We are pleased to announce the sixth beta release of TorBirdy and the first in the 0.2 series: TorBirdy 0.2.0. All users are encouraged to upgrade as this release fixes numerous security and privacy issues. Notable changes include fixing local timestamp disclosure in the date and the message-ID headers, as detailed in tickets #6314 and #6315. The patch for sanitizing the date header is shipped with TorBirdy. The patch for the message-ID header was submitted upstream to Mozilla and merged in Thunderbird 45, and it is therefore recommended that you upgrade to Thunderbird 45 if possible. There are currently no known leaks in TorBirdy but please note that we are still in beta, so the usual caveats apply. If you are using TorBirdy for the first time, visit the wiki to get started. Other changes in this release include: 0.2.0, 27 Jun 2016 * Bug #6314: Prevent local timestamp disclosure via Date header * Bug #6315: Prevent local timestamp disclosure via Message-ID header * Bug #13721: Fix usage of wrong locale * Bug #17426: Allow configuration of default email protocol * Bug #15459: Add support for deterministic XPI generation * Bug #11387, #13006: Fix non-standard EHLO argument * Bug #17118: Allow manual account configuration for Gmail with OAuth2 * Bug #19031: Add and audit support for RSS reader * Bug #7847: Audit and update support for NNTP * Bug #10683: Update Thunderbird UI to reflect TorBirdy's state * Bug #19330: Set secure defaults for outgoing mail servers * Removed compatibility for older versions of Thunderbird and added support for Thunderbird 37+ * Added support for automatic configuration of Riseup email accounts * Updated various privacy and security settings (see commit 2bdeffbb for a list of the changes) * Update translations for current languages Many thanks to Arthur Edelstein and the Tails Developers for this release! We offer two ways of installing TorBirdy -- either by visiting our website (GPG signature; signed by 0xB01C8B006DA77FAA) or by visiting the Mozilla Add-ons page for TorBirdy. Please note that there may be a delay -- which can range from a few hours to days -- before the extension is reviewed by Mozilla and updated on the Add-ons page. (Packages for Debian GNU/Linux will be created and uploaded shortly.) Continue reading...
