Roaming Computing System (Windows Edition) 4 - Enigmail

Contents

Description

Enigmail is an integrated security add-on for Mozilla Thunderbird. It allows you to encrypt and digitally sign your emails and to decrypt and verify messages you receive.

You can disable Engimail if you don't want to use it, using the menu > Account settings > select account > OpenPGP Security > [ ] Enable OpenPGP support (Enigmail) for this identity.

Enigmail 2.0

Variant
Version 2.0
Installed to Workstation
Required for Thunderbird
Dependencies
Download location
WPKG package.xml example page
AppDeploy page
Installer
Install format
Installation Instructions
Release Notes
Changelog https://www.enigmail.net/index.php/en/download/changelog
Silent Installation and uninstallation
Configuration https://enigmail.net/documentation/Configuration
TWEAK

We no longer turn on Enigmail / OpenPGP in Thunderbird using TWEAK


Issues with the software in our system
Issues with the software itself
Note

As of Enigmail 2.0, "Support for Pretty Easy Privacy (p=p) is implemented in Enigmail. p=p is active by default for new users.". Enigmail includes p=p and it's updated with each new Enigmail release.

https://pep.foundation/blog/enigmail-2-with-pretty-easy-privacy-pep-support-by-default-for-new-users/ says "We're pleased to announce that since last week the new Enigmail 2.0 extension for the popular Mozilla Thunderbird client adds support for pretty Easy privacy (p=p) to fully automatically encrypt emails ... p=p gets automatically activated in Enigmail if there's no prior Enigmail configuration in place, i.e. for all novice users. New Enigmail users don't have to care about the creation of key pairs for their email accounts anymore."

If you've switched "Enable Protection" on without realising it: You can see it enabled by the big toolbar icon. This is a new feature of the secure messaging in Thunderbird. It is only appearing for new Thunderbird profiles. In the status bar at the bottom it says "p=p Privacy Status: Secure" as though you may have done something to switch this on between you specifically. (Usually it says Privacy Status: Unknown.) Have you switched on privacy between you? To switch it off for particular people, each time you send an email, click the "Enable Protection" icon so that it looks to be broken in two and that email will then send OK.

To setup secure messaging between the two of you, select the down arrow beside "Enable Protection" > p=p Handshake > Handshake... "Please ask your correspondent to read his Trustwords in person or via phone to you. They should match the Trustwords below."

Switch off completely:
Menu > Enigmail/p=p > preferences
Store messages securely for these accounts
[email address]...
[ ] Store messages securely
[ ] Enable privacy protection
[*] Attach my key to outgoing messages

https://sourceforge.net/p/enigmail/forum/support/thread/bfc051a7/ says "You can switch between the Junior mode and the classical Enigmail mode in the Thunderbird preferences > Privacy tab":

Menu > Options > Privacy > Enigmail Junior Mode:
[*] Automatically decide if Junior Mode should be used
[ ] Force using S/MIME and Enigmail
[ ] Force using p=p (Pretty Easy Privacy)

Enigmail 1.9.6.1

Variant
Version 1.9.6.1
Installed to Workstation
Required for Thunderbird
Dependencies
Download location
WPKG package.xml example page
AppDeploy page
Installer
Install format
Installation Instructions
Release Notes
Changelog https://www.enigmail.net/index.php/en/download/changelog
Silent Installation and uninstallation
Configuration https://enigmail.net/documentation/Configuration
TWEAK

We no longer turn on Enigmail / OpenPGP in Thunderbird using TWEAK


Issues with the software in our system
Issues with the software itself

Enigmail 1.3.5

Variant
Version 1.3.5
Installed to Workstation
Required for
Dependencies
Download location
WPKG package.xml example page
AppDeploy page
Installer
Install format
Installation Instructions
Release Notes
Changelog http://enigmail.mozdev.org/download/changelog.php.html
Silent Installation and uninstallation
Configuration Enigmail User Preferences Information: http://enigmail.mozdev.org/documentation/userprefs.php
TWEAK enigmail-custom.js:
// Location of gnupg executable, relative to Thunderbird program directory
pref("extensions.enigmail.agentPath", "C:\\Program Files\\GNU\\GnuPG\\gpg.exe");

// Allow Enigmail to work with Hushmail accounts
pref("extensions.enigmail.hushMailSupport", true);

// Set PGP/MIME to work with SHA256 rather than SHA1
pref("extensions.enigmail.mimeHashAlgorithm", 3);
0: let GnuPG choose / 1: SHA1 / 2:RIPEMD160 / 3: SHA256 / 4: SHA384 / 5: sha512 6: SHA224) 0 by default. In future GnuPG 2.0.13 "The default hash algorithm preferences has changed to prefer SHA-256 over SHA-1.".
Issues with the software in our system We have seen "GnuPG not found", which required pressing 'Reset' in Enigmail prefs.
Issues with the software itself

