Can't Decrypt Messages After Latest Enigmail Upgrade
OpenPGP addon for Mozilla Thunderbird
Brought to you by:
pbrunschwig
Menu
▾
▴
I'm using Thunderbird 52.8.0, Enigmail 2.0.6 and when I click on an encrypted message, the decrypt window will pop up and allows me to enter my passphrase. However, the message has a second layer of encryption and when I click on the Decrypt button to decrypt the second layer of encryption, nothing happens. This is a new phenomenom since the upgrade. If I copy the second layer of encryption to my PGPtray application, I can then review the message after entering my passphrase.
I also see that I'm not the only one who is experiencing this problem since the latest upgrade.
There may be two reasons for this:
1. the second layer is not MDC-protected
2. after decryption of the 1st layer, there are unencrypted and encrypted message parts.
For 1) you may want to check the result of the decryption with PGPTray.
In the case of 2) I'm sorry, but Enigmail won't decrypt such messages anymore. Many other mail clients never did. Due to the Efail vulnerability, there is no way out.
Looks like it's time to move on to Protonmail or Tutanota. If anyone uses remailers as part of their email strategy, this "new" fix to Enigmail has broken everything from an automation standpoint.
I am aware of the fact that a number of scenarios don't work anymore. But I don't want to give you a false sense of security.
Enigmail is living in Thunderbird, and if Thunderbird can't be used securely with certain use-cases, then I better don't support them (anymore). Anything else would be irresponsible.