compilers have had this forever given that it's been in C++ forever. yes, of course all modern compilers have this option. however, there's no reason for gratuitous incompatibility against older compilers or for people who for whatever

Re: [Enigmail] Enigmail refuses to use unsigned key for encryption

2013-10-15 Thread Daniel Kahn Gillmor
Hi Ralf-- On 10/15/2013 05:14 PM, Ralf Jung wrote: why does Enigmail refuse to use an unsigned key for encryption? A friend of mine recently contacted me via encrypted mail, and while I was able to get her key from a keyserver, I couldn't get a signature for it, so I decided to do that later

Re: [Enigmail] Bad signature

2013-10-09 Thread Daniel Kahn Gillmor
On 10/09/2013 05:47 PM, Bryant Evans wrote: Not sure my message earlier went through. Trying again. I am using PGP/MIME as suggested. both of these PGP/MIME messages appear to have a valid signature from Key fingerprint: 3FDD CDC3 F146 3309 7FEE F699 19C1 9D85 1C0B 95E5 So whatever problem

Re: [Enigmail] Do I have to create a new revocation certificate if I change my passphrase?

2013-09-13 Thread Daniel Kahn Gillmor
On 09/13/2013 08:10 AM, Bob Williams wrote: Should I create a new revocation certificate if I change my passphrase? Or is the passphrase only 'local' to my secring.gpg? Your old revocation certificate will still work. Both the revocation certificate and the public part of your key can be

Re: [Enigmail] Enigmail in Debian

2013-07-15 Thread Daniel Kahn Gillmor
On 07/15/2013 02:37 PM, Klearchos-Angelos Gkountras wrote: I am using Debian Sid and icedove as my personal email programm and I didn't install enigmail via repos but with icedove's add-ons manager . Please describe in which branch of debian is the problem ;) This goes against the general

Re: [Enigmail] [Pkg-mozext-maintainers] Enigmail in Debian

2013-07-15 Thread Daniel Kahn Gillmor
On 07/15/2013 04:34 PM, Ximin Luo wrote: For xul-ext-gnome-keyring, I am building the extension twice, against both xulrunner-dev *and* icedove-dev, then packaging both binaries into the same XUL extension and using the appId to tell XPCOM to conditionally load the correct one. Have a look

Re: [Enigmail] enigmail verification problem with signed message/rfc822 subparts

2013-05-29 Thread Daniel Kahn Gillmor
On 05/29/2013 04:54 PM, Eduard Christian Dumitrescu wrote: One way (as discussed in a private exchange with dkg and others) would be to only show the signed parts of signed messages and ignore whatever isn't signed. If a particular message doesn't display properly, one only has to temporarily

Re: [Enigmail] Bug#679640: Fwd: Re: Can somone confirm or deny if PGP/Mime messages verify in Debian Wheezy/IceDove?

2013-05-23 Thread Daniel Kahn Gillmor
On 05/23/2013 12:56 PM, Andy Ruddock wrote: The message just sent to enigmail-users@enigmail.net didn't verify on my SeaMonkey/Enigmail Wheezy install. I see a mail with three attachments, one of which is signature.asc yes, exactly. this is http://bugs.debian.org/679640 , which i am not sure

[Enigmail] Fwd: Re: Can somone confirm or deny if PGP/Mime messages verify in Debian Wheezy/IceDove?

2013-05-22 Thread Daniel Kahn Gillmor
); ipcBuffer.open(-1, false); ---BeginMessage--- -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 21.05.13 23:28, Daniel Kahn Gillmor wrote: On 05/05/2013 11:55 AM, Patrick Brunschwig wrote: I looked again into this. The Enigmail code has changed quite a lot since v1.4 and there is no patch

Re: [Enigmail] Can somone confirm or deny if PGP/Mime messages verify in Debian Wheezy/IceDove?

2013-05-04 Thread Daniel Kahn Gillmor
On 05/04/2013 11:01 AM, Patrick Brunschwig wrote: Grant, do you read this mailing list via Gmane (i.e. via a NNTP newsgroups server)? If yes, then it's no surprise that Enigmail won't detect Daniel's signature: some of the required functionality to detect PGP/MIME messages are not available in

Re: [Enigmail] Can somone confirm or deny if PGP/Mime messages verify in Debian Wheezy/IceDove?

