May 13 2021 GM - Revision history

Iffadmin: /* Topic of Discussion: Feedback on Thunderbird */

2021-07-14T09:02:17Z

Topic of Discussion: Feedback on Thunderbird

← Older revision		Revision as of 09:02, 14 July 2021
Line 102:		Line 102:
	'''So the Thunderbird devs are definitely thinking hard about "opportunistic encryption" (autocrypt). Could you talk for a second about the benefits your community might get if this worked well, but also the risks they might face if it doesn't?'''		'''So the Thunderbird devs are definitely thinking hard about "opportunistic encryption" (autocrypt). Could you talk for a second about the benefits your community might get if this worked well, but also the risks they might face if it doesn't?'''

	* ~~Dont know the implementation, but a~~ lot of time folks want to send an encrypted file to folks, but the idea of having to then train people or ask them download also PGP/Thunderbird is such a headache. We are all so strapped with time. There is never enough time in the day, and you just want something that works and is painless.		* A lot of time folks want to send an encrypted file to folks, but the idea of having to then train people or ask them download also PGP/Thunderbird is such a headache. We are all so strapped with time. There is never enough time in the day, and you just want something that works and is painless.
	* ~~would~~ love to at least learn how to use Thunderbird & PGP. The user is truly in control, and not reliant on a private company. Would like to be able to offer it as an option to the groups we work with that don't have a budget and who we can't give grants to (i.e. the non-501(c)3s).		* Would love to at least learn how to use Thunderbird & PGP. The user is truly in control, and not reliant on a private company. Would like to be able to offer it as an option to the groups we work with that don't have a budget and who we can't give grants to (i.e. the non-501(c)3s).

	'''Is AutoCrypt more trouble than help, if the keyservers setup is still a pain?'''		'''Is AutoCrypt more trouble than help, if the keyservers setup is still a pain?'''

	* ~~autocrypt~~ would be OK with a little UX help		* Autocrypt would be OK with a little UX help

Iffadmin: /* Topic of Discussion: Feedback on Thunderbird */

2021-06-21T18:11:54Z

Topic of Discussion: Feedback on Thunderbird

← Older revision		Revision as of 18:11, 21 June 2021
Line 35:		Line 35:
	* So as some of you know, when Enigmail was the way to encrypt Thunderbird email, they had some great success bringing the Enigmail team to the IFF and converting them into champions for human rights workers, activists, and journalists who face high risks because of their work. Part of Gus goal is to do that again with the core Thunderbird team who are incorporating OpenPGP, so they stay focused on the needs of the people in our community.		* So as some of you know, when Enigmail was the way to encrypt Thunderbird email, they had some great success bringing the Enigmail team to the IFF and converting them into champions for human rights workers, activists, and journalists who face high risks because of their work. Part of Gus goal is to do that again with the core Thunderbird team who are incorporating OpenPGP, so they stay focused on the needs of the people in our community.
	* The Thunderbird developers have expressed that they sometimes struggle to figure out which bug reports to address. They get requests to fix problems that are specific to highly-skilled users who are doing unusual things with, for example, child keys, that the average user is not actually concerned about.		* The Thunderbird developers have expressed that they sometimes struggle to figure out which bug reports to address. They get requests to fix problems that are specific to highly-skilled users who are doing unusual things with, for example, child keys, that the average user is not actually concerned about.
	* So let's start by telling them who the ~~IFF~~ community is, and what we need!		* So let's start by telling them who the digital rights community is, and what we need!

	'''Where are the people you train to use encrypted mail? In a few words, what kind of work do they do that needs encryption?'''		'''Where are the people you train to use encrypted mail? In a few words, what kind of work do they do that needs encryption?'''

