OpenPGP in Thunderbird

Autocrypt is actually a bit weaker than TOFU. With TOFU, you trust the first key that you see for a given identifier. Later keys with the same identifier are either ignored or cause a conflict (like in GnuPG's TOFU trust model, and ssh). In Autocrypt, new keys are silently accepted.