1722825 - Make the automatically-generated revocation statement available from the UI

Status: NEW

(MailNews Core :: Security: OpenPGP, enhancement)

Description

[Nicolas Falquet]

Attachment: Screenshot from 2021-07-28 18-44-52.png

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0

Steps to reproduce:

Thunderbird automatically generates a revocation certificate when generating a new key. This revocation certificate is stored as 0x$KEYID_rev.asc in the profile folder.

Bug 1657901 proposes to write documentation about how to use this revocation certificate. It would be great. In addition, it would be even better to help people do the entire revocation process from the UI, without doc.

It seems to me that all the other steps of the revocation process are already available from the UI, except letting the user know that this revocation certificate exists and giving them an easy access to it.

A native implementation could be to add a "Backup Revocation Certificate" in the "More..." menu of the private key in the account settings below the "Revoke Key" entry. This menu entry would ask the user where they want to save a copy of the revocation certificate.

The rest of the revocation steps are already available from the UI. The user can import the revocation certification from the key manager and publish their revoked key to the key servers.

META bug 1595230 should depend on this bug.