Re: [Enigmail] Differences between Enigmail and OpenPGP in Thunderbird 78

On 25.08.20 02:12, Mark wrote:
> Am I understanding this correctly, your PGP keys are no longer secured
> with their passphrase and instead relies on the global master password
> in Thunderbird?

Correct.


> Does that not weaken or at least somewhat minimize the
> validity of the signatures? There are numerous TB password recovery
> programs out there.

Things have improved. In older versions, the Master Password mechanism 
was weak. I had pushed for improvements last year, specifically to 
ensure the OpenPGP key protection would be sufficient.

https://bugzilla.mozilla.org/show_bug.cgi?id=1562671

The password recovery programs shouldn't succeed on Thunderbird 78 if 
you have set a decent passphrase.


> Another question I have is regarding keeping multiple keystores in sync,
> i.e., TB's internal one and the currently used gnupg one?

We don't support this currently, except what Eli said in the other reply.

Kai


_______________________________________________
enigmail-users mailing list
[email protected]
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net