Closed Bug 1829881 Opened 1 year ago Closed 6 months ago

Require pref to allow permissive OpenPGP import

Categories

(MailNews Core :: Security: OpenPGP, defect)

Thunderbird 102
defect

Tracking

(Not tracked)

RESOLVED FIXED
126 Branch

People

(Reporter: KaiE, Assigned: KaiE)

Details

(Whiteboard: [snnot3p])

Attachments

(1 file)

During the early days of the OpenPGP integration in Thunderbird, we had reduced compatibility for some keys. To handle that better, we had allowed a fallback to allow import in a permissive mode.

I'm no longer sure we should allow that by default. Maybe we should introduce a new hidden pref, and only allow permissive import when the pref is set.

Not sure yet.

(See file keyRing.jsm for the word "permissive" to find that related code.)

Whiteboard: [snnot3p]
Version: unspecified → Thunderbird 102
Assignee: nobody → kaie
Status: NEW → ASSIGNED
Target Milestone: --- → 126 Branch

Pushed by mkmelin@iki.fi:
https://hg.mozilla.org/comm-central/rev/5b3321f864a4
Disable support for permissive OpenPGP key import by default. r=mkmelin

Status: ASSIGNED → RESOLVED
Closed: 6 months ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: