Owner trust of other pub-keys can no longer be set with Enigmail 2.0.1
OpenPGP addon for Mozilla Thunderbird
Brought to you by:
pbrunschwig
Menu
▾
▴
Client information:
- Windows 10
- Thunderbird 52.7.0
- Enigmail 2.0.1
Since the upgrade to Enigmail 2.0 it's not possible anymore to set the owner trust for a new imported public key. The option is not shown in the context menu of the key management (see screenshot 1).
With an older pub-key which was already added in a previous versions of Enigmail it's still possible (see screenshot 2).
I've reproduced this issue on an Windows 7 workstation with latest TB and Enigmail.
Can you also confirm this problem?
Screenshot 1: https://imgur.com/xygV2Ss
Screenshot 2: https://imgur.com/EB3z5HS
Last edit: Simon Beißer 2018-04-04
That's a feature. You can now only set the owner trust, if you first signed the key.
From a conceptual point, it does not make sense to set the owner trust without signing the key.:
* The owner trust is defined as the trust level that I assign to the owner of the key with regard to how trustworthy are the signature that the owner created.
* By signing a key, you specify how well you checked that a key really belongs to the person that claims to own it.
You should therefore sign the key, and not try to set the owner trust.
Thank you for the feedback.
I also tried to sign the key first but it doesn't seem to be working as expected for me.
I signed a pub-key (the key that signs the keys of all employees) with my key but I am not able to set the Onwer trust for that key.
I assume you have the secret key that signed the pubkey on your keyring, and you chose signed the key with at least level full trust (= I have checked very carefully)?
I had the same exact experience as Simon, and I was able to work around it the same way.
Yes and the owner trust of my key was set to "Ultimate" and I also signed the pub-key with level full trust.
But for testing purposes I've changed the owner trust of my own secret key to "Unknown" and then back to "Ultimate" and then suddenly the button "Set Owner Trust" appears for the pub-key I've signed.
It was a little bit strange because the owner trust for my own key was already set to "Ultimate" but after the change it worked. We were also able to reproduce the behavior on another computer.
Anyway, thanks for the help.