Re: Request For Testing

Hi Patrick,

> Detection of GnuPG and gpg-agent, opening the OpenPGP Key Manager,
> encryption and decryption of attachments for inline-PGP mode

no issues for all above mentioned tasks using TB 10 with 1.4a1pre
(20120130-0528) on W7Pro.

Olav
--

-- 
The Enigmail Project - OpenPGP Email Security For Mozilla Applications

Nothing

_______________________________________________
Enigmail mailing list
Enigmail <at> mozdev.org
https://www.mozdev.org/mailman/listinfo/enigmail

Re: Per recipient rule to disable PGP/MIME?

Charly Avital wrote, On 2012-01-28 21:11:
> Came through in-line, signature verifies.
> Charly

What versions of Enigmail and Thunderbird are you running? Are you
forcing PGP/MIME by default for sent mail or just through that
particular rule?

Thanks.

--

-- 
Rubin
rubin <at> starset.net

_______________________________________________
Enigmail mailing list
Enigmail <at> mozdev.org
https://www.mozdev.org/mailman/listinfo/enigmail

Re: Per recipient rule to disable PGP/MIME?

On Feb 2, 2012, at 2:59 PM, Rubin Abdi wrote:

>> Charly Avital wrote, On 2012-01-28 21:11:
>> Came through in-line, signature verifies.
>> Charly
> 
> What versions of Enigmail and Thunderbird are you running? Are you
> forcing PGP/MIME by default for sent mail or just through that
> particular rule?
> 
> Thanks.
> 
I'm running now:
Mac OS X 10.7.3 (11D50) MacBook Intel C2Duo 2GHz-GnuPG 1.4.12-MacGPG2-2.0.17
Thunderbird 10.0 Enigmail 1.3.5 (20120116-1733)

When I sent my quoted message I was running MacOSX 10.7.2, Thunderbird
9.0.1 and Enigmail 1.3.5 (20120116-1733).

When running Thunderbird and Enigmail, I use by default in-line. But as
a rule, I don't sign my postings to lists.

I force PGP/MIME ad-hoc, by previous manual configuration.
Best regards,
Charly

OpenPGP preferences

_______________________________________________
Enigmail mailing list
Enigmail <at> mozdev.org
https://www.mozdev.org/mailman/listinfo/enigmail

Re: OpenPGP preferences

Hi John,

> I want messages to a specific email receipient be encrypted automatically, 
> I do not want this as default for all mail I send. Per receipient rule ...

the steps you described look correct and should satisfy your requiremends.

> Now, when I have composed the message to this person and I click on Send, 
> ideally I would now like the message to get encrypted and start sending. 
> However, I still have to use the OpenPGP icon on the toolbar to select the 
> option to Encrypt Message.

Then something is wrong. This might be an Enigmail misconfiguration or a key
issue: is the key you send to trusted (i.e. is it signed by you)? How did you
set trust in Engimail? Check in (advanced) Enigmail Settings -> "Sending" tab.

> It appears that I have to configure the OpenPGP Preferences/Key Selection
> for choosing the keys “By rules and email addresses” by default, that is,
> for everyone.

That is correct, but does not imply encryption default. Sign/Encrypt default is
a per identity setting which resides in the account/identity settings.

> Is there not a way to set the procedure so that for some individuals the
> key selection would be made based on these preset rules but for others the 
> selection would be made manually?

The PR-rule you created should du just that and that's what I use for years.
So it works, in 1.3.5 aswell, just needs to be configured correctly. If you
like, we can debug this interactively (TeamViewer) and you sum it up for the
list afterwards. Just drop me your Skype (or similar) contact by PM.

Olav
--

-- 
The Enigmail Project - OpenPGP Email Security For Mozilla Applications

Re: Enigmail Digest, Vol 104, Issue 3

> Message: 3
> Date: Fri, 03 Feb 2012 09:54:48 +0100
> From: Olav Seyfarth <olav <at> enigmail.net>
> To: Enigmail user discussion list <enigmail <at> mozdev.org>
> Subject: Re: [Enigmail] OpenPGP preferences
> Message-ID: <4F2BA0D8.1060408 <at> enigmail.net>
> Content-Type: text/plain; charset=windows-1252
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: RIPEMD160
> 
> Hi John,
> 
> > I want messages to a specific email receipient be encrypted
> automatically,
> > I do not want this as default for all mail I send. Per receipient rule
> ...
> 
> the steps you described look correct and should satisfy your requiremends.
> 
> > Now, when I have composed the message to this person and I click on Send,
> > ideally I would now like the message to get encrypted and start sending.
> > However, I still have to use the OpenPGP icon on the toolbar to select
> the
> > option to Encrypt Message.
> 
> Then something is wrong. This might be an Enigmail misconfiguration or a
> key
> issue: is the key you send to trusted (i.e. is it signed by you)? How did
> you
> set trust in Engimail? Check in (advanced) Enigmail Settings -> "Sending"
> tab.

Hello, Olav.

Are you meaning OpenPGP menu > Preferences > Sending tab? I do not see "Enigmail
Settings".  I set the recipient key's trust in gpg with lsign command by using
the same key of the user that is sending the message.  Also, when I now open the
"OpenPGP Key Management" window and right-click on the recipient's key and
select key properties at the bottom of the context menu, the Key Properties
window opens and shows that the Key validity is "trusted", as well as for the
Additional User IDs in the bottom section.