Iffadmin at 18:09, 21 June 2021

2021-06-21T18:09:59Z

@@ Line 24: / Line 24: @@
 '''Bio:'''
 Gus Andrews is Digital Protection Editor at Front Line Defenders, working on updating Security in a Box. Previously, she worked on secure tools usability on a Simply Secure fellowship and before that at the Open Internet Tools Project. She has helped organize the Hackers On Planet Earth conference and was the producer of The Media Show, a video series on digital and media literacy.
 === Community Updates ===

Iffadmin: /* Topic of Discussion: Feedback on Thunderbird */

2021-05-14T08:07:45Z

Topic of Discussion: Feedback on Thunderbird

Iffadmin at 08:06, 14 May 2021

2021-05-14T08:06:45Z

← Older revision		Revision as of 08:06, 14 May 2021
Line 17:		Line 17:
	* '''Topic:''' Feedback on Thunderbird		* '''Topic:''' Feedback on Thunderbird

	* '''Featured Guests:''' Gus Andrews		* '''Featured Guests:''' Gus Andrews (@gusgus on Mattermost)

	Do you or people you teach use Thunderbird? Are you frustrated with bugs and other difficulties with encrypting your mail? The Thunderbird developers want to hear from you.		Do you or people you teach use Thunderbird? Are you frustrated with bugs and other difficulties with encrypting your mail? The Thunderbird developers want to hear from you.

Iffadmin: /* Topic of Discussion */

2021-05-14T08:06:28Z

Topic of Discussion

← Older revision		Revision as of 08:06, 14 May 2021
Line 51:		Line 51:
	* Updates how the [https://5rightsfoundation.com/uploads/ExplanatoryNotes_UNCRCGC25.pdf UN Convention of the Rights of the Child applies online]		* Updates how the [https://5rightsfoundation.com/uploads/ExplanatoryNotes_UNCRCGC25.pdf UN Convention of the Rights of the Child applies online]

	== Topic of Discussion ==		== Topic of Discussion: Feedback on Thunderbird ==
	~~@gusgus~~

	* So as some of you know, when Enigmail was the way to encrypt Thunderbird email, they had some great success bringing the Enigmail team to the IFF and converting them into champions for human rights workers, activists, and journalists who face high risks because of their work. Part of Gus goal is to do that again with the core Thunderbird team who are incorporating OpenPGP, so they stay focused on the needs of the people in our community.		* So as some of you know, when Enigmail was the way to encrypt Thunderbird email, they had some great success bringing the Enigmail team to the IFF and converting them into champions for human rights workers, activists, and journalists who face high risks because of their work. Part of Gus goal is to do that again with the core Thunderbird team who are incorporating OpenPGP, so they stay focused on the needs of the people in our community.

Iffadmin at 08:06, 14 May 2021

2021-05-14T08:06:02Z

Show changes

Iffadmin: Created page with "NOTOC {|class="wikitable" style="float:right; margin-left: 10px; width: 20%; background-color:#A9D743;" | '''Glitter Meetups''' * Glitter Meetup|What are Glitter Meetu..."

2021-04-30T18:46:20Z

Created page with "__NOTOC__ {|class="wikitable" style="float:right; margin-left: 10px; width: 20%; background-color:#A9D743;" | '''Glitter Meetups''' * Glitter Meetup|What are Glitter Meetu..."

New page

__NOTOC__
{|class="wikitable" style="float:right; margin-left: 10px; width: 20%; background-color:#A9D743;"

| '''Glitter Meetups'''
* [[Glitter Meetup|What are Glitter Meetups]]
* [[Community Updates|Notes from Past Glitter Meetups]]
* [[Calendar of Events|Virtual Events Calendar]]
* [[IFF Mattermost|Join the IFF Mattermost]]
|}

Glitter Meetup is the weekly town hall of the Internet Freedom community at the IFF Square on the IFF Mattermost, at 9am EDT / 1pm UTC. Do you need an invite? Learn how to get one [[IFF Mattermost|here]].

* '''Date:''' Thursday, May 13th

* '''Time:''' 9am EST / 1pm UTC

* '''Topic:''' Feedback on Thunderbird

* '''Featured Guests:''' Gus Andrews

Do you or people you teach use Thunderbird? Are you frustrated with bugs and other difficulties with encrypting your mail? The Thunderbird developers want to hear from you.
Join us for a group chat event to gather community feedback, and explore other ways the community can shape a more usable Thunderbird. We want to hear from all Thunderbird users, whether you use the old Enigmail GPG setup or the new built-in encryption!

'''Bio:'''
Gus Andrews is Digital Protection Editor at Front Line Defenders, working on updating Security in a Box. Previously, she worked on secure tools usability on a Simply Secure fellowship and before that at the Open Internet Tools Project. She has helped organize the Hackers On Planet Earth conference and was the producer of The Media Show, a video series on digital and media literacy.

