Closed Bug 1442509 Opened 6 years ago Closed 4 years ago

Encryption (S/MIME) does not prevent sending if all recipients do not have a certificate and account set to "required"

Categories

(Thunderbird :: Account Manager, defect)

defect
Not set
critical

Tracking

(Not tracked)

RESOLVED WORKSFORME

People

(Reporter: drego85, Unassigned)

Details

(Keywords: privacy)

Attachments

(1 file)

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:58.0) Gecko/20100101 Firefox/58.0
Build ID: 20180206200532

Steps to reproduce:

In the settings of an eMail account I chose not to send a message if all recipients do not have an S / MIME certificate (see attachment).

Unfortunately, this choice is ignored, in fact if I write an email to a user who does not have a certificate is sent without showing me any warning message. If I send an e-mail to a user without a certificate, the e-mail is sent without showing me any warning message.


Actual results:

You can send eMails convinced that the encryption works, but it will actually be sent in clear text.
For clarity, the English version wording is
 Default encryption setting when sending messages:
  * Never
  * Requuire (can't send message unless all recipients have certificates)
Severity: normal → major
Component: Preferences → Account Manager
Keywords: privacy
Summary: Encryption (S/MIME) does not prevent sending if all recipients do not have a certificate. → Encryption (S/MIME) does not prevent sending if all recipients do not have a certificate and account set to "required"
Severity: major → critical

Reporter, do you have the Enigmail Add-on installed?

Flags: needinfo?(drego85)

To clarify the intended behavior.

The preference is a "default" value for new messages. If you enable the preference "default = require", and compose a new message, then the message has encryption enabled.

I tried to reproduce your bug (without Enigmail installed). I set the pref. I compose a new message. I enter a recipient for whom I don't have an S/MIME cert. I send the message. I get an error message, preventing me to send.

Still in the composer window, I can use the menu to disable encryption for this message. Then I can send the message. This works, and is intended behavior.

With the Enigmail Add-on installed, and the default set to OpenPGP messages, the S/MIME pref is ignored. Enigmail seems to override the default configuration.

(In reply to Kai Engert (:kaie:) from comment #3)

I tried to reproduce your bug (without Enigmail installed). I set the pref. I compose a new message. I enter a recipient for whom I don't have an S/MIME cert. I send the message. I get an error message, preventing me to send.

This means, I couldn't reproduce the reported bug.

Status: UNCONFIRMED → RESOLVED
Closed: 4 years ago
Flags: needinfo?(drego85)
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: