Closed
Bug 1829881
Opened 1 year ago
Closed 6 months ago
Require pref to allow permissive OpenPGP import
Categories
(MailNews Core :: Security: OpenPGP, defect)
Tracking
(Not tracked)
RESOLVED
FIXED
126 Branch
People
(Reporter: KaiE, Assigned: KaiE)
Details
(Whiteboard: [snnot3p])
Attachments
(1 file)
During the early days of the OpenPGP integration in Thunderbird, we had reduced compatibility for some keys. To handle that better, we had allowed a fallback to allow import in a permissive mode.
I'm no longer sure we should allow that by default. Maybe we should introduce a new hidden pref, and only allow permissive import when the pref is set.
Not sure yet.
(See file keyRing.jsm for the word "permissive" to find that related code.)
Updated•1 year ago
|
Whiteboard: [snnot3p]
Updated•1 year ago
|
Version: unspecified → Thunderbird 102
Assignee | ||
Comment 1•7 months ago
|
||
Updated•7 months ago
|
Assignee: nobody → kaie
Status: NEW → ASSIGNED
Assignee | ||
Updated•6 months ago
|
Keywords: checkin-needed-tb
Updated•6 months ago
|
Target Milestone: --- → 126 Branch
Pushed by mkmelin@iki.fi:
https://hg.mozilla.org/comm-central/rev/5b3321f864a4
Disable support for permissive OpenPGP key import by default. r=mkmelin
You need to log in
before you can comment on or make changes to this bug.
Description
•