Closed
Bug 1829881
Opened 3 years ago
Closed 2 years ago
Require pref to allow permissive OpenPGP import
Categories
(MailNews Core :: Security: OpenPGP, defect)
Tracking
(Not tracked)
RESOLVED
FIXED
126 Branch
People
(Reporter: KaiE, Assigned: KaiE)
Details
(Whiteboard: [snnot3p])
Attachments
(1 external file)
During the early days of the OpenPGP integration in Thunderbird, we had reduced compatibility for some keys. To handle that better, we had allowed a fallback to allow import in a permissive mode.
I'm no longer sure we should allow that by default. Maybe we should introduce a new hidden pref, and only allow permissive import when the pref is set.
Not sure yet.
(See file keyRing.jsm for the word "permissive" to find that related code.)
Updated•3 years ago
|
Whiteboard: [snnot3p]
Updated•3 years ago
|
Version: unspecified → Thunderbird 102
| Assignee | ||
Comment 1•2 years ago
|
||
Updated•2 years ago
|
Assignee: nobody → kaie
Status: NEW → ASSIGNED
| Assignee | ||
Updated•2 years ago
|
Keywords: checkin-needed-tb
Updated•2 years ago
|
Target Milestone: --- → 126 Branch
Pushed by mkmelin@iki.fi:
https://hg.mozilla.org/comm-central/rev/5b3321f864a4
Disable support for permissive OpenPGP key import by default. r=mkmelin
You need to log in
before you can comment on or make changes to this bug.
Description
•