Improving Enigmail

1. STRIKE
PGP & Enigmail

2. What’s STRIKE
DFI - Dissent, Privacy & Information access in
an unequal digital world
STRIKE

4. Current situation of STRIKE
● Privacy
○ Communication
■ Emails < now here we are
■ Chats
■ Phone Calls
■ Video Conferences

5. Common threat to security & privacy
Last 100 meters crash!

6. What’s encryption

8. Cryptography
● Symmetric (TripleDES)
○ one key for both
Encrypt/Decrypt
● Asymmetric (RSA)
○ two keys, one to encrypt,
another to decrypt

9. PGP Basics
https://www.powtoon.
com/show/gmd6oEQEY8q/pgp-basics/
defined in rfc4880

10. Gnu Privacy Guard
GnuPG is a implementation of PGP protocol
● GPGTools for Mac OS X and Apple Mail
● GPG4Win for Windows and Outlook
● File encryption with GPG tools
● Enigmail for Thunderbird
—— what this guys are working on

11. Enigmail
Thunderbird based Email GPG privacy tool

12. Enigmail
● Basic Functions
○ Encrypt/Decrypt
○ Sign/Trust
○ Key manager

14. After encryption

15. Enigmail
● Tech Stack
○ thunderbird XPCOM & Gecko
○ interaction with GPG agent

16. What’s STRIKE up to right now
● Bring TW things to Enigmail
○ Test driven development (xpcshell unit tests)
○ Continuous integration (Travis-CI)
○ Code description of Provisioning (Vagrant/Docker)
● Merged to master
○ Tests for XPCOM GPG binding
○ Error handling
● Enhancement on Usability and XD

17. If you are interested
Follow this feed for news about STRIKE:
https://my.thoughtworks.com/groups/strike-public
Fork this repo to contribute to Enigmail:
http://sourceforge.net/p/enigmail
By Patrick Brunschwig