[tor-bugs] #7093 [TorBirdy]: Enhance Enigmail preferences in TorBirdy

[Tor Bug Tracker & Wiki]

#7093: Enhance Enigmail preferences in TorBirdy
-------------------------+--------------------------------------------------
 Reporter:  sukhbir      |          Owner:  ioerror
     Type:  enhancement  |         Status:  new    
 Priority:  normal       |      Milestone:         
Component:  TorBirdy     |        Version:         
 Keywords:               |         Parent:         
   Points:               |   Actualpoints:         
-------------------------+--------------------------------------------------
 Karsten N. from JonDo has brought the following points to our notice about
 TorBirdy's Enigmail preferences:

 1: You append the hidden keyserver used for Tor to the
    "extensions.enigmail.agentAdditionalParam"

    Why not using "extensions.enigmail.keyserver" for the keyserver. It may
 be possible to add more keyserver in a comma separated list if more hidden
 services are known and and let the user choose one.

    Additional the user will see the used keyserver in the dialog and not
 the default Thunderbird keyserver.

 2: You are using the keyserver option "no-auto-key-retrieve".

    I did not found this option in my GnuPG documentation, only "auto-key-
 retrieve" is documented and disabled by default.

    I would recommend the usage of  "--no-auto-key-locate" for
 "extensions.enigmail.agentAdditionalParam". It will do the job and avoid
 web-bug like tracking with OpenGPG keys. For key search only the local
 keyring is used with this option.

 3: I got some returns of TorBirdy user. The option in the preferences
 dialog:

     "Disable GPG '--throw-keyids' [default: enabled]"

    is not understandable for some user. May be we can replace it by a more
 "normal" language string, something like:

    "Put the recipient key IDs into OpenPGP encrypted messages (not
 recommended)"

 JonDo is recommending TorBirdy so we have some valuable feedback from that
 end also. If we agree to these changes, Karsten will send us a patch for
 them.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7093>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online