[arch-general] Sequoia/Octopus and Thunderbird - alternative OpenPGP support package

[Javier]

On 4/18/21 1:52 AM, NicoHood via arch-general wrote:
> I am not sure if that is what you (Javier) are actually doing, but I
> found a (simple but hidden) way to still use the GPG keyring without any
> thunderbird modifications.
> 
> I was not aware of that before, so I'd like to share:
> https://blog.nicohood.de/use-thunderbird-78-with-system-gnupg-keyring
> 
> Cheers,
> Nico
> 

Yes, that's precisely what I meant with using GPG to manage the private key, that's what I use.  I first read about this on:

https://wiki.mozilla.org/Thunderbird:OpenPGP:Smartcards
https://wiki.mozilla.org/Thunderbird:OpenPGP:Migration-From-Enigmail
https://support.mozilla.org/en-US/kb/openpgp-thunderbird-howto-and-faq
https://blog.thunderbird.net/2020/09/openpgp-in-thunderbird-78

The master key is said not to be required, because by having gpg and the gpg-agent handle the private key, then the only thing TB keeps in its DB are the public keys, which, are public, hehe...  However I don't like keeping a gpg keyring and a separate TB DB for public keys.  Besides, in those readings, it's sort of unclear whether the support for gpg is a long term thing, rather it looks allowed just to work around the lack of support for certain private keys, like having them in an USB key, or a yubikey, 
or similar...

So, I'd go with a native gpg approach, if that's available...

-- 
Javier

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 228 bytes
Desc: OpenPGP digital signature
URL: <https://lists.archlinux.org/pipermail/arch-general/attachments/20210418/67a0f2bc/attachment.sig>