'''Notes'''

----

Notes of this event will be posted here

← Older revision		Revision as of 08:07, 14 May 2021
Line 57:		Line 57:
	* So let's start by telling them who the IFF community is, and what we need!		* So let's start by telling them who the IFF community is, and what we need!

	Where are the people you train to use encrypted mail? In a few words, what kind of work do they do that needs encryption?		'''Where are the people you train to use encrypted mail? In a few words, what kind of work do they do that needs encryption?'''

	* One participant said that Investigative journalism focusing on exposing corruption and organized crime and they're scattered across the globe. Except on the north and south pole.		* One participant said that Investigative journalism focusing on exposing corruption and organized crime and they're scattered across the globe. Except on the north and south pole.
Line 65:		Line 65:
	* Technologists and encryption evangelists that may not face serious threats, but default all comms to encrypted; and human rights defenders, activists journalists with or without a lot of technical skills who are working in high risk environments and need to keep comms as secure as possible for security reasons.		* Technologists and encryption evangelists that may not face serious threats, but default all comms to encrypted; and human rights defenders, activists journalists with or without a lot of technical skills who are working in high risk environments and need to keep comms as secure as possible for security reasons.

	Can we say a little more about types of activism? About the risks they face if their work is found out?		'''Can we say a little more about types of activism? About the risks they face if their work is found out?'''

	* Most folks that are working in digital rights are either folks experiencing the most acute forms of surveillance and direct attacks because of their work, or are their allies.		* Most folks that are working in digital rights are either folks experiencing the most acute forms of surveillance and direct attacks because of their work, or are their allies.

			'''What do your people in your community need encrypted email for? Do you have any success stories?'''
	What do your people in your community need encrypted email for? Do you have any success stories?

	* When authorities were raiding a newsroom in eastern europe to find out who their source was, they couldn't figure it out as the emails were encrypted. Also, sometimes the forensics firms are not very good in e-discovery cases and they don't spot the PGP emails.		* When authorities were raiding a newsroom in eastern europe to find out who their source was, they couldn't figure it out as the emails were encrypted. Also, sometimes the forensics firms are not very good in e-discovery cases and they don't spot the PGP emails.
Line 77:		Line 76:
	* Individuals that we work with will sometimes prefer encrypted comms even to discuss localization of projects/technologies that might be considered subversive by local government or could even be considered illegal.		* Individuals that we work with will sometimes prefer encrypted comms even to discuss localization of projects/technologies that might be considered subversive by local government or could even be considered illegal.

	What devices/operating systems do people in your community usually use? What's their level of comfort with technology?		'''What devices/operating systems do people in your community usually use? What's their level of comfort with technology?'''

	* Lots of mobile phones recently, but it's very diverse depending on their demographics.		* Lots of mobile phones recently, but it's very diverse depending on their demographics.
Line 85:		Line 84:
	* In our team we have different levels of technology use. some people runs their own email server. Our users may be the first time they use an email client, as opposed to webmail. We have lots of users with connectivity issues, they like email clients because of this.		* In our team we have different levels of technology use. some people runs their own email server. Our users may be the first time they use an email client, as opposed to webmail. We have lots of users with connectivity issues, they like email clients because of this.

	Do you have any stories of people abandoning Thunderbird? What are the risks when they do?		'''Do you have any stories of people abandoning Thunderbird? What are the risks when they do?'''

