1155367 - S/MIME Signature from BB10 Phones Fails To Validate (base64 violation)

Status: UNCONFIRMED

(Thunderbird :: Security, defect)

Description

[Karl]

Attachment: INBOX-1301

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.118 Safari/537.36

Steps to reproduce:

Send a digitally signed (S/MIME) email from a BlackBerry 10 phone to a Thunderbird-managed account.


Actual results:

Thunderbird reports the signature is invalid.


Expected results:

The signature should (arguably) verify; Outlook correctly verifies the signature.

Alternatively, if it is going to reject this signature as malformed (see below) it should not claim the message was modified but that the MIME encoding standard was violated.

Note that the signature that BB10 generates appears to not break long lines but rather sends it as one physical line.  This may be the cause of the problem but Outlook is capable of reading these messages without problem.

Also, if you both sign AND encrypt the transmission it is properly decoded by Thunderbird.

Example of a message sent via BlackBerry's client that fails to validate is attached -- note that it is violating the MIME encoding standards in that the signature does not have line breaks in the base64 section.