Stories
Slash Boxes
Comments

SoylentNews is people

posted by martyb on Monday August 31 2020, @06:30PM   Printer-friendly

9to5Linux is reporting on the new version of Thunderbird which now supports OpenPGP by default:

Thunderbird 78.2.1 has been released today and it finally enables the OpenPGP feature by default. That's amazing news for privacy and security fans enthusiasts using the open-source email client as they won't have to go to all the trouble of enabling OpenPGP in the latest Thunderbird 78 series.

After you update to Thunderbird 78.2.1, you'll be able to access the OpenPGP Key Manager window from the Tools menu by clicking on the hamburger menu on the right side of the window (see the screenshot above for details).

So as of Thunderbird 78.2.1, it will no longer be necessary to use the Enigmail add-on and that add-on ends on an amicable note. Enigmail for Thunderbird will be supported for 6 months now but will continue for Postbox.

Previously:
(2018) Google Takes Further Steps to Eliminate Third-Party E-Mail


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by tizan on Monday August 31 2020, @08:43PM (4 children)

    by tizan (3245) on Monday August 31 2020, @08:43PM (#1044702)

    SSL, TLS, and STARTTLS basically encrypts at email servers level....of send/receive.

    So this is useful only if you donot trust your server managers right ?...so you encrypt at email reader and writer ?

    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2  
  • (Score: 2) by MostCynical on Monday August 31 2020, @09:25PM (1 child)

    by MostCynical (2589) on Monday August 31 2020, @09:25PM (#1044711) Journal

    do not trust your server managers

    no, the problem is not trusting any government or TLA with (legal or not) access to the servers, or the links between the servers.

     

    --
    "I guess once you start doubting, there's no end to it." -Batou, Ghost in the Shell: Stand Alone Complex
    • (Score: 0) by Anonymous Coward on Tuesday September 01 2020, @08:01PM

      by Anonymous Coward on Tuesday September 01 2020, @08:01PM (#1045065)

      right. remember when google engineers acted all surprised when all the emails between them and yahoo were being slurped up by the NSA. whoopsy!

  • (Score: 0) by Anonymous Coward on Tuesday September 01 2020, @02:11AM

    by Anonymous Coward on Tuesday September 01 2020, @02:11AM (#1044800)

    It can be used to encrypt emails, but it can also sign - authentication.

    Of course, that works if you know the party already and have his/her public key. If a stranger sends you a pgp-encrypted/signed email, authentication is meaningless.

  • (Score: 0) by Anonymous Coward on Tuesday September 01 2020, @03:11PM

    by Anonymous Coward on Tuesday September 01 2020, @03:11PM (#1044941)

    If your mailserver is hacked your emails would be stored unencrypted and easy to access. I have a simple script that encrypts all unencrypted incoming mail with the users key before they are saved to disk. That way at least mails received before the server is breached are secure. If end users encrypt before sending, there would be no way for a hacker to snoop on emails even with full control of the mail server. There would be no way to pose as the users mail server (DNS attack) and read mails.