1665677 - [OpenPGP] Enabling a master password hides the OpenPGP Key Manager menu item

Status: RESOLVED DUPLICATE of bug 1662279

(MailNews Core :: Security: OpenPGP, defect)

Description

[Kenny]

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.1 Safari/605.1.15

Steps to reproduce:

I set up a master password and restarted Thunderbird.

Actual results:

The master password pops up twice when starting Thunderbird. The "OpenPGP Key Manager" menu item is not shown. When the master password is disabled and Thunderbird is restarted again then the menu item is shown again.

Expected results:

The "OpenPGP Key Manager" menu item should be visible when a master password is set. This is especially problematic as the OpenPGP implementation of Thunderbird does not protect the private keys unless the master password is set: "Thunderbird doesn't use on-demand unlocking (key passwords) of your secret keys. Rather, the only way to password protect the use of your OpenPGP secret keys is to set up the global Master Password feature of Thunderbird, which you can find in Thunderbird's security preferences." (https://wiki.mozilla.org/Thunderbird:OpenPGP:Migration-From-Enigmail#GnuPG_vs._RNP_and_key_storage)

Comment 1

[Kai Engert [:KaiE:]]

Let's handle it in bug 1662279

Comment 2

[Kenny]

I found a workaround for this issue: Setting the config setting "security.prompt_for_master_password_on_startup" to true forces Thunderbird to wait for the input of the master password. The second password prompt now opens within the first password prompt. The Thunderbird UI only opens after the second password entry and the "OpenPGP Key Manager" menu item is visible afterwards.

Comment 3

[Kai Engert [:KaiE:]]

But if you're on macOS, you then suffer from the following other issue, right? -> bug 1612456.

Comment 4

[Kenny]

Hm, indeed. All menu entries of the "Thunderbird" menu item are broken now.