ioerror / torbirdy

Torbutton for Thunderbird and related *bird forks
BSD 2-Clause "Simplified" License
84 stars 20 forks source link

gpg.conf optimized for privacy #11

Closed adrelanos closed 11 years ago

adrelanos commented 11 years ago

For anonymous e-mail, we now have Thunderbird + TorBirdy. But what are the recommended settings for gpg used in terminal?

The world needs a recommended gpg.conf in context of Tor. I've discussed this with @sukhbir by e-mail.

Feel free to add/remove any of my comments and/or change any settings.

azadi commented 11 years ago

Even though this is useful from an anonymity-privacy point, it causes the gpg to try every private key in the keychain and ask passwords for them until the right one which is confusing and might scare people.

Yes, that's true. As requested in ticket #6941, we have an opt-out from this and users can toggle this option by going to TorBirdy's preferences (in the current stable release):

TorBirdy

Is this gpg.conf used as default settings or is it just for recommendation?

Just for recommendation as of now; this is more of an attempt to have a "recommended" gpg.conf file in general and not limited to TorBirdy. @adrelanos suggested this and initiated it and we decided to put it here.