Closed Bug 1636778 Opened 4 years ago Closed 4 years ago

Remove all third party CA install code from legacy Enigmail code

Categories

(MailNews Core :: Security: OpenPGP, task)

Tracking

(thunderbird77 fixed)

RESOLVED FIXED
Thunderbird 78.0
Tracking Status
thunderbird77 --- fixed

People

(Reporter: KaiE, Assigned: KaiE)

References

(Blocks 1 open bug)

Details

Attachments

(1 file)

I saw that the imported Enigmail code may install additional CAs as trusted.

We shouldn't do that and remove that code.

Summary: Remove all cert party CA install code from legacy Enigmail code → Remove all third party CA install code from legacy Enigmail code

as a ride along, I want to also remove keyserver access using gnupg

Pushed by kaie@kuix.de:
https://hg.mozilla.org/comm-central/rev/4a66b9f9dec4
Remove SKS CA install code, remove GnuPG keyserver access code. r=PatrickBrunschwig

Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
Target Milestone: --- → Thunderbird 78.0

Comment on attachment 9147121 [details]
Bug 1636778 - Remove SKS CA install code, remove GnuPG keyserver access code. r=PatrickBrunschwig

Request to uplift OpenPGP improvements to Beta 77

Bug 5 of 9

https://hg.mozilla.org/comm-central/rev/4a66b9f9dec4

[Approval Request Comment]
Testing completed (on c-c, etc.): yes
Risk to taking this patch (and alternatives if risky): only affects openpgp

Attachment #9147121 - Flags: approval-comm-beta?

Comment on attachment 9147121 [details]
Bug 1636778 - Remove SKS CA install code, remove GnuPG keyserver access code. r=PatrickBrunschwig

Approved for beta

Attachment #9147121 - Flags: approval-comm-beta? → approval-comm-beta+
You need to log in before you can comment on or make changes to this bug.