Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > alt.comp.software.thunderbird > #16901

Re: GPG integration

From D <noreply@dirge.harmsk.com>
Date 2025-06-08 23:16 -0400
References <1021u62$36ia4$1@dont-email.me>
Newsgroups alt.comp.software.thunderbird
Message-ID <20250608.231647.f5529cd8@dirge.harmsk.com> (permalink)
Subject Re: GPG integration

Show all headers | View raw


On Sat, 7 Jun 2025 19:50:57 +0200, Daniel Brandes <dbs@brandes.xyz> wrote:
>while I used to employ GnuPG's GPGtools implementation on OSX/macOS 
>(which integrates with Mail.app), I recently switched to TB and would 
>like to make use of it's internal key management. I don't find it too 
>convenient – e.g. lack of key shortcuts – but manually importing would 
>be way more of a hassle.
>Unfortunately it doesn't seem to sync with the existing database, and 
>retrieving new keys by --import solely writes to GnuPG.
>Is there any workaround or tool to combine them? Not being an expert, 
>I'm wondering whether interference between the two could even be 
>relevant security wise.

p.p.s.  (last one, but this reply seemed relevant and possibly of interest)

>In article <20250608.155132.4de515fe@dirge.harmsk.com> D wrote:
>> p.s.   gnupg (https://gnupg.org/) does seem to be popular, and is widely recommended
>> by encryption experts . . . even the highly-regarded author of omnimix describes any
>> one skeptical about trusting gnupg "uninformed" ... https://www.danner-net.de/om.htm
>
>This is absolutely not true. Quite the opposite. Encryption experts switched en masses
>to age a couple of years ago, due to it's ease of use. The age author has more followers
>on X than gnupg.org on X. Only a handful of hardcore GnuPG users are still on their list,
>while the vast majority of GnuPG users have left the mailing list.
>Remops like SEC3 and others are using age as well.
>https://github.com/FiloSottile/age
>The author of age was also a security lead at Google for the Go programming language
>and it's crypto libraries.
[end quote]

red flags aplenty but "a.g.e." does at least appear to be superseding gnupg
and is being marketed as having already replaced those antique technologies
(maybe it has, yet implicit trust is absent from their a.i. dominated world)

Back to alt.comp.software.thunderbird | Previous | NextPrevious in thread | Find similar | Unroll thread


Thread

GPG integration Daniel Brandes <dbs@brandes.xyz> - 2025-06-07 19:50 +0200
  Re: GPG integration D <J@M> - 2025-06-08 00:35 +0200
    Re: GPG integration Daniel Brandes <dbs@brandes.xyz> - 2025-06-08 16:24 +0200
  Re: GPG integration VanguardLH <V@nguard.LH> - 2025-06-07 23:13 -0500
    Re: GPG integration Daniel Brandes <dbs@brandes.xyz> - 2025-06-08 17:52 +0200
  Re: GPG integration Bob Henson <bob.henson@outlook.com> - 2025-06-08 10:22 +0100
  Re: GPG integration D <J@M> - 2025-06-08 18:26 +0200
  Re: GPG integration D <noreply@dirge.harmsk.com> - 2025-06-08 23:16 -0400

csiph-web