Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was closed and archived. Please ask a new question if you need help.

Encryption - email account with no key can access encrypted email?

  • 10 replies
  • 1 has this problem
  • 1 view
  • Last reply by Matt

more options

I've set up 3 email accounts on Thunderbird on a single computer.

I've set up 2 of them with each other's keys to send and receive encrypted emails.

However, the third email account has no key at all but can still read encrypted emails by pressing the "Repair Message" button.

Thunderbird won't let you encrypt a message unless at least one of the recipients of an email has a key. However, if another recipient doesn't have a key, that recipient will still receive the encrypted message but can open it as explained above.

Have I done something wrong? I thought the receiver without the key should not be able to open the encrypted email. If they can open it, does that mean anyone at any hop along the path of the email can open it?

TIA John

I've set up 3 email accounts on Thunderbird on a single computer. I've set up 2 of them with each other's keys to send and receive encrypted emails. However, the third email account has no key at all but can still read encrypted emails by pressing the "Repair Message" button. Thunderbird won't let you encrypt a message unless at least one of the recipients of an email has a key. However, if another recipient doesn't have a key, that recipient will still receive the encrypted message but can open it as explained above. Have I done something wrong? I thought the receiver without the key should not be able to open the encrypted email. If they can open it, does that mean anyone at any hop along the path of the email can open it? TIA John

All Replies (10)

more options

Is this using s/mime or PGP and enigmail?

more options

Hi Matt,

I'm using PGP and enigmail.

more options

Well I assume it's using PGP and Enigmail. I downloaded the PGP package and added the Enigmail extension to Thunderbird.

more options

I think the problem was that I was trying to test it all on the same machine. When I tested an email to a different host they were not able to decrypt the message.

Thanks.

more options

one instance of Thunderbird with three email accounts will certainly have access to the encryption keys for all accounts. They are not doled out per account.

more options

Yes, Thanks Matt!

more options

Matt said

one instance of Thunderbird with three email accounts will certainly have access to the encryption keys for all accounts. They are not doled out per account.

If this is true, it is a really, really faulty design.

more options

r_avital said

Matt said
one instance of Thunderbird with three email accounts will certainly have access to the encryption keys for all accounts. They are not doled out per account.

If this is true, it is a really, really faulty design.

It is true and personally I see no fault in the design. You might, but really it is not relevant in the context of this question what you think is faulty.

more options

And here I was under the impression, apparently mistaken, that as long as the language is kept clean and courteous, criticism, including of the design of TB, was allowed and legitimate. Respectfully, what is relevant to you is not relevant to me. Whatever, me wrong you right have a nice day.

more options

Locking this spam generating topic.