Encryption - email account with no key can access encrypted email?
I've set up 3 email accounts on Thunderbird on a single computer.
I've set up 2 of them with each other's keys to send and receive encrypted emails.
However, the third email account has no key at all but can still read encrypted emails by pressing the "Repair Message" button.
Thunderbird won't let you encrypt a message unless at least one of the recipients of an email has a key. However, if another recipient doesn't have a key, that recipient will still receive the encrypted message but can open it as explained above.
Have I done something wrong? I thought the receiver without the key should not be able to open the encrypted email. If they can open it, does that mean anyone at any hop along the path of the email can open it?
TIA John
All Replies (10)
Is this using s/mime or PGP and enigmail?
Hi Matt,
I'm using PGP and enigmail.
Well I assume it's using PGP and Enigmail. I downloaded the PGP package and added the Enigmail extension to Thunderbird.
I think the problem was that I was trying to test it all on the same machine. When I tested an email to a different host they were not able to decrypt the message.
Thanks.
one instance of Thunderbird with three email accounts will certainly have access to the encryption keys for all accounts. They are not doled out per account.
Yes, Thanks Matt!
Matt said
one instance of Thunderbird with three email accounts will certainly have access to the encryption keys for all accounts. They are not doled out per account.
If this is true, it is a really, really faulty design.
r_avital said
Matt saidone instance of Thunderbird with three email accounts will certainly have access to the encryption keys for all accounts. They are not doled out per account.If this is true, it is a really, really faulty design.
It is true and personally I see no fault in the design. You might, but really it is not relevant in the context of this question what you think is faulty.
And here I was under the impression, apparently mistaken, that as long as the language is kept clean and courteous, criticism, including of the design of TB, was allowed and legitimate. Respectfully, what is relevant to you is not relevant to me. Whatever, me wrong you right have a nice day.
Locking this spam generating topic.