Comment 19 for bug 1895643

Revision history for this message
Lukas Wiest (lukas-wiest) wrote :

@Oliver I've upgraded mine now.

For me (with researching beforehand yet) the transition was a five minute thing.
The downsides described above stay of course, but that's not Ubuntu's fault.

But for others if they stumble across this, my setup has changed in the following points:
 - I've set sign+encrypt as default. This forces me to always explicitly disable it, if I send someone an email who doesn't use encryption. (automatism by email-match missing).
 - On the migration assistant from enigmail to port your keys, I canceled all passphrase requests, as I didn't want my private keys to be in the TB keyring. This way I got all public keys ported, but none of the private ones.
 - then checked with `gpg --list-secret-keys --keyid-format long` for private keys, and added for each account the correct external gnupg keyid (important: you need to use the encryption keyid, not the signing key one)
Background: As long as you don't set a master password for the TB keyring, your private keys would be stored unsecured on your disk.

P.S: For the privacy concerned people in general: There's a site called privacy manual, which provides a user.js for TB 78 setting a bunch of configs regarding security and privacy.
It's only available in german, but maybe interesting anyway:
https://privacy-handbuch.de/handbuch_31p.htm