Thunderbird feature request: need new default certificate encryption option
Categories
(Thunderbird :: Security, enhancement)
Tracking
(Not tracked)
People
(Reporter: hagar2272, Unassigned)
Details
User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:72.0) Gecko/20100101 Firefox/72.0
Steps to reproduce:
I want to be able to start using encrypted emails. Very few of my recipients have certificates. I want a new setting, if any of the recipients have certificates it will send an encrypted email to them and if any of the recipients do not have certificates it will send an unencrypted email to them and no annoying warning. Yes, two emails might be sent.
This should be the default option, the current options
Always encrypt can not be a default since too few recipients have certificates (too many annoying warnings)
The only option left is "never encrypt" which does not encourage using encryption.
If "digital signed" is enabled then include a text "if you want to receive encrypted emails get an email certificate with a link to a help topic"
Actual results:
Since this option does not exist, I have "never encrypt" as default and does not give encrypted emails to people who have certificates and do not encourage more adoption of email encryption.
Expected results:
If this new option exists. I would have a valid certificate and I would send signed and encrypted emails to people who have certificates and encourage more adoption of email encryption. Without seeing any annoying warning if some recipients do not yet have certificates.
Comment 1•5 years ago
|
||
If you'd send two messages (one encrypted and another unencrypted) that would just defeat the purpose of using encryption in the first place. We do have bug 135636 though.
I do not believe that sending two messages defends the purpose of using encryption. I do not think of encryption as atomic on one email but encryption in a larger scope. I want to run with encryption on by default but I send lots of emails and a large % of my recipients do not have certificates.
A default makes sure that I do not forget to encrypt and the only thing I need to do is to make sure my important recipients have a certificate. The problem moves to make sure more and more recipients use certificates. That is a one time check per recipients not a check per email.
The goal is to change people's behavior, there are no new capabilities here.
Description
•