Frankly, I do not mind having to confirm that a message be encrypted upon send,
but if I have set it already to select a particular key and to encrypt by
default, then I should expect it to have initiated those selections from the
get-go despite the subsequent confirmation. What do you think?
> 
> > It appears that I have to configure the OpenPGP Preferences/Key Selection
> > for choosing the keys ?By rules and email addresses? by default, that is,
> > for everyone.
> 
> That is correct, but does not imply encryption default. Sign/Encrypt
> default is
> a per identity setting which resides in the account/identity settings.

If I am not mistaken, you are referring to the section "Account Settings >
Manage Identities > Edit (selecting sender ID) > OpenPGP Security tab > Message
Composition Default Options > (selecting) Encrypt messages by default?  Is that
right.  If so, that is not exactly what I am trying to accomplish as this would
set it up by default to encrypt messages sent "by this sender", but I am wanting
to set it up to encrypt messages sent "to this recipient" by default regardless
of the sender's account.  Perhaps the program decision for encryption is based
on the sender, instead of the recipient, as I would have expected?
> 
> > Is there not a way to set the procedure so that for some individuals the
> > key selection would be made based on these preset rules but for others
> the
> > selection would be made manually?
> 
> The PR-rule you created should du just that and that's what I use for
> years.
> So it works, in 1.3.5 aswell, just needs to be configured correctly. If you
> like, we can debug this interactively (TeamViewer) and you sum it up for
> the
> list afterwards. Just drop me your Skype (or similar) contact by PM.

Thanks for this offer, and I may well take you up on it; but first I want to see
whether I can get it right on my end.  I will continue to fiddle with it some
more while waiting on your response.  Who know, maybe a reboot will jar this
thing into submission! Thank you. :)

Re: Enigmail Digest, Vol 104, Issue 3

Hi John,

I see from your answer that you know all settings places and that you
NOT set "encryption by sender" by default (identity settings), that your
key is valid and trusted, and your rule "encrpyt to THIS receipient" is
properly set up. I use exactly the same setup and it works at my end,
also have "always confirm" enabled in EM and send confirmation off in TB.

So, other ideas how to narrow down the issue:

Please create a test key for e.g. "test <at> test.test", trust it, add a PRR for
that key ("exact" -> encrypt to this key) and set general options to "always
confirm" (in order to see whether it works without actually sending).

You may find debug output helpful: create a directory of your choice,
set it in "Debugging" tab of EM main preferences, restart TB, send a
message to the receipient EM should encrypt to and quit TB. Examine the
content of the debug dir.

Olav
--

-- 
The Enigmail Project - OpenPGP Email Security For Mozilla Applications

Re: Enigmail Digest, Vol 104, Issue 4

> Message: 2
> Date: Sat, 04 Feb 2012 07:33:54 +0100
> From: Olav Seyfarth <olav <at> enigmail.net>
> To: Enigmail user discussion list <enigmail <at> mozdev.org>
> Subject: Re: [Enigmail] Enigmail Digest, Vol 104, Issue 3
> Message-ID: <4F2CD152.508 <at> enigmail.net>
> Content-Type: text/plain; charset=ISO-8859-1
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: RIPEMD160
> 
> Hi John,
> 
> I see from your answer that you know all settings places and that you
> NOT set "encryption by sender" by default (identity settings), that your
> key is valid and trusted, and your rule "encrpyt to THIS receipient" is
> properly set up. I use exactly the same setup and it works at my end,
> also have "always confirm" enabled in EM and send confirmation off in TB.
> 
> So, other ideas how to narrow down the issue:
> 
> Please create a test key for e.g. "test <at> test.test", trust it, add a PRR for
> that key ("exact" -> encrypt to this key) and set general options to
> "always
> confirm" (in order to see whether it works without actually sending).
> 
> You may find debug output helpful: create a directory of your choice,
> set it in "Debugging" tab of EM main preferences, restart TB, send a
> message to the receipient EM should encrypt to and quit TB. Examine the
> content of the debug dir.
> 
> Olav
> - --
> The Enigmail Project - OpenPGP Email Security For Mozilla Applications

Olav,

Hello.  Your ideas were quite helpful, and they gave me the clue I needed to
find the problem.  I re-imported the key and retested the procedure, and this
time all went as I expected it should.  That was great to see. Now that it
appears to be working normally, I do have a related question that arose as a
result of following the procedure to completion.  

After composing a message, when I elect to save it as a draft to be sent later
and the program asks whether I want to encrypt it while saving the draft, if I
say "yes" to saving it encrypted, would it not save it encrypted to the
recipient's key?  Or would it save the draft to the key of the user ID from whom
I am going to send it?  I ask this question because I expected the saved message
to be encrypted for the recipient; however, when I later opened this same draft,
I saw that the message suddenly decrypted.  How could it have been decrypted if
it was encrypted to the recipient's key, which I do not possess because all I
have is the public key of the recipient?  Thanks.

John

Cannot encrypt message?

Hi, I set up my Thunderbird/Enigmail/Kleopatra accounts, and can send
and receive encrypted emails, but when I click on Options-> Encrypt
this Message it prompts me to designate a certificate for
signing/encryption.  I try to do this and it will not let me because
it says it has to be in PKCS12 format.  It cannot find anything in
this format on my computer, and my key is saved as a .asc file.  I can
find no way to convert this or otherwise get the program to recognize
my Open PGP certificate.  I would like for this feature to work
because I think it would allow me to encrypt my message before sending
it, which is what I want.  The only thing I can think of is to create
a new key using Thunderbird, but I would rather not invalidate the one
I have.  Thank you for your help.

Steve