Ignore attached OpenPGP key file if that key is used to verify the mail
Categories
(MailNews Core :: Security: OpenPGP, enhancement)
Tracking
(Not tracked)
People
(Reporter: u617804, Unassigned)
Details
Attachments
(1 file)
|
162.68 KB,
image/jpeg
|
Details |
verified mail which signers key is also attached
Steps to reproduce:
TB 102.4.1
Receive Kai's mail to tb e2ee mailing list, see screenshot.
Actual results:
As I have Kai's key 0x1C27423725007724 already in TB key ring and accepted it, mail is displayed as verified (see screenshot).
The same key 0x1C27423725007724 is also in an attached key file named OpenPGP_0x1C27423725007724.asc and the attachment is displayed as attached file (see screenshot).
As user, I am confused about that attachment that I recognize as Kai's public key. I wonder why TB does not recognize that too, if there could be something wrong or what, it's disturbing.
Expected results:
TB should check for file attachments what name looks like a pgp key file and check if that attachment is a pgp key file indeed, and if that's the case and that key is in TB key manager, that attachment should be ignored (e.g. not displayed in TB as attachment), because it is useless for the user and only makes confusion.
|
||
Comment 1•3 years ago
|
||
I don't think such attachments should be ignored. Perhaps they could show a bit differently if everything checks out. But, OTHO, it could be the same key you have, non-stripped, containing additional information. It could be attached explicitly so that the email can be forwarded to someone who doesn't have his key... All in all, perhaps not worth trying to be too smart about it.
Description
•