1256321 - Bugzilla secure email should check certificate/key expiration and revocation

Status: RESOLVED FIXED

(bugzilla.mozilla.org :: Extensions, enhancement)

Description

[Bob Clary [:bc] (inactive)]

Bugzilla secure email should check if an S/MIME cert has expired or has been revoked or if the GPG/PGP key have been revoked and refuse to send encrypted emails.

Comment 1

[Gervase Markham [:gerv]]

We could check if an S/MIME cert had expired. But checking revocation would mean an extra outgoing HTTP request per email sent, which I strongly suspect will be unacceptable to the BMO admins, and AIUI there is no central repository of revocation information for GPG/PGP, so there's nowhere to check.

Gerv

Comment 2

[Dylan Hardison [:dylan] (he/him)]

The GnuPG part of this has been fixed; S/MIME expiration is still not considered.