OpenPGP 'white list ??

User Help for Mozilla Thunderbird
Post Reply
McGraw2
Posts: 17
Joined: June 13th, 2022, 11:26 am

OpenPGP 'white list ??

Post by McGraw2 »

Hi, I now have OpenPGP setup with my colleague so sent and received emails are encrypted between us.

I also send emails to other email addresses, unencrypted, however to do this I need to select 'Disable Encryption' prior to sending, involving a number of additional clicks and dialogues, and then the email appears to hang on the 'sending' for what seems like longer than normal, needing to leave it in the background to finally be sent.

Is there a way to setup TB, so that Encryption is disabled for those recipients who do not have my part of the key, or them my oart of the key (if that is the right term, sorry to be vague, I seem to think that when setting up PGP I remember that TB needs to know if the recipient has part of the 'key').

Hope that makes sense. So TB has a 'white list' so to speak, of only those recipients that should receive encrypted emails, for all others Encryption is disabled. It seems with the 'accounts' setting, encryption is either enabled or disabled for all recipients.

Any thoughths appreciated.
User avatar
tanstaafl
Moderator
Posts: 49647
Joined: July 30th, 2003, 5:06 pm

Re: OpenPGP 'white list ??

Post by tanstaafl »

https://support.mozilla.org/en-US/kb/op ... to-and-faq and https://www.howtogeek.com/706402/how-to ... underbird/ and https://support.mozilla.org/en-US/kb/di ... g-messages doesn't seem to address how to avoid having to set the security options in a message you want to send to somebody that you don't have a key for.

I found https://bugzilla.mozilla.org/show_bug.cgi?id=135636 (Automatically enable or disable end-to-end encryption (OpenPGP or S/MIME) if it's possible based on existing user and recipient configuration.) and its still being worked on.

I found https://bugzilla.mozilla.org/show_bug.cgi?id=1795981 (Collect feedback on an experimental implementation for encrypt-if-possible (bug 135636)) You might want to comment in that bug report, it seems to be proposing what you want.

"A shorter summary of the three experimental prefs:

If you want encryption to be automatically enabled, but never automatically disabled, set mail.e2ee.auto_enable to true.

If you want encryption to automatically enabled and disabled, and get a warning whenever it gets automatically disabled, set mail.e2ee.auto_enable to true, and set mail.e2ee.auto_disable to true.

If you want encryption to automatically enabled and disabled without a warning (only feedback will be the encryption toolbar button that will change state), set mail.e2ee.auto_enable to true, and set mail.e2ee.auto_disable to true, and set mail.e2ee.notify_on_auto_disable to false.
"
Post Reply