2013-05-04 Thread Daniel Kahn Gillmor
On 05/04/2013 12:13 PM, David wrote: If I may ask why does Debian offer such an old version of Icedove (same as TBird 10 when the current release is 17.0.5) and such an old version of Enigmail (1.4.1) when the current release is 1.5.1? For the stable version of debian, we offer long-term

Re: [Enigmail] Can somone confirm or deny if PGP/Mime messages verify in Debian Wheezy/IceDove?

2013-05-04 Thread Daniel Kahn Gillmor
On 05/04/2013 01:25 PM, David wrote: I see. So does that mean that any security 'fixes' have been backported? Or just are they just ignored? Security concerns are not ignored; the goal of any stable release is to maintain a stable set of features and functionality (and APIs and ABIs) while

Re: [Enigmail] Can somone confirm or deny if PGP/Mime messages verify in Debian Wheezy/IceDove?

2013-05-01 Thread Daniel Kahn Gillmor
On 05/01/2013 08:40 PM, Grant wrote: On 05/01/2013 01:27 PM, Daniel Kahn Gillmor wrote: Grant, if you can give us any hints about what the problem was (or even better, what specific resolution you needed), that would be a great help to anyone else who might run into the same thing

Re: [Enigmail] identifiable MIME boundaries

2013-04-19 Thread Daniel Kahn Gillmor
On 04/19/2013 02:33 AM, Patrick Brunschwig wrote: I can certainly do that. However, what would it change? I could still identify a message created by Enigmail, and I could still tell you if some other product would have faked a message to look like Enigmail. Things like line wrapping of the

[Enigmail] identifiable MIME boundaries

2013-04-18 Thread Daniel Kahn Gillmor
hi enigmail folks-- package/mimeEncrypt.js contains two hardcoded references to enig2 that are used to create the MIME boundaries when using PGP/MIME. In many circumstances it is not a problem to leak the information that the mail sender is using enigmail specifically, but there are some users

Re: [Enigmail] Enigmail problem gpg lost

2013-03-14 Thread Daniel Kahn Gillmor
On 03/15/2013 12:23 AM, Patrick Fleming wrote: I have Mozilla provided Thunderbird and Enigmail as a plugin on Debian - could not get Debian's Iceweasel to work properly. I think you mean icedove, not iceweasel, right? iceweasel is a web browser, not a mail user agent. enigmail only works

Re: [Enigmail] Enigmail destroyed HTML formatting on Thunderbird, how to get it back?

2013-01-31 Thread Daniel Kahn Gillmor
On Thu 2013-01-31 15:46:32 -0500, Ludwig Hügelschäfer wrote: Some prominent MUAs are known to not be able to cope with PGP/MIME. If a prominent MUA cannot deal with PGP/MIME, please name it explicitly, so we can pressure its vendor or authors to fix it (or, in the case of free software, so we

Re: [Enigmail] [PATCH] javascript cleanup

2013-01-20 Thread Daniel Kahn Gillmor
On 01/20/2013 11:21 AM, Patrick Brunschwig wrote: On 20.01.13 16:58, Daniel Kahn Gillmor wrote: fwiw, 'use strict'; appears 6 times in enigmail, while 'use strict;' appears twice: Ah, sorry. You're right - my memory played tricks with me ;-) I guess i had the advantage of complete

Re: [Enigmail] [PATCH] javascript cleanup

2013-01-19 Thread Daniel Kahn Gillmor
On 01/17/2013 04:42 PM, Daniel Kahn Gillmor wrote: this patch should offer no significant surprises, as it just cleans up some cruft that has drifted into the javascript over the years i didn't see any followup on this patch -- is there a problem with it? I think doing this sort of lint-y

Re: [Enigmail] Key not found or not valid

2013-01-14 Thread Daniel Kahn Gillmor
On 01/14/2013 02:43 PM, soportek wrote: When I attempt to send a signed or signed and encypted e-mail from my account I receive the following error. Send operation aborted. Key 0xABCDEF01 not found or not valid. The (sub-)key might have expired. i don't think this is your actual keyid.

Re: [Enigmail] Enigmail and Java

2013-01-14 Thread Daniel Kahn Gillmor
On 01/14/2013 07:07 PM, David wrote: Do I understand correctly that Enigmail is now written in Java code? Does Enigmail require Java to 'run'? I ask because Oracle is not doing so well with Java lately. no, Enigmail does not use Java. All versions of Enigmail use Javascript (which is an

<    1   2   3