Am 07.09.20 um 23:32 schrieb Kai Engert: > On 07.09.20 22:18, Mark wrote: >> Had those same concerns as there are a multitude of mozilla master >> password decrypters out there. > > Please see these recent messages from this list: > > https://admin.hostpoint.ch/pipermail/enigmail-users_enigmail.net/2020-August/005707.html > > https://admin.hostpoint.ch/pipermail/enigmail-users_enigmail.net/2020-August/005716.html
So the master password security was improved. That's cool. Still, in my opinion, brute force isn't the main threat. Eventually you'll enter your master password anyway. After that there's no other layer of security. All your passwords, certificates and PGP-keys lie about in memory. So I'm concerned about memory leaks and code injections. _______________________________________________ enigmail-users mailing list enigmail-users@enigmail.net To unsubscribe or make changes to your subscription click here: https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net