kaiengert

kaiengert, 14 days ago to random

Just some OpenPGP key hygiene:

I've updated my key with key ID 0x1C27423725007724 fingerprint 0x21D16E67E18398C8DA9DDF2E1C27423725007724.

Changes:
Replaced old SHA1 self-signatures where possible.
Revoked old RSA encryption subkey (no compromise, just superseding it).
Generated new subkeys for RSA encryption, ECC encryption and ECC signing.

The updated key has been uploaded to WKD, keyservers and is also available for manual download from my home page.

kaiengert, 2 months ago to random

Has anyone enabled mail.openpgp.passphrases.enabled in #Thunderbrd yet?

https://thunderbird.topicbox.com/groups/e2ee/Tdc427a8b0255b85a

kaiengert, 3 months ago to security

I gave a talk at #fosdem #fosdem2024.

Video and slides are now available:
https://fosdem.org/2024/schedule/event/fosdem-2024-2849--security-thunderbird-email-security-plans-and-challenges-/

#thunderbird #security #openpgp #librepgp #smime

I'm interested in your feedback on these thoughts. Either here, or, if your feedback is longer, for a discussion it might be best to post to
https://thunderbird.topicbox.com/groups/e2ee

Thanks a lot to the organizers of @fosdem and the modern email developer room.
https://github.com/modern-email/FOSDEM-24?tab=readme-ov-file#contact

hko, 3 months ago to random

Having decidedly too much fun playing with ancient #PGP artifacts.

Note the two version 2 public keys from 1992. They were created just over a year after Phil Zimmermann first released PGP (on 6 June 1991), deep in the crypto war era.

These keys predate the #OpenPGP name by around half a decade.

At over 31 years old, nation-state actors can definitely factor John Gilmore's RSA 1024 key today.
However, I believe the cost still exceeds a hobbyist budget even now.

kaiengert, 3 months ago to random

This image was the result of an experiment playing with an AI image generator. I had asked for a blue bird in the shape of a padlock, as a potential way to symbolize email encryption in our software. I brought some stickers with it to #Fosdem and many visitors of our #Thunderbird booth took one, because we were already out of other stickers. I'd like to clarify, it is NOT an official image of our project, it was created just for fun.

chillicampari, 3 months ago (edited 3 months ago) to random

The #ICE10 to Brussels is stuck in Aachen (we may have to switch to a bus). We have already met someone going to #FOSDEM so that part is really neat!

usul, 4 months ago to random French

If I were to vote for the #Thunderbird council I would vote for :

• @Standard8
• @kaiengert
• @bogo

kaiengert, 4 months ago to random

If you use #GnuPG #GPG, and you would like to ensure interoperability with Thunderbird, you might consider to disable the use of #LibrePGP features, by using option --rfc4880 in your configuration (e.g. by adding a line with the word "rfc4880" to your gpg.conf file.)
At this time it is undecided whether future Thunderbird versions will support LibrePGP or the upcoming refresh of the #IETF #OpenPGP specification, or both, or none of them. Hopefully we'll eventually see a new universal standard.

kaiengert, 4 months ago to random

What's the most important feature of #thunderbird ?

@thunderbird

kaiengert, 4 months ago to random

I posted thoughts on
"Privacy when refreshing or looking up #OpenPGP keys" here:
https://lists.hostpoint.ch/hyperkitty/list/openpgp-email@enigmail.net/thread/3H3FZYYWUAARTDVORFUTJ2TFKKNWMK4G/

The very long post points to an experimental onion service.

Feedback welcome.

Motivation: We need to implement this ability in #Thunderbird, and I'm trying to find an appropriate approach.

kaiengert, 5 months ago to random

Just some random AI created image visualizing #Thunderbird email encryption. #openpgp needs some positive vibes these days...

kaiengert, 6 months ago to random

I would like to better understand how many users of #Thunderbird use encrypted or signed email. I understand not everyone may be comfortable disclosing it, so even vague statements are interesting. Maybe use an anonymous Mastodon account and say "I know a group of (n) people in an NGO who uses OpenPGP encryption." or "We have (m) users in our business who use S/MIME signatures." or similar? Can you think of other ways I could learn more?

tek_dmn, 7 months ago to random

People, this is why we need to stop writing everything in JS,

briankrebs, 8 months ago to random

The victim shaming site operated by the Snatch ransomware group is leaking data about its true online location and internal operations, as well as the Internet addresses of its visitors, KrebsOnSecurity has found. The leaked data suggest that Snatch is one of several ransomware groups using paid ads on Google.com to trick people into installing malware disguised as popular free software, such as Microsoft Teams, Adobe Reader, Mozilla Thunderbird, and Discord.

https://krebsonsecurity.com/2023/09/snatch-ransom-group-exposes-visitor-ip-addresses/

image/png

kaiengert, 8 months ago to random

For #Thunderbird: Who's interested in convenient generation of Certificate Signing Requests (CSR), including key pair generation, for requesting an S/MIME email certificate? I have an experimental patch, and could provide an experimental test build. I didn't submit the resulting CSR to a real CA yet, I don't want to spend money for these tests. Does someone of you maybe have a subscription with a CA and is interested to test the CSR that are generated by the experimental patch?

kaiengert, 8 months ago to firefox

Use #Mozilla #Firefox for maximum happiness when surfing the World Wide Web.

kaiengert, 8 months ago to random

Hello community of #Thunderbird #OpenPGP users. I'd like to know if some of you are still stuck at Thunderbird version 68 and the old #Enigmail Add-on. Is there any missing functionality in Thunderbird 115 that is still preventing you from migrating? #PGP #GPG #GnuPG @thunderbird

evacide, 10 months ago to random

If you don't have anything nice to say, take a walk around the block, eat a nice lunch, and run your reply email past several co-workers before you send it.

And by you, I mean me.

thunderbird, 11 months ago to android

Thunderbird for Android gets one step closer, as K-9 Mail integrates Thunderbird's Autoconfiguration feature for new accounts.

Read info on that, all the other important developments, and some awesome community contributions in the new progress report:
https://blog.thunderbird.net/2023/06/thunderbird-for-android-k-9-mail-may-2023-progress-report/

#Android #Email #OpenSource #Thunderbird