🔔🐦 Thunderbird Fans, this one's for you!

rebel1725@hostux.social

@Tutanota When to add native OpenPGP support to Tuta?

miclgael@hachyderm.io

@Tutanota this is cool! Would it work for Thunderbird on android?

agowa338@chaos.social

Why do I need an addon? The entire point of wanting to use Thunderbird is for it to integrate into the regular UX of Thunderbird. Not to have it in a browser tab within Thunderbird...

madish_@mastodon.social

@Tutanota this is amazing news

vojaganto@mastodon.ie

@Tutanota this has solved a problem for me- thank you!

acallegaro@mas.to

@Tutanota oh wow interesting

nebulatide@mastodon.bsd.cafe

@Tutanota To me this looks like just showing the Tuta webinterface in Thinderbird. So in this case Thunderbird is nothing more than a browser.

markusm1966@mastodon.social

@Tutanota eine tolle Nachricht, die mich als langjährigen Thunderbird-Nutzer sehr freut. Das probiere ich heute am Abend gleich mal aus. Bin auf die Funktionalität gespannt.

mark448@mastodon.social

@Tutanota oh wow very interesting

kallekn@mastodonsweden.se

@acallegaro @Tutanota I'm getting used to the Tuta apps, or they are getting better. Still, I might test this if it works on the Android app?

dethos@s.ovalerio.net

@Tutanota When I saw this post, it got me excited. Today could have been the day.

However, after reading the article, it is not what I was expecting. I was hoping for an extension that would act as a bridge/translation layer between Thunderbird and the encrypted backend of Tuta, so we could use TB as is.

Perhaps sometime in the future...

sab@hostux.social

There's no standardized way of handling end-to-end encryption in Email, so a few providers (@Tutanota and Proton, to my knowledge) offer their own in-house solutions for it.

These solutions render the services incompatible with the standards powering clients like Thunderbird. It also is limited to emails within the same provider.

The only real solution would probably be an update of the e-mail protocol to allow for standardized E2EE.
@agowa338

agowa338@chaos.social

@sab @Tutanota

Well they could also have written an intermediate layer within the addon. But what they did is 10-20 lines of code that uses the already built in browser to open a tab to their website form what it looks like...

emdiscussions@mastodon.social

@Tutanota I tried to install the Tuta Mail add-on, and it failed:

"This add-on could not be installed because it has not been verified."

#email

nathanael@exquisite.social

@sab @Tutanota @agowa338 don't spread misinformation. pgp exists and proton for example supports it. tuta decided to build their own walled garden, instead of using a standard

axoln@mastodon.online

@Tutanota awesome

gommehammer@mastodon.online

@nathanael @sab @Tutanota @agowa338
To be fair to Tuta, by using their own system they managed some improvements over the standard PGP that Proton uses, eg. header encryption and post-quantum security. I still prefer the open standards used by Proton and hope that PGP will enable these two features soon.

agowa338@chaos.social

@gommehammer @nathanael @sab @Tutanota

Which you can't verify and for whom you won't even notice being stripped away...

gommehammer@mastodon.online

@agowa338 @nathanael @sab @Tutanota The Tuta client is fully open source, so it should be possible for someone with coding experience to notice drastic changes like the removal of encryption.

agowa338@chaos.social

@gommehammer @nathanael @sab @Tutanota

we all know that nobody is going to actually do any kind of code validation. And also that way too many users are just using the webapp instead of the clients. Also having one side of the encryption compromised would be good enough, so
PGP or SMIME + Gmail > Tuta....

Abspeckgeflüster – Forum für Menschen mit Gewicht(ung)

🔔🐦 Thunderbird Fans, this one's for you!