5 ms·
Yeah, it makes a real mess. It generates random numbers of key pairs for each user, breaks subject line encryption randomly, and just generally sucks. I hope it
by Canada 8y ago
Yeah, it makes a real mess. It generates random numbers of key pairs for each user, breaks subject line encryption randomly, and just generally sucks. I hope it gets better, but it’s definitely not something you want to enable at this time, I regret doing it. At this point it’s easier to have one person help 50 people manually generate and exchange keys in an office setting.
- Leace 8y agoI agree wholeheartedly! It's interesting that trying to make to process easier actually made it hard for both novices and experts. Too bad it's enabled by default and plagued by issues: https://pep.foundation/blog/enigmailpep-current-update-1024-fixes-bug-under-windows/index.html https://pep.foundation/blog/enigmailpep-current-update-1024-...
- Canada 8y agoI really, really want it to work. I'm hopeful it will get better. I don't like PGP keyservers, they aren't very reliable, I wish I could remove all the old keys I've lost. And I don't like publishing my email address like that. Plus, the most of my GPG email use is with keys from people I know that we've sent each other directly. Overall I'm pretty satisfied with Enigmail running in the old PEP-free mode.
- Boulth 8y agoI'm also running PeP-free mode and I'm satisfied with it. I'm thinking that maybe after initial configuration it just works so the problem is largely setup. As for keyservers even GnuPG is diminishing their role. Web Key Directory is promoted as a replacement for discovery and updates of keys. Coincidentally Enigmail will automatically fetch recipients keys using WKD when composing an email. For example kernel is using it (https://www.kernel.org/category/signatures.html#using-the-web-key-directory https://www.kernel.org/category/signatures.html#using-the-we...) so does ProtonMail.