PGP and Enigmail

STRIKEPGP & Enigmail

What’s STRIKE

DFI - Dissent, Privacy & Information access in an unequal digital world

STRIKE

Current situation of STRIKE

● Privacy○ Communication

■ Emails < now here we are■ Chats■ Phone Calls■ Video Conferences

Common threat to security & privacy

Last 100 meters crash!

What’s encryption

Cryptography

● Symmetric (TripleDES)○ one key for both

Encrypt/Decrypt● Asymmetric (RSA)

○ two keys, one to encrypt, another to decrypt

PGP Basics

https://www.powtoon.com/show/gmd6oEQEY8q/pgp-basics/

defined in rfc4880

Gnu Privacy Guard

GnuPG is a implementation of PGP protocol● GPGTools for Mac OS X and Apple Mail● GPG4Win for Windows and Outlook● File encryption with GPG tools● Enigmail for Thunderbird

—— what this guys are working on

Enigmail

Thunderbird based Email GPG privacy tool

Enigmail● Basic Functions

○ Encrypt/Decrypt○ Sign/Trust○ Key manager

After encryption

Enigmail● Tech Stack

○ thunderbird XPCOM & Gecko○ interaction with GPG agent

What’s STRIKE up to right now

● Bring TW things to Enigmail○ Test driven development (xpcshell unit tests)○ Continuous integration (Travis-CI)○ Code description of Provisioning (Vagrant/Docker)

● Merged to master○ Tests for XPCOM GPG binding○ Error handling

● Enhancement on Usability and XD

If you are interested

Follow this feed for news about STRIKE:https://my.thoughtworks.com/groups/strike-public

Fork this repo to contribute to Enigmail:http://sourceforge.net/p/enigmailBy Patrick Brunschwig