Re: [Enigmail] Enigmail 2.0.12 available

Dmitry Alexandrov <[email protected]> Wed, 10 Jul 2019 11:43:49 +0300
Newsgroups	gmane.comp.mozilla.enigmail.general
Message-ID	<[email protected]>
Patrick Brunschwig <[email protected]> wrote:
> On 10.07.2019 05:55, Dmitry Alexandrov wrote:
>> Patrick Brunschwig <[email protected]> wrote:
>>> I am happy to announce Enigmail v2.0.12 for Thunderbird 60.*
>> 
>>> This release sets the default keyserver to keys.openpgp.org in order to mitigate the SKS Keyserver Network Attack [1]. This change is applied unconditionally for all installations, except if the default keyserver is set to an ldap server.
>> 
>> Given that the issue is now mitigated in GPG, when will reverting this back be scheduled?
>
> I won't revert this change for two reasons:
>
> 1. It will take weeks to months until the majority of the Windows and macOS systems will have updated (which first requires the availability of new versions of gpg4win, GPGTools, GpgOSX etc).

Well, that’s exactly the kind of answer I hoped to get: a stub will be reverted when such and such updates are published.  But I see now, I was too optimistic.  :-\

> 2. As I already said publicly, the default in Enigmail 2.1 will be keys.openpgp.org. The change is now just a little earlier than anticipated.

So, just to clarify, you intentionally replaced the standard distributed network with some freshly established private service, where centralized control is _not_ a child illness, but a design:

| Several folks offered to help out by "running a Hagrid server instance". We very much appreciate the offer, but we will probably never have an "open" federation model like SKS, where everyone can run an instance and become part of a "pool".
— https://keys.openpgp.org/about/faq

moreover, pushed that change to setups of the most old users, — and found all of that absolutely okay?

> If you want a different default keyserver, you can change that manually in the Enigmail preferences.

Please, do not say it like the question is about choosing a default colour-scheme or some other trifle!  It’s not a ‘different keyserver’ in a sense, that became usual for all those years of SKS (that is, whether it pgp.mit.edu, keys.ubuntu.com or even keybase.io).  You have driven the whole userbase to a *different network* — a network consisting of a single server.

_______________________________________________
enigmail-users mailing list
[email protected]
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
signature.asc (application/pgp-signature, 487 B)