|
|
Log in / Subscribe / Register

OpenPGP in Thunderbird

OpenPGP in Thunderbird

Posted Sep 24, 2020 13:13 UTC (Thu) by emorrp1 (guest, #99512)
In reply to: OpenPGP in Thunderbird by MKesper
Parent article: OpenPGP in Thunderbird

In the context of email Autocrypt seems to be the way forward, which is basically TOFU with header-based key management: https://autocrypt.org/dev-status.html

For gpg, you can configure "trust-model tofu+pgp" which works well with auto-key-retrieval and WKD.

to post comments

OpenPGP in Thunderbird

Posted Sep 25, 2020 10:03 UTC (Fri) by neal (subscriber, #7439) [Link]

Autocrypt is actually a bit weaker than TOFU. With TOFU, you trust the first key that you see for a given identifier. Later keys with the same identifier are either ignored or cause a conflict (like in GnuPG's TOFU trust model, and ssh). In Autocrypt, new keys are silently accepted.


Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds