Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

Eli Schwartz <[email protected]> Mon, 24 Aug 2020 20:29:23 -0400

Newsgroups	gmane.comp.mozilla.enigmail.general
Message-ID	<[email protected]>

On 8/24/20 8:12 PM, Mark wrote:
> Am I understanding this correctly, your PGP keys are no longer secured
> with their passphrase and instead relies on the global master password
> in Thunderbird? Does that not weaken or at least somewhat minimize the
> validity of the signatures? There are numerous TB password recovery
> programs out there.

Fortunately, Thunderbird will have optional support for delegating
private key actions (decrypt, sign) to an external GnuPG keyring. This
is primarily being advertised in order to support smartcards. However,
GnuPG won't care whether the private key is in the keyring directly or
used via a smartcard. ;)

See https://wiki.mozilla.org/Thunderbird:OpenPGP:Smartcards

> Another question I have is regarding keeping multiple keystores in sync,
> i.e., TB's internal one and the currently used gnupg one?
My understanding is that they won't be kept in sync at all, period --
though Enigmail's migration tool will do a one-time import from GnuPG
into TB's internal store.

This is not my ideal use case, but since I will only be using it for
public keys, not private keys, it's not a dealbreaker for me. :)

-- 
Eli Schwartz
Arch Linux Bug Wrangler and Trusted User

_______________________________________________
enigmail-users mailing list
[email protected]
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

signature.asc (application/pgp-signature, 1.6 KB)