[tor-talk] TorBirdy 0.0.12 released - testing and feedback requested!

[Jacob Appelbaum]

Hi!

TorBirdy 0.0.12 is now out. It's still quite experimental - of course.
Use at your own risk and especially if you're using it with Enigmail and
GnuPG without a local[0] HTTP proxy.

We've continued with updating the web page to show some TorBirdy screen
shots:

 https://github.com/ioerror/torbirdy/wiki/Screen-shots

Call for help:

We're looking for assistance with Translations - if you'd like to
translate TorBirdy, we'd gladly accept a patch that prepares TorBirdy
for translation work. We now have German, English and Punjabi! Even if
you can't help translate, we'd love to know what languages matter to you
or your friends - please let us know?

Release Highlights:
0.0.12, 27 Sept 2012
  TorBirdy now has localization support
    Current languages: English, German (translated by Karsten N.),
    Punjabi
  TorBirdy code cleanup: fix global namespace pollution
  Do not select the last selected account to prevent automatic login
    (TorBirdy selects 'Local Folders' on startup to prevent this)
  Restore proxy settings at TorBirdy uninstall
    (settings prior to installation of TorBirdy)
  TorBirdy now allows HTTP/SSL connections
  Users may opt-out from `--throw-keyids'
  Enhanced TorBirdy JonDo support (thanks to Karsten N.)
  Fix a bug in 0.0.11 that prevented account preferences from being set
  Add Screenshots directory
  TorBirdy no longer requires a configured HTTP proxy for full use with
    Tor
  TorBirdy now enforces the safest HTTP proxy usage possible with GnuPG
    TorBirdy attempts to disable all name resolution in GnuPG due to a
    serious SOCKS5 problem with GnuPG proxy options in how we invoke
    GnuPG; GnuPG only supports SOCKS5 when it is linked against libcurl
    (>7.21.7) and hostnames are not used. This is outlined the
    following bug:
    https://trac.torproject.org/projects/tor/ticket/2846

General content anonymity caution note:

TorBirdy has known leaks in the Message-ID and in the Date header, we're
working on merging an upstream patch that will allow these leaks to be
closed. There are no known proxy leaks unless you use additional
extensions that do not respect the proxy settings of Thunderbird. If you
use GnuPG and Enigmail, we encourage you to use it with a local HTTP
proxy due to the issues mentioned[0] regarding GnuPG.

Here's the wiki page for TorBirdy:

  https://trac.torproject.org/projects/tor/wiki/torbirdy

Here's the latest XPI for TorBirdy:

  https://www.torproject.org/dist/torbirdy/torbirdy-0.0.12.xpi
  https://github.com/downloads/ioerror/torbirdy/torbirdy-0.0.12.xpi

Here is a proper GPG signature for the latest XPI:

  https://www.torproject.org/dist/torbirdy/torbirdy-0.0.12.xpi.asc
  https://github.com/downloads/ioerror/torbirdy/torbirdy-0.0.12.xpi.asc

Here is the sha1sum of torbirdy-0.0.12.xpi:

  4d956d0458580dd689f2e02a6cf369384e4aa5af

The GnuPG signature that signed this email is also the same key that
signs the TorBirdy releases. To learn more about signature verification
of Tor Project related software such as TorBirdy please visit this page:

  https://www.torproject.org/docs/verifying-signatures.html

The plugin on AMO has been preliminarily reviewed and we are still in
the review process. It is again possible (Hooray!) to install TorBirdy
directly from Thunderbird or by downloading the extension in a web
browser from Mozilla's website:

  https://addons.mozilla.org/en-US/thunderbird/addon/torbirdy/

We believe that users who installed previous versions from Mozilla's
addons site should receive this update automatically.

We now upload a full XPI and GnuPG signature for every new release to
the Tor Project's web servers:

  https://www.torproject.org/dist/torbirdy/

All the best,
Jacob

[0] https://trac.torproject.org/projects/tor/ticket/2846

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 618 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20120927/518024ab/attachment.pgp>