Comments on: Thunderbird and Encrypting E-mail http://blog.mozilla.com/al/2007/08/12/thunderbird-and-encrypting-e-mail/ A little software testing madness... Fri, 31 Aug 2007 05:45:14 -0700 http://wordpress.org/?v=2.8.6 hourly 1 By: Bill http://blog.mozilla.com/al/2007/08/12/thunderbird-and-encrypting-e-mail/comment-page-1/#comment-29 Bill Mon, 13 Aug 2007 21:14:46 +0000 http://blog.mozilla.com/al/2007/08/12/thunderbird-and-encrypting-e-mail/#comment-29 FWIW, Bob and I did a podcast episode about "how to setup secure email in Thunderbird" using digital certificates, posted at http://www.securityhype.com/blog/archives/24 -bill FWIW, Bob and I did a podcast episode about “how to setup secure email in Thunderbird” using digital certificates, posted at http://www.securityhype.com/blog/archives/24

-bill

]]> By: YAplanetReader http://blog.mozilla.com/al/2007/08/12/thunderbird-and-encrypting-e-mail/comment-page-1/#comment-28 YAplanetReader Mon, 13 Aug 2007 05:39:13 +0000 http://blog.mozilla.com/al/2007/08/12/thunderbird-and-encrypting-e-mail/#comment-28 Excellent summary, concise and comprehensive. Bookmarked for when someone asks me what the gibberish in my signed emails is all about. Excellent summary, concise and comprehensive. Bookmarked for when someone asks me what the gibberish in my signed emails is all about.

]]> By: abillings http://blog.mozilla.com/al/2007/08/12/thunderbird-and-encrypting-e-mail/comment-page-1/#comment-27 abillings Mon, 13 Aug 2007 04:48:51 +0000 http://blog.mozilla.com/al/2007/08/12/thunderbird-and-encrypting-e-mail/#comment-27 I don't think that I'd call PGP/GPG a "toy" but ok. :-) Can you write up a post telling the average Thunderbird user how to use S/MIME and X.509 certificate management then? If there is a better way to do things, I'm all ears. The things about using GPG and Enigmail is that it is easy and doesn't need a supporting hierarchy. I have public keys from most of my friends and they have mine. It's rather simple of us to sign or encrypt our mail to each other. I know nothing about X.509 but I'd be happy to hear more if you have a blog or want to post about it here. I don’t think that I’d call PGP/GPG a “toy” but ok. :-)

Can you write up a post telling the average Thunderbird user how to use S/MIME and X.509 certificate management then? If there is a better way to do things, I’m all ears.

The things about using GPG and Enigmail is that it is easy and doesn’t need a supporting hierarchy. I have public keys from most of my friends and they have mine. It’s rather simple of us to sign or encrypt our mail to each other.

I know nothing about X.509 but I’d be happy to hear more if you have a blog or want to post about it here.

]]> By: rod http://blog.mozilla.com/al/2007/08/12/thunderbird-and-encrypting-e-mail/comment-page-1/#comment-26 rod Mon, 13 Aug 2007 04:44:55 +0000 http://blog.mozilla.com/al/2007/08/12/thunderbird-and-encrypting-e-mail/#comment-26 <i>"The Enigmail extension was developed as an add-on for Thunderbird that would allow seamless integration of cryptography functionality into Thunderbird."</i> Um, you do realize that Thunderbird has had support for "cryptography functionality" in the form of X.509 certificate management and S/MIME encrypted email built in (no extensions necessary) since the Netscape Mail (4.x) days? PGP/GPG is a toy. There is no trust anchor for hierarchical verification of identity. Enterprises and governments won't touch anything less than X.509+S/MIME for secure email. “The Enigmail extension was developed as an add-on for Thunderbird that would allow seamless integration of cryptography functionality into Thunderbird.”

Um, you do realize that Thunderbird has had support for “cryptography functionality” in the form of X.509 certificate management and S/MIME encrypted email built in (no extensions necessary) since the Netscape Mail (4.x) days?

PGP/GPG is a toy. There is no trust anchor for hierarchical verification of identity. Enterprises and governments won’t touch anything less than X.509+S/MIME for secure email.

]]>