	* We see a push for web based email for various reasons, especially when people are traveling. (ie,they have a second device and means they don't have emails downloaded on their computer). Second, when Enigmail stopped, that caused a lot of well, maybe time to experiment with Mailvelope etc.		* We see a push for web based email for various reasons, especially when people are traveling. (ie,they have a second device and means they don't have emails downloaded on their computer). Second, when Enigmail stopped, that caused a lot of well, maybe time to experiment with Mailvelope etc.
Line 91:		Line 90:
	* We started looking around other clients... we looked at mailvelope and apple mail + gpgtools but after thunderbird fixed some issues, it wasn't as bad as it was. However, I still really wish mailvelope's seat buying would make a lot more sense but it doesn't and it isnt transparant. Also, exposing trusting of keys before sending emails and not being able to TOFU keys because it gets fetched from keys.openpgp.org seems a bit.. too complicated for most users. if you want mailvelope to work properly with other PGP implementations and be able to send encrypted attachments (or something like that) you need to buy a license. But you can't tie a license to a user! So you buy 10 licenses and the first 10 who use mailvelope in a new month get the license attached to them. It's very confusing UX.		* We started looking around other clients... we looked at mailvelope and apple mail + gpgtools but after thunderbird fixed some issues, it wasn't as bad as it was. However, I still really wish mailvelope's seat buying would make a lot more sense but it doesn't and it isnt transparant. Also, exposing trusting of keys before sending emails and not being able to TOFU keys because it gets fetched from keys.openpgp.org seems a bit.. too complicated for most users. if you want mailvelope to work properly with other PGP implementations and be able to send encrypted attachments (or something like that) you need to buy a license. But you can't tie a license to a user! So you buy 10 licenses and the first 10 who use mailvelope in a new month get the license attached to them. It's very confusing UX.

	Can you tell me more about which parts of the new encryption setup were hurting your efficiency?		'''Can you tell me more about which parts of the new encryption setup were hurting your efficiency?'''

	* it was merely because of the mobility issues, as the orgs had now to work more in the field hence a change of device from laptops to maybe mobile phones/tablets which then made it hectic to receive and send encrypted emails.		* it was merely because of the mobility issues, as the orgs had now to work more in the field hence a change of device from laptops to maybe mobile phones/tablets which then made it hectic to receive and send encrypted emails.
Line 97:		Line 96:
	* The email filters have stopped working because of AUTOCRYPT, and this has affected communication with other Thunderbird users as well. When they try to send mail for a person and they dont have the key, they need to go to the main interface to import the key on Thunderbird's keyring. It would be much easier/quicker if you could import it from the menu that tells you that 'it does not have the key'		* The email filters have stopped working because of AUTOCRYPT, and this has affected communication with other Thunderbird users as well. When they try to send mail for a person and they dont have the key, they need to go to the main interface to import the key on Thunderbird's keyring. It would be much easier/quicker if you could import it from the menu that tells you that 'it does not have the key'

	When it comes to encrypted email, what do your trainees struggle with most?		'''When it comes to encrypted email, what do your trainees struggle with most?'''

	* A participant said that they miss the 'per recipient rules' feature horribly. They try to encrypt as much email as possible, so they have encryption on all keys settings. But some emails cannot be sent encrypted. For example, email to mailing lists, or people that do not have encryption keys. They used to be able to select an email address and add a rule, for example for mailing lists they will select 'send unencrypted'. Now they cannot do that, and they get Thunderbird telling them each time they send email to a mailing list that it has no key to encrypt to it. Sometimes they send several emails to the same mailing list, each time they need to unselect encryption on the message composition window.		* A participant said that they miss the 'per recipient rules' feature horribly. They try to encrypt as much email as possible, so they have encryption on all keys settings. But some emails cannot be sent encrypted. For example, email to mailing lists, or people that do not have encryption keys. They used to be able to select an email address and add a rule, for example for mailing lists they will select 'send unencrypted'. Now they cannot do that, and they get Thunderbird telling them each time they send email to a mailing list that it has no key to encrypt to it. Sometimes they send several emails to the same mailing list, each time they need to unselect encryption on the message composition window.
	* The removal of the password for both encrypting and decrypting is literally saying that we trust Thunderbird to do it for you and remove the user power		* The removal of the password for both encrypting and decrypting is literally saying that we trust Thunderbird to do it for you and remove the user power

	Are there any bugs or parts of the Thunderbird encryption interface you notice that are hard to use?		'''Are there any bugs or parts of the Thunderbird encryption interface you notice that are hard to use?'''

