• caglararli@hotmail.com
  • 05386281520

How to workaround Thunderbird 78’s lack of support for encrypted mailing lists?

Çağlar Arlı      -    6 Views

How to workaround Thunderbird 78’s lack of support for encrypted mailing lists?

As of Thunderbird 78, the support for PGP plugins such as Enigmail has been dropped in favour of a native implementation of pgp in Thunderbird's core. But some features of Enigmail are still missing. One of those features is to create something akin to Enigmail's per-recipent rules.[1]

This makes it impossible for people to use encrypted mailing lists, where subscribers encrypt messages with everybody else's public key.

People with an up-to-date Thunderbird will not be able to write to the list for a while, and I read on the Thunderbird blog that the old Thunderbird 68 will not receive further security updates.

So, I'm trying to come up with a workaround.

One idea I have is to create a new key-pair specifically for the mailing list's address and distribute both private and public keys to all subscribers of the list. Assuming that there are no removals from the mailing list in the near future, are there any security problems with this scheme?

Or is there a better solution?


[1]: This allows the subscribers of a mailing list to create a rule for the address of the mailing list and instruct Enigmail to encrypt any mail for a specific list of people on the list. It requires all users to maintain a copy of the subscriber list, adding and removing keys if the (managed) subscribers of the list proper change but it works reasonably well for small lists that don't change too often.