Thunderbird, Enigmail and OpenPGP

Today the Thunderbird project is happy to announce that for the future Thunderbird 78 release, planned for summer 2020, we will add built-in functionality for email encryption and digital signatures using the OpenPGP standard. This new functionality will replace the Enigmail add-on, which will continue to be supported until Thunderbird 68 end of life, in the Fall of 2020.

For some background on encrypted email in Thunderbird: Two popular technologies exist that add support for end-to-end encryption and digital signatures to email. Thunderbird has been offering built-in support for S/MIME for many years and will continue to do so.

The Enigmail Add-on has made it possible to use Thunderbird with external GnuPG software for OpenPGP messaging. Because the types of add-ons supported in Thunderbird will change with version 78, the current Thunderbird 68.x branch (maintained until Fall 2020) will be the last that can be used with Enigmail.

For users of Enigmail, Thunderbird 78 will offer assistance to migrate existing keys and settings. We are happy that Patrick Brunschwig, the long-time developer of Enigmail, has offered to work with the Thunderbird team on OpenPGP going forward. About this change, Patrick had this to say:

“It has always been my goal to have OpenPGP support included in the core Thunderbird product. Even though it will mark an end to a long story, after working on Enigmail for 17 years, I’m very happy with this outcome.”

Users who haven’t used Enigmail previously will need to opt in to use OpenPGP messaging, as encryption will not be enabled automatically. However, Thunderbird 78 will help users discover the new functionality.

To promote secure communication, Thunderbird 78 will encourage the user to perform ownership confirmation of keys used by correspondents, notify the user if the correspondent’s keys change unexpectedly, and, if there is an issue, offer assistance to resolve the situation.

It’s undecided whether Thunderbird 78 will support the indirect key ownership confirmations used in the Web of Trust (WoT) model, or to what extent. However, sharing of key ownership confirmations made by the user (key signatures), and interaction with OpenPGP key servers shall be possible.

If you have an interest in seeing more detailed plans on what is in store for OpenPGP in Thunderbird, check out our wiki page with more information.

9 responses

Post a comment

  1. Wiktor wrote on :

    Wow, this is great! Thunderbird has a huge market share among my contacts but the current Enigmail setup that requires GnuPG is a non-starter.

    The attached wiki page also looks very solid. Is there a mailing list or contact where one could comment on specific points?

    Thanks for making this happen!

    Reply

    1. Ryan Sipes wrote on :

      Hey Wiktor, thanks for the positive feedback! We’re having a discussion on our mailing list tb-planning. Feel free to join in the discussion! We discuss all ideas for the future of Thunderbird there.

      Reply

  2. Stefan Claas wrote on :

    This is great news! Please consider, for future generations of OpenPGP users, whatever trust model(s) you will implement, to honor, same as S/MIME does in Thunderbird, CA[1] signatures on owners public key blocks. I.e. please add to your key store also an option for the CA keys from Governikus, CAcert.org, and Heise. This would be IMHO a very good signal so that more CAs for OpenPGP protocol key usage can show up globally and people will have more trust in someone else’s public key block or digital signature, which the outdated and old WoT can never guarantee.

    Reply

  3. Legume wrote on :

    There are so many other addons in the sea like fish that would benefit from being part of TB in its core.
    They are also in danger of being broken for good once the webextensions are mandatory.
    Have you considered absorbing other addons into mainline core TB as well or only the encryption stuff that very few people actually need?

    Reply

    1. Ryan Sipes wrote on :

      Hey Legume,
      This is a great question. We have explored pulling many of the most popular add-on functionality into Thunderbird core. We’ll have a roadmap detailing what we’d like to pull in soon!

      Reply

  4. Christian Nordmann wrote on :

    Hi,

    are there any plans or considerations to support OpenPGP-Smartcards?

    Obviously only the public keys are available for import in Thunderbird’s
    implementation of PGP as the private keys are stored on the smartcard.

    And as for all smartcard-based crypto those keys are not retrievable for
    use elsewhere.

    With regards,

    Christian

    Reply

  5. treeshateorcs wrote on :

    right about time!

    Reply

  6. Eric Moore wrote on :

    Including it in the core makes sense. However, what does this mean for the work with “pretty Easy privacy”?

    Gmail’s End-to-End Encryption project appears to be dead. Tutanota, ProtonMail and MailFence claim to provide true OpenPGP end-to-end encryption. That’s more than just supporting OpenPGP. Is there any explicit goal of interoperability with them? I’m thinking of stuff like how web of trust is handled and whether there are the necessary hooks so that IMAP/SMTP glue such as the ProtonMail bridge could work.

    Is Thunderbird going to use a open source encryption library that has passed an independent security audit? One of the reasons why I ask is that several of them (such as OpenPGP.js) have licenses incompatible with MPL.

    Its tough finding free S/MIME certificates nowadays. Actalis seems to be the only source for one that will last a year, the rest seem to be 30 day trials. Is S/MIME’s future in Thunderbird mainly for corporate use?

    Reply

  7. john jones wrote on :

    how are you going to verify a key servers address ? with MITM becoming a issue maybe this would help:
    https://bugzilla.mozilla.org/show_bug.cgi?id=179519

    thanks

    John Jones

    Reply

Post Your Comment