Re: [Enigmail] Is it possible to avoid migration to Thunderbird's P/GP/G implementation?

2020-09-09 Thread Kai Engert
On 09.09.20 11:35, Lachezar Dobrev wrote: Hey all. After reading the messages on this mailing list, I'm contemplating whether I should completely separate the P/GP/G for day to day use (code signing, file crypto, etc.) with the one for email. That way whatever trust I bestow in

Re: [Enigmail] Enigmail, TB 78+ and security

2020-09-08 Thread Kai Engert
On 08.09.20 13:49, li...@datenritter.de wrote: Eventually you'll enter your master password anyway. After that there's no other layer of security. All your passwords, certificates and PGP-keys lie about in memory. So I'm concerned about memory leaks and code injections. If you're worried that

Re: [Enigmail] Enigmail, TB 78+ and security

2020-09-07 Thread Kai Engert
On 07.09.20 22:18, Mark wrote: Had those same concerns as there are a multitude of mozilla master password decrypters out there. Please see these recent messages from this list: https://admin.hostpoint.ch/pipermail/enigmail-users_enigmail.net/2020-August/005707.html

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-31 Thread Kai Engert
On 31.08.20 12:43, Werner Koch wrote: Andre will include a 64 bit version of gpgme.dll into the next gpg4win release. We hope to get a release out by next week. Hello Werner and Andre, great, thanks a lot for your help! IIUC you intend to continue to distribute a single gpg4win package,

Re: [Enigmail] OpenPGP & Thunderbird 78.2.0

2020-08-30 Thread Kai Engert
On 30.08.20 16:49, Kai Engert wrote: Thunderbird 78.2.1 contains a last minute change, which causes the migration from Enigmail to fail. We're currently discussing how to best fix this. If you are still using Thunderbird 68 and Enigmail, please continue to wait with updating. A fix has been

Re: [Enigmail] OpenPGP & Thunderbird 78.2.0

2020-08-30 Thread Kai Engert
On 30.08.20 09:33, Patrick Brunschwig wrote: Thunderbird 78.2.1 with OpenPGP enabled has been released now. According to the release notes: Thunderbird version 78.2.1 is only offered as direct download from https://thunderbird.net and *not* as an upgrade from Thunderbird version 68 or earlier.

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-28 Thread Kai Engert
On 28.08.20 19:09, Christian Riechers via enigmail-users wrote: Yet Thunderbird does not load the DLL with the pref mail.openpgp.allow_external_gnupg set to true. There is no occurrence of 'gpgme' in the error console. I've just installed 32bit Gpg4Win v 3.1.12 and a 32bit Thunderbird v

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-27 Thread Kai Engert
On 27.08.20 01:19, Andrew Gallagher wrote: On 26 Aug 2020, at 22:28, Kai Engert wrote: Unfortunately, old versions of NSS/Firefox/Thunderbird always used a iteration count of one (1) for the Master Password. Damn, that’s a horrendous flaw. How do I force the database to be re-encrypted

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-26 Thread Kai Engert
On 26.08.20 21:19, Mark wrote: Could you elaborate a bit more on the new and improved Master Password security It's a "password based encryption" (PBE) mechanism. The password chosen by the user is used with a PBE algorithm to encrypt information (such as keys and individual passwords, and

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-26 Thread Kai Engert
On 26.08.20 20:10, Christian Riechers via enigmail-users wrote: The bad news is, on Windows 10 it does not work at all. With TB78.2.0 all I get is the error 'The secret key that is required to decrypt this message is not available' when attempting to open an encrypted message. Gpg4Win 3.1.12

Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-25 Thread Kai Engert
On 25.08.20 02:12, Mark wrote: Am I understanding this correctly, your PGP keys are no longer secured with their passphrase and instead relies on the global master password in Thunderbird? Correct. Does that not weaken or at least somewhat minimize the validity of the signatures? There are

Re: [Enigmail] OpenPGP & Thunderbird 78.2.0

2020-08-24 Thread Kai Engert
On 24.08.20 22:42, Phil Kane wrote: On 8/24/2020 12:39 PM, Kai Engert wrote: The Thunderbird team had originally announced to enable OpenPGP by default in version 78.2.0 It has been decided to slightly postpone this for final changes and testing by volunteers.  It's expected to be enabled

[Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

2020-08-24 Thread Kai Engert
Hello, here is an article that explains the differences between Enigmail and the new integrated OpenPGP feature in Thunderbird 78: https://wiki.mozilla.org/Thunderbird:OpenPGP:Migration-From-Enigmail Regards Kai ___ enigmail-users mailing list

[Enigmail] OpenPGP & Thunderbird 78.2.0

2020-08-24 Thread Kai Engert
FYI: The Thunderbird team had originally announced to enable OpenPGP by default in version 78.2.0 It has been decided to slightly postpone this for final changes and testing by volunteers. It's expected to be enabled in 78.2.1 Kai ___