1840911 - Error message for technical error in signed mail is missing details

Status: UNCONFIRMED

(Thunderbird :: Security, defect)

Description

[Roland Illig]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36

Steps to reproduce:

Receive https://mail-index.netbsd.org/current-users/2023/06/28/msg044039.html as mail.
The original text is at https://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2023-006.txt.asc, the difference between these two is that text that looks like mail addresses is reformatted as local-part%domain@localhost.

Actual results:

I got an error message: "Ungültige digitale Unterschrift", without any advice on what to do next.

Could it be that the rendering of mailto and https links affects the content to be verified?

Expected results:

Since the signature is valid, Thunderbird should verify the message successfully.

Comment 1

[Wayne Mery (:wsmwk)]

Reporter, do you see this problem in version 115.9.0 or newer?

Comment 2

[Roland Illig]

Yes, I still see the same problem in 115.9.0. What exactly is the "technical problem" in this case?

Comment 3

[Roland Illig]

Attachment: 2023-006.eml

The properly signed mail from my inbox, as saved by Thunderbird 115.9.0, that is nevertheless shown as "technical error"

Comment 4

[Roland Illig]

After saving the mail to a file, I double-checked with GPG:

$ gpg --verify 2023-006.eml
gpg: Signature made Wed Jun 28 17:33:57 2023 CEST using RSA key ID F5EF49FF
gpg: Good signature from "NetBSD Security Officer 2019 Key <[e-mail]>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 2711 3326 2BF3 5CB5 0D4F 5046 8926 1E17 F5EF 49FF