On 11/04/2021 13.42, Wolfgang Rosenauer wrote:

Am 08.04.21 um 23:45 schrieb Matěj Cepl:

...

Dne 08. 04. 21 v 19:56 Adam Mizerski napsal(a):

...

Hi everyone! Remember when Thunderbird broke compatibility with Enigmail?

Here's a new drop-in replacement for librnp that integrates with your keyring:

https://sequoia-pgp.org/blog/2021/04/08/202103-a-new-backend-for-thunderbird...

It is sad that we have to wait on Red Hat to do The Right Thing™ (not using bundled unsupported cryptographical library and breaking users gpg configuration), but shouldn't we at least now package this into our Thunderbird?

started to work on it in mozilla:experimental.

Not working yet, though.

Thanks :-) If somebody knows more about it, please talk ;-) -- Cheers / Saludos, Carlos E. R. (from 15.2 x86_64 at Telcontar)

On 11/04/2021 17.31, Wolfgang Rosenauer wrote:

Am 11.04.21 um 14:02 schrieb Carlos E. R.:

...

On 11/04/2021 13.42, Wolfgang Rosenauer wrote:

...

Am 08.04.21 um 23:45 schrieb Matěj Cepl:

...

It is sad that we have to wait on Red Hat to do The Right Thing™ (not using bundled unsupported cryptographical library and breaking users gpg configuration), but shouldn't we at least now package this into our Thunderbird?

started to work on it in mozilla:experimental.

Not working yet, though.

Thanks :-)

If somebody knows more about it, please talk ;-)

So, the issue is that Thunderbird 78.9.1 introduced new APIs between TB and librnp so that Octopus is incomplete at this very moment. Devs are informed and now aware to update octopus.

Thanks for reporting :-)

For people still curious and want to see updates:

The repo mozilla:experimental now contains a TB 78.9.1 which installs an additional subpackage called   MozillaThunderbird-openpgp

That package can be replaced with   sequoia-octopus-librnp containing the Octopus drop-in replacement.

As said: at this moment some things don't work. Actually I don't know if there are even some things which work at the moment. The library can be loaded but already listing of keys is broken.

And the usual disclaimer: Using mozilla-experimental may eat your data. Specifically your PGP data so make sure you have backups and use it on your own risk.

I think I will stay this way of the fence for the time ;-) It is very interesting to see advancement and light, even if far. -- Cheers / Saludos, Carlos E. R. (from 15.2 x86_64 at Telcontar)

Am 11.04.21 um 20:17 schrieb Wolfgang Rosenauer:

Hi, another update. Upstream was quite swift in implementing most of the important things. The repo now contains a new build which I'm just using to write this mail. I personally still have some difficulties to see all of my keys. Specifically the one for this address so I cannot sign this mail.

So I hope that others will give it some testing as well as I'm not using PGP that much.

Now also confirmed with my yubikey based keypair and works like a charm. For others interested because I ran into this with one of my very old keys: - ElGamal is not supported at all - my legacy DSA1024/ElGamal key is not even recognized/shown (despite it's in my gpg keyring) Wolfgang

On Sun, Apr 11, 2021 at 8:33 AM Mathias Homann wrote:

Am Donnerstag, 8. April 2021, 19:56:51 CEST schrieb Adam Mizerski:

...

Hi everyone! Remember when Thunderbird broke compatibility with Enigmail?

Here's a new drop-in replacement for librnp that integrates with your keyring:

https://sequoia-pgp.org/blog/2021/04/08/202103-a-new-backend-for-thunderbird /

Just out of curiosity, what's wrong with the openpgp integration that is part of thunderbird?

Two major things: * No integration with system keyring, making it a pain to use the GPG keys you have now * Usage of Botan means that system wide crypto policies don't control algorithms used in Thunderbird The first is a problem for everyone, the second is a problem for Enterprise Linux distributions trying to maintain certifications. -- 真実はいつも一つ！/ Always, there's only one truth!

On 11/04/2021 15.28, Ben Greiner wrote:

Am 11.04.21 um 15:06 schrieb Neal Gompa:

...

On Sun, Apr 11, 2021 at 8:33 AM Mathias Homann <> wrote:

...

Just out of curiosity, what's wrong with the openpgp integration that is part of thunderbird?

Two major things:

* No integration with system keyring, making it a pain to use the GPG keys you have now * Usage of Botan means that system wide crypto policies don't control algorithms used in Thunderbird

+ No chain of trust. Very important in an enterprise setting, too.

It doesn't ask for the password when signing emails, or when sending encrypted emails (this instant I don't remember about receiving). It only asks when starting Thunderbird, ie, once per session (which in my case can mean weeks). -- Cheers / Saludos, Carlos E. R. (from 15.2 x86_64 at Telcontar)

Am 11.04.21 um 15:52 schrieb Carlos E. R.:

On Sunday, 2021-04-11 at 15:50 +0200, Carlos E.R. wrote:

...

On 11/04/2021 15.28, Ben Greiner wrote:

...

Am 11.04.21 um 15:06 schrieb Neal Gompa:

...

On Sun, Apr 11, 2021 at 8:33 AM Mathias Homann <> wrote:

...

Just out of curiosity, what's wrong with the openpgp integration that is part of thunderbird?

Two major things:

* No integration with system keyring, making it a pain to use the GPG keys you have now * Usage of Botan means that system wide crypto policies don't control algorithms used in Thunderbird

+ No chain of trust. Very important in an enterprise setting, too.

...

It doesn't ask for the password when signing emails, or when sending encrypted emails (this instant I don't remember about receiving).

...

It only asks when starting Thunderbird, ie, once per session (which in my case can mean weeks).

It doesn't cope with inline PGP, like this email.

Not sure if octopus will fix this as it just replaces the backend. Actually I don't think it will. Wolfgang