	* A lot of our users are struggling with the by-default encrypting of subjects, we still can't seem to turn it off under Linux, maybe this is solved for Mac and Windows? It's on the radar of the team of thunderbird though.		* A lot of our users are struggling with the by-default encrypting of subjects, we still can't seem to turn it off under Linux, maybe this is solved for Mac and Windows? It's on the radar of the team of thunderbird though.
Line 116:		Line 115:
	* Looking the feeling of being in control of their encryption and decryption of emails. Never underestimate the power of entering that password to decrypt an email, its powerful for some user to FEEL like their in control and on top of protecting their sensitive communications		* Looking the feeling of being in control of their encryption and decryption of emails. Never underestimate the power of entering that password to decrypt an email, its powerful for some user to FEEL like their in control and on top of protecting their sensitive communications

	Newer folks: talk us through your decisions to use encryption tools. Did you consider Thunderbird, but found it was not a good tool for you and your community?		'''Newer folks: talk us through your decisions to use encryption tools. Did you consider Thunderbird, but found it was not a good tool for you and your community?'''

	* Most folks that we work with are using Signal, and if they need to use encrypted email, they're using Protonmail. We are still working on helping folks have an understanding of what E2EE means and what content needs to be E2EE. Our risk profile is not as high as many others in the chat since most groups we work with are 501(c)3s (their identities & work is known, legal, and required to be documented by the government).		* Most folks that we work with are using Signal, and if they need to use encrypted email, they're using Protonmail. We are still working on helping folks have an understanding of what E2EE means and what content needs to be E2EE. Our risk profile is not as high as many others in the chat since most groups we work with are 501(c)3s (their identities & work is known, legal, and required to be documented by the government).
	* The new folks got into Thunderbird to easily use my email service. They really like how they can manage all email accounts but have been doubting to continue. They were advised it was not too safe as it downloads the emails to your computer.		* The new folks got into Thunderbird to easily use my email service. They really like how they can manage all email accounts but have been doubting to continue. They were advised it was not too safe as it downloads the emails to your computer.

	So the Thunderbird devs are definitely thinking hard about "opportunistic encryption" (autocrypt). Could you talk for a second about the benefits your community might get if this worked well, but also the risks they might face if it doesn't?		'''So the Thunderbird devs are definitely thinking hard about "opportunistic encryption" (autocrypt). Could you talk for a second about the benefits your community might get if this worked well, but also the risks they might face if it doesn't?'''

	* Dont know the implementation, but a lot of time folks want to send an encrypted file to folks, but the idea of having to then train people or ask them download also PGP/Thunderbird is such a headache. We are all so strapped with time. There is never enough time in the day, and you just want something that works and is painless.		* Dont know the implementation, but a lot of time folks want to send an encrypted file to folks, but the idea of having to then train people or ask them download also PGP/Thunderbird is such a headache. We are all so strapped with time. There is never enough time in the day, and you just want something that works and is painless.
	* would love to at least learn how to use Thunderbird & PGP. The user is truly in control, and not reliant on a private company. Would like to be able to offer it as an option to the groups we work with that don't have a budget and who we can't give grants to (i.e. the non-501(c)3s).		* would love to at least learn how to use Thunderbird & PGP. The user is truly in control, and not reliant on a private company. Would like to be able to offer it as an option to the groups we work with that don't have a budget and who we can't give grants to (i.e. the non-501(c)3s).

	Is AutoCrypt more trouble than help, if the keyservers setup is still a pain?		'''Is AutoCrypt more trouble than help, if the keyservers setup is still a pain?'''

	* autocrypt would be OK with a little UX help		* autocrypt would be OK with a little UX help

May 13 2021 GM - Revision history

Iffadmin: /* Topic of Discussion: Feedback on Thunderbird */

Iffadmin: /* Topic of Discussion: Feedback on Thunderbird */

Iffadmin at 18:09, 21 June 2021

Iffadmin: /* Topic of Discussion: Feedback on Thunderbird */

Iffadmin at 08:06, 14 May 2021

Iffadmin: /* Topic of Discussion */

Iffadmin at 08:06, 14 May 2021

Iffadmin: Created page with "__NOTOC__ {|class="wikitable" style="float:right; margin-left: 10px; width: 20%; background-color:#A9D743;" | '''Glitter Meetups''' * Glitter Meetup|What are Glitter Meetu..."

Iffadmin: Created page with "NOTOC {|class="wikitable" style="float:right; margin-left: 10px; width: 20%; background-color:#A9D743;" | '''Glitter Meetups''' * Glitter Meetup|What are Glitter Meetu..."