#MOZILLA THUNDERBIRD MAIL CLIENTS UPDATE#
#MOZILLA THUNDERBIRD MAIL CLIENTS SOFTWARE#
#MOZILLA THUNDERBIRD MAIL CLIENTS CODE#

Add in the intuitive user interface, multiple-calendar features, a solid address book function, and you have an Email client that is hard to beat. You can also synchronize your profile to your laptop so that all of your Email can travel with you into the field, even while disconnected.

All local messages and attachments are stored in a local profile folder, which can be easily moved to a NAS, allowing you to access the Email profile from any machine on the network. With IMAP support, you can enable access to a shared Email queue, allowing multiple employees to see and respond to the inbound messages - ideal for a customer-facing 'Sales' or 'Support' queue - and every user can see and search on every reply. With support for POP3 mailboxes, you can pull your data off the Email server and retain/manage it all locally, which is great when you have to travel and may not always have access to the Email server, or for when you want the extra security of getting the data off of the Internet quickly. The Thunderbird Email client provides a fast and easy way to corral multiple Email addresses. I can't imagine trying to use anything else! Thunderbird provides small organizations (like ours) a free Email client that is full-featured, fast, and efficient. This is not something that can be relegated to a Web UI or just any old client interface.

#MOZILLA THUNDERBIRD MAIL CLIENTS UPDATE#

To avoid having their OpenPGP keys exposed, Thunderbird users should update their email client to version 78.10.2 (opens in new tab) which protects against the bug.With free software, you often get MUCH MORE than what you pay for!Įmail lies at the heart of our business - customer support and customer contact is critical to our survival. However, after the rewrite, the keys were protected using the client's automatic OpenPGP password before being copied to to the permanent storage area.Įngert and the reviewer assumed that the protection to the secret key would be preserved when copying it to the other storage area but this turned out to not be the case which led to users' OpenPGP keys being stored in plain text.

#MOZILLA THUNDERBIRD MAIL CLIENTS CODE#

Before the code rewrite, the email client would copy a key to the permanent storage area and then protect it using Thunderbird's automatic OpenPGP password. If entered correctly, the symmetric key will be unlocked and remembered for the remainder of the session, and any protected secrets can be unlocked as needed.”Įngert also explained that Thunderbird's key-handling processes had been rewritten in order to maintain their security and this is when the vulnerability was introduced. “As soon as the user has configured a master password, the first time any of the stored secrets is required by Firefox/Thunderbird, the user will be prompted to enter it.

#MOZILLA THUNDERBIRD MAIL CLIENTS SOFTWARE#

In a new report (opens in new tab) from The Register, the news outlet spoke with security software developer Kai Engert at the Mozilla Thunderbird Project who explained how master passwords are used by Firefox (opens in new tab) and Thunderbird to access stored secrets, saying: Version 78.10.2 will restore the protection mechanism for newly imported keys, and will automatically protect keys that had been imported using affected Thunderbird versions.” OpenPGP keys

The master password protection was inactive for those keys. “OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1 were stored unencrypted on the user's local disk.

Mozilla thunderbird mail clients