On Wed, 28 Sep 2022 03:48:55 -0400, faeychild <
[email protected]> wrote:
After the last update I found Thunderbird demands Username and password
after opening.
Has anyone else experienced this
The "Primary Password"?
Thunderbird has chosen to no longer use gpg for enigmail, which is now built directly into thunderbird instead of being a plugin.
It still can import gpg keys, but uses it's openpgp instead of gpg. The primary password is used to encrypt the thunderbird openpgp key ring.
They've chosen to reduce security to make use of encrypted email slightly easier.
Instead of asking for the passphrase every time an outgoing message is signed, or
a received message is decrypted, it requests and caches the pass phrase at startup.
It also no longer uses the web of trust.
If you leave your desk with thunderbird running, anyone else using it can decrypt
messages sent to you, or sign new messages they create, using your id.
I haven't checked to see if there is a way to disable it. If there is, it's likely either by deleting the key (Tools/OpenPGP Key Manager), or in the config editor aka Advanced Preferences (Edit/Settings/Config Editor). In the config editor, try changing mail.identity.id1.enablePgp to false. Same for all identities
listed in the config editor.
Regards, Dave Hodgins
--- MBSE BBS v1.0.8 (Linux-x86_64)
* Origin: A noiseless patient Spider (2:250/1@fidonet)