30777 - overly alarming message when viewing signed mail

Status: VERIFIED DUPLICATE of bug 34570

(MailNews Core :: MIME, defect, P3)

Description

[John G. Myers]

When mozilla displays a message that is signed using S/MIME, it displays in 
a double-bordered box the message "This message is possibly SIGNED.  Mozilla 
Mail does not support signed mail."

This message is overly alarming.  It seems to indicate that there is something 
wrong, yet fails to give the user any hint as to what the user should do.

The correct thing for the user to do in this situation is ignore the fact that 
the message was signed.  Mozilla is, however, able to do that for the user 
without the user's help.  Mozilla should completely ignore signatures that it 
does not support, treating it as if there were no signature to begin with.

Comment 1

[rhp (gone)]

Well, I can live with changing a message, but I don't think we should remove 
the box alltogether. In 4.x we display a problem icon that says we can't 
validate the signature. Perhaps just a signature or something like that would 
be better. 

I don't think we should remove the message all together.

- rhp

Comment 2

[Phil Peterson]

When/if we get secure mail in mozilla, we should integrate this failure with the
sign/encrypt UI which has yet to be designed. For the moment, I think think what
we have is fine. Strictly, it's more necessary for encrypted messages where we
can't show any body text.

Comment 3

[rhp (gone)]

Uhhh...so what should I do with this bug?

- rhp

Comment 4

[Phil Peterson]

My vote would be to sit on it until Seamonkey UI freeze or until we get secure
mail, whichever comes first. I'd want to wordsmith the error message before we
ship, but I know you have bigger fish to fry right now.

Comment 5

[John G. Myers]

Why don't you think the message should be removed?  What purpose does the message 
serve?

Comment 6

[John G. Myers]

This bug is about signatures, not encrypted messages.  An unrecognized encrypted 
message needs to be indicated because there is content that the user cannot read.  
An unrecognized signature has no useful information content.
 

Comment 7

[rhp (gone)]

*** This bug has been marked as a duplicate of 34570 ***

Comment 8

[Blake Ross]

vrfy, should be fixed by now