Re: [update] thunderbird & firefox 78 betas/rcs, and a note about enigmail

On Wed, Jun 24, 2020 at 11:28:49AM +0200, Landry Breuil wrote:
> Hi,
>
> just a quick note about upcoming 78 releases for firefox and
> thunderbird:
>
> If you're a thunderbird user, i encourage you to test the beta releases (just
> uploaded 78.0beta3 on my repo), as there are quite some changes compared to 68:
> - some addons will disappear because of the move to webextensions
> - first-class integration of openpgp (supersedes security/enigmail)
> - no more subpackaging for lightning, its installed by default
> - lots of quite ui improvements/tweaks
> - and many more changes, cf
> https://www.thunderbird.net/en-US/thunderbird/78.0beta/releasenotes/ and the
> same releasenotes for all the betas since
> https://www.thunderbird.net/en-US/thunderbird/69.0beta/releasenotes/
>
> i dont use enigmail nor pgp so havent tested at all the pgp integration, only
> checked that the relevant libs were building fine.

More bits on this thunderbird/openpgp/enigmail whack-a-mole:

upstream is planning to leave all those bits disabled by default until
thunderbird 78.2 (end of august) (per
https://wiki.mozilla.org/Thunderbird:OpenPGP), even if all basic bits
are here there are still a lot of things missing:
https://wiki.mozilla.org/Thunderbird:OpenPGP:Status

So my plan is to make sure OpenBSD 6.8 ships with thunderbird 78 (68
will be dead by then), users of enigmail (esp. users with keys on
smartcards, which requires gpgme) are *strongly* encouraged to test
support in advance (i'll continue building/providing builds for 78.x on
my repo) of the upcoming lock, using a distinct profile (or keep
backups). Direct all your feedback upstream.

Here's what i plan to add to pkg/README:

Thunderbird 78 provides OpenPGP email encryption via RNP, which was
previously optionally available via the Enigmail extension and GnuPG.
All basic OpenPGP features (encrypt/decrypt/sign) are available out of
the box. Support for smartcards is incomplete, only decryption works at
this time, signing is not yet implemented. To use the experimental
smartcard support, which is implemented as a fallback to GnuPG for
secret key operations, install the gpgme package.

no, i wont maintain two branches of the thunderbird port in CVS :)

Landry