Why only GnuPG 1.4.x for Thunderbird Portable?
In 2006 GnuPG 2.0.x was released as a stable version (source: http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000239.html) - nearly 8 years ago.
The Enigmail Project recommends GnuPG version 2.x in its documentation: https://www.enigmail.net/documentation/
And - furthermore - it is possible to create a portable Gpg4win version with GnuPG 2.0.x since version 2.2.0 (released 2013-08-20).
Is there any plan to release "GPG for Thunderbird Portable" with GnuPG 2.x in near future?
Or can we use a portable Gpg4win with Thunderbird Portable without problems?
Thanks in advance!
the question in this context is usually: what for?
There is no increase in functionality or security or what ever when used with e-mail.
On a local install gpg2 has some more integration into operating system, but also those are not always needed (or wanted).
Even on my Linux machines I do remove the gpg2 and replace it with gpg1.4 as I want have more control over it.
Gpg2 is not better, faster or more secure then gpg1.4, it makes same job, just in other way.
Otto Sykora
Basel, Switzerland
In my opinion, the question is: why not?
The Enigmail Project - see link above - says:
We want to encrypt e-mails in Thunderbird with Enigmail and GnuPG - why don't we follow the recommendation of this project/extension?
You picked one of the answers incidently:
...it provides gpg-agent...
and this is one of the things which are for portable use not needed and probably not wanted, as this is a service which needs to run on the host.
So if we do not want to install any kind of services on the host , why do we need this?
And note: we do not want have the gpg installed!
We want carry it on our usb sticks.
If you want have gpg installed, install gpg2 and install TB locally on your PC. This will not give any advantage first, other then storing your pass phrase with the help of the agent.
However there might be then other programs able to use the gpg2 also if this is needed.
This is also one of the reasons I regularly do uninstall the gpg2 from my linux machines and install the gpg1.4 as I want have myself a control over my pass-phrase and do not need any system component to handle and store it for me.
There few other reasons thought, but one of them is the agent.
This is one of the features integrating the gpg to the host system and this is definitely not wanted in portable use.
The result in encryption and decryption is exactly the same, there is no advantage otherwise.
The gpg2 has simply more ways to hook up to the operating system and so provide the crypto function systemwide.
If this is not wanted, the gpg1.4 is the better choice.
Otto Sykora
Basel, Switzerland
The install version was (if I recall correctly), previously featured here: https://portableapps.com/apps/internet/thunderbird_portable
Now I had to dig deeper to find it: https://portableapps.com/support/thunderbird_portable#encryption
Thanks
(Note to self)
I just recently discovered the new lightweight standalone Opera Mail client, portable by design, I dunno if you can legally magke a PAF version of it.
GPG is linked right on the TBP homepage via a direct link to that Encryption section within the support section, where it's always been. I'd wager only 0.1% or fewer people need it, which is why it doesn't need to be more prominent.
Opera Mail is already in the Portable App Directory but is unlikely to see further development by the publisher, unlike Thunderbird.
Sometimes, the impossible can become possible, if you're awesome!
And don't even have Thunderbird Portable downloaded.
Will it get auto-updated via the platform if ever needed, with a dummy Thunderbird downloaded or without?
This is a plugin for TBP only. Plugins are not currently auto-updated by the platform.
We'll likely do a CommonFiles plugin of GPG at some point in the future which will be auto-updates just as Java and Ghostscript are.
We don't support using the GPG plugin shipped for TBP for anything other than using it with Enigmail.
Sometimes, the impossible can become possible, if you're awesome!
Nonetheless: Verifying Linux ISO-s, that is.