<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> </head> <body> As per <a moz-do-not-send="true" href="https://forum.artixlinux.org/index.php/topic,2511.0.html">https://forum.artixlinux.org/index.php/topic,2511.0.html</a> : Sequoia Octopus OpenPGP Mail Encryption for Thunderbird is now available as package sequoia-octopus-librnp in the Artix Universe repo. According to <a moz-do-not-send="true" href="https://sequoia-pgp.org/blog/2021/04/08/202103-a-new-backend-for-thunderbird/">https://sequoia-pgp.org/blog/2021/04/08/202103-a-new-backend-for-thunderbird/</a> the Sequoia Octopus OpenPGP library is: Super powering end-to-end email encryption in Mozilla Thunderbird Warning and known limitations from the project itself: WARNING WARNING WARNING This is a young project. Use it with caution with your production Thunderbird profile and production keys, and make sure you have a backup (of at least pubring.gpg, secring.gpg, and openpgp.sqlite) and know how to recover. Known limitations <ul> <li>There may be dragons.</li> <li>When Thunderbird auto-updates, it overwrites the Octopus' version of librnp.so with its own version. This issue has been reported to Thunderbird.</li> <li>Thunderbird reads and caches the available certificates on startup. Thus if you add a new certificate to gpg, even though the Octopus will load it, Thunderbird will not notice it until either you manually reimport the keys using Thunderbird's OpenPGP Keyring Manager, File, Reload Key Cache, or you restart Thunderbird.</li> </ul> Note: Thunderbird only caches the list of keys and some meta-data, so it will normally take advantage of any updates inserted into the gpg keystore or fetched via Parcimonie. To install and activate: <ul> <li>Move file /usr/lib/thunderbird/librnp.so to another location</li> <li>Install package sequoia-octopus-librnp</li> <li>ln -s /usr/lib/sequoia-octopus-librnp/libsequoia_octopus_librnp.so /usr/lib/thunderbird/librnp.so</li> </ul> Note: Thunderbird updates replace /usr/lib/thunderbird/librnp.so requiring redo of the above steps To verify if the Sequoia Octopus OpenPGP library is being used, start Thunderbird from the command line; the output should show a line like: console.debug: "Successfully loaded OpenPGP library librnp.so version 1.0.1+sequoia-openpgp-1.1.0 from /usr/lib/thunderbird/librnp.so" For information on how to enable the universe repository check <a moz-do-not-send="true" href="https://wiki.artixlinux.org/Main/Repositories">https://wiki.artixlinux.org/Main/Repositories</a> -- <div class="moz-cite-prefix">On 4/18/21 10:54 PM, Javier wrote: </div> <blockquote type="cite" cite="mid:5c200d71-3519-c18d-7ec3-94e835dbf5a5@e.email">On 4/18/21 3:32 AM, artist wrote: <blockquote type="cite">Hi Javier, It's named thunderbird-artix as indeed when named thunderbird the order </blockquote> of included repo's in pacman.conf would determine which one would be installed, which might lead to confusion and issues. <blockquote type="cite"> One of the reasons to provide thunderbird-artix is that it's critical that any security issues in an email client are fixed asap, but Arch's updates of Thunderbird are almost always weeks behind. Thunderbird-artix is available within a day of a new Thunderbird release. Also, the api integrations for ie. location services for Google and Mozilla have been disabled, as well as crashreporter and updater, and jack audio is enabled. Thx for the hint about octopus, which seems interesting. Regards, artist </blockquote> BTW, there have been a couple of interesting additional posts regarding octupus on Arch [7][8], in case that's an option (apparently no need to patch TB, but I can't tell for sure). I'll be exploring those when having some time, but I wouldn't complain if integrated to Artix before I can take a look :) Thanks for clarifying about the diffs on thunderbird-artix. I like the location being disabled by default. Thanks again ! <fieldset class="mimeAttachmentHeader"></fieldset> </blockquote> </body> </html>