[Whonix-devel] Why I prefer PGP/INLINE over PGP/MIME in Thunderbird/Enigmail

[Whonix | Privacy and Anonymity OS]

Due to the recent Enigmail security issue, where e-mail drafts could end up unencrypted on IMAP servers. (You might wonder, no, Whonix was luckily not affected by this, because the version in Debian wheezy did not have that bug.)

In the PGP/INLINE example I can be more assured, that the text was that it really converted to encrypted ciphertext before sending - because I can see it.

[caption id="" align="alignnone" width="1033"] PGP INLINE[/caption]

As opposed to PGP/MIME, where I need to trust more, that Enigmail won't mess that up.

[caption id="" align="alignnone" width="1031"] PGP MIME[/caption]

Using option 'Confirm, before sending' set to 'Always', that I highly recommend to prevent messing up.

This post has been automatically cross-posted by whonix.org/blog To see the original (including links), go to https://www.whonix.org/blog/pgp-inline-vs-mime