1767801 - A rejected OpenPGP key might be treated as undecided for additional email addresses

Status: RESOLVED FIXED

(MailNews Core :: Security: OpenPGP, defect)

Description

[Kai Engert [:KaiE:]]

The code that queries if an OpenPGP key is rejected for an email, may return incorrect information, depending on email address.

If it's for an email address that wasn't known at configuration time, the code may say "undecided".

We should change this code to always return the status "rejected" independent of the queried email address.

Comment 1

[Kai Engert [:KaiE:]]

Attachment: Bug 1767801 - Fix OpenPGP reject key handling. r=mkmelin

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/comm-central/rev/9757835fd850
Fix OpenPGP reject key handling. r=mkmelin DONTBUILD

Comment 3

[Kai Engert [:KaiE:]]

Comment on attachment 9274980 [details]
Bug 1767801 - Fix OpenPGP reject key handling. r=mkmelin

I'd like to have beta testing of this code.

Comment 4

[Wayne Mery (:wsmwk)]

Comment on attachment 9274980 [details]
Bug 1767801 - Fix OpenPGP reject key handling. r=mkmelin

[Triage Comment]
Approved for beta

Comment 5

[Rob Lemley [:rjl]]

Thunderbird 101.0b3:
https://hg.mozilla.org/releases/comm-beta/rev/28bcc806ad3e