<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 24-Feb-18 3:35 AM, Axel Grude wrote:<br>
<br>
I agree, but in the first instance we need to fix the adding of a
S/MIME certificate to the store. The things are installed into
the browser from a link in an email. All we need is a key to hold
in Thunderbird to open the link in Thunderbird to see a large part
of the messing about with s/Mime certificates ended in one step.<br>
<br>
While PGP and other encryption is admiral, it is s/mime that is
supported by just about every mail client without add-ons. If we
are not capable of leveraging the existing infrastructure into a
easy to use package I see little in adding more methods to
encrypt.<br>
<br>
Likewise I would like to see a project around creating a
certificate authority for mail signing. letsencrypt for mail.
Not that I have any idea how to get such a thing off the ground.<br>
<br>
Matt<br>
</div>
<blockquote type="cite"
cite="mid:d544160b-7716-ff9e-7be5-3d1f7ec26c04@gmail.com">
<meta http-equiv="content-type" content="text/html;
charset=windows-1252">
<div id="smartTemplate4-template">
<p><i><br>
</i></p>
<p>Once thing I would wish for Thunderbird is to supply a strong
solution for providing end to end encryption<i> from
installation</i>. This should ideally land before it is
being made illegal by various Western governments:<i><br>
</i></p>
<p><i><a class="moz-txt-link-freetext"
href="https://www.sbs.com.au/news/incoming-laws-to-tackle-terror-encryption"
moz-do-not-send="true">https://www.sbs.com.au/news/incoming-laws-to-tackle-terror-encryption</a><br>
</i></p>
<p> </p>
<blockquote type="cite">
<p>But he argued law enforcement access to encrypted
communications should be on the same basis as telephone and
other intercepts, in response to warrants issued by the
court.</p>
<p>"Companies ought to be concerned with the reputational harm
that comes from terrorists and criminals using their
encryption and social media platforms for illicit ends," he
said.</p>
<p>"As a society we <b>should hold these companies
responsible</b> when their service is used to plan or
facilitate unlawful activity."</p>
</blockquote>
whether this "shoot the messenger" principle is actually
compatible with Western constitutions is another discussion.
However I would like to remind everyone of the history of
"Pretty Good Privacy" which was attempted to be declared a
weapon (and as such restricted for import from the US) and the
answer of the tech world was to release it into the public
domain. I think Thunderbird has a moral duty to help providing
privacy to Citizens of free democratic states. Email should not
be assumed a "free to read for all" just because it is
transported via a public network.
<p>On a technical dimension Thunderbird should think of offering
encryption Addons as premium or free services during
installation <i>for the next ESR release</i>. Which means
either bundling enigmail or a pEp as an installation step. I
think (paid) development on this should be prioritized, right
now.<br>
</p>
<p>Thoughts?</p>
</div>
</blockquote>
<br>
</body>
</html>