Enigmail 1.1.2

Variant
Version 1.1.2
Installed to Workstation
Required for
Dependencies
Download location
WPKG package.xml example page
AppDeploy page
Installer
Install format
Installation Instructions
Release Notes
Changelog http://enigmail.mozdev.org/download/changelog.php.html
Silent Installation and uninstallation
Configuration Enigmail User Preferences Information: http://enigmail.mozdev.org/documentation/userprefs.php
TWEAK
Issues with the software in our system We don't install Enigmail language pack(s) for user interface localisation. They are required to match the languages of Thunderbird. They come as an XPI. See http://enigmail.mozdev.org/langpack.html.
Issues with the software itself

Enigmail 0.95.6

Variant
Version 0.95.6
Installed to Workstation
Required for
Dependencies
Download location
WPKG package.xml example page
AppDeploy page
Installer
Install format
Installation Instructions
Release Notes
Changelog http://enigmail.mozdev.org/changelog.html#enig0.95
Silent Installation and uninstallation
Configuration Enigmail User Preferences Information: http://enigmail.mozdev.org/documentation/userprefs.php
TWEAK
Issues with the software in our system We don't install Enigmail language pack(s) for user interface localisation. They are required to match the languages of Thunderbird. They come as an XPI. See http://enigmail.mozdev.org/langpack.html.
Issues with the software itself

Enigmail 0.95

Variant
Version 0.95
Installed to Workstation
Required for
Dependencies
Download location
WPKG package.xml example page
AppDeploy page
Installer
Install format
Installation Instructions
Release Notes
Changelog http://enigmail.mozdev.org/changelog.html#enig0.95
Silent Installation and uninstallation
Configuration Enigmail User Preferences Information: http://enigmail.mozdev.org/documentation/userprefs.php
TWEAK
Issues with the software in our system We don't install Enigmail language pack(s) for user interface localisation. They are required to match the languages of Thunderbird. They come as an XPI. See http://enigmail.mozdev.org/langpack.html.
Issues with the software itself

Enigmail 0.94.1

Variant version for Mozilla Thunderbird 1.5
Version 0.94.1
Installed to workstation
Required for
Dependencies Thunderbird
Download location
Installer files preparation
WPKG package.xml example page
AppDeploy page
Installer
Install format
Installation Instructions

Site Admin Installation Instructions: http://enigmail.mozdev.org/install-globally.html

Installation:

  • mkdir "%PROGRAMFILES%\Mozilla Thunderbird\extensions\{847b3a00-7ab1-11d4-8f02-006008948af5}"
  • "%WPKGROOT%\tools\unzip" -o "%PACKAGES%\enigmail\enigmail-0.94.1-tb15-win32.xpi" -d "%PROGRAMFILES%\Mozilla Thunderbird\extensions\{847b3a00-7ab1-11d4-8f02-006008948af5}"
  • I'm hoping this is as good as installing globally?
HOW DO WE UNINSTALL IT? (if it can't be done more elegantly, we can delete files then remove 2 lines from overlays.rdf with Perl)

Release Notes
Changelog http://enigmail.mozdev.org/changelog.html#enig0.94
Silent Installation and uninstallation
Configuration

Enigmail User Preferences Information: http://enigmail.mozdev.org/userprefs.html

Enigmail - Enigmail Configuration

Reference: 'Enigmail Configuration' http://enigmail.mozdev.org/configure.html

// Location of gnupg executable, relative to Thunderbird program directory
// (This setting can be left blank if gnupg is in the system path)
// DANGER: C:-SPECIFIC PATH!!!!!!!!!!!!!!!!!!!!
pref("extensions.enigmail.agentPath", "C:\\Program Files\\GNU\\GnuPG\\gpg.exe");

// Allow Enigmail to work with Hushmail accounts
pref("extensions.enigmail.hushMailSupport", true);

// Set PGP/MIME to work with SHA256 rather than SHA1
pref("extensions.enigmail.mimeHashAlgorithm", 3);

"Additional parameters for GnuPG: Allows you to specify additional parameters for GnuPG that you might wish to be used, e.g. --homedir "F:\GnuPG keys"".

Enigmail - Thunderbird Configuration

// Turn on OpenPGP in Thunderbird
// Tools - Account Settings... - OpenPGP Security - Enable OpenPGP support (Enigmail) for this identity - on
pref("mail.identity.id1.enablePgp", true);
TWEAK
Issues with the software in our system Haven't yet an automated way of configuring the outgoing mail server
Issues with the software itself