OpenPGP in Thunderbird

I am not a TB user but I felt that I should known how the new OpenPGP integration works. I installed it yesterday on a Windows VM to get the experience of the majority of users. Despite all my critics given in personal discussions, I was positively surprised. The integration into the UI is nice and straightforward and easy to explain. There is none of the usual geeky gadgets and things are explained in a way many non-hackers can actually grasp.

Sure this is just a first step and there are lot of things which need to be addressed. The RNP library does all the complicated parts and I am confident that this library gets things right (we did some interop testing in the last years). From my brief test I see these missing things: 1. Allow import of offline keys (GnuPG extension but widely promoted), 2. Actually locally sign the keys instead of putting the trust information into some TB specific database, 3. Handle application/pgp-keys.

(FWIW, the first OpenPGP integration was written along with the then new mail code of Mozilla more than 20 years ago - unfortunately rejected by the Mozilla management because they didn't wanted any OpenPGP in their MUA.)