Closed Bug 465616 Opened 16 years ago Closed 16 years ago

gloda message queries return deleted messages by default

Categories

(MailNews Core :: Database, defect, P1)

defect

Tracking

(Not tracked)

RESOLVED FIXED
Thunderbird 3.0b1

People

(Reporter: asuth, Assigned: asuth)

References

Details

(Whiteboard: [resolved by patch on bug 464359][that patch needs review])

Gloda message queries allow 'deleted' gloda messages to be returned.  The capability to retrieve these messages intentionally is desired, but by default queries should be excluding them.
blocking b1
Flags: blocking-thunderbird3+
Priority: -- → P1
moving to b2
Target Milestone: Thunderbird 3.0b1 → Thunderbird 3.0b2
Depends on: 464359
Whiteboard: [resolved by patch on bug 464359][that patch needs review]
This was fixed by bug 464359, which ended up in beta 1.
Status: ASSIGNED → RESOLVED
Closed: 16 years ago
Resolution: --- → FIXED
Target Milestone: Thunderbird 3.0b2 → Thunderbird 3.0b1
I have no idea of the technical aspects of this, but aren't we compromising privacy by keeping <shift>-deleted (expunged) messages in gloda and "allowing them to be returned" through some query at all? Will data of expunged messages still live in gloda after user has compacted a folder to wipe out the physical trace of the expunged message?

(This objection does NOT apply to deleted messages that are still in trash, we'll need to index those of course)
I'd appreciate a response on the privacy concern raised in comment #4.

Furthermore, this does not seem to be entirely fixed as I am still seeing non-existing / deleted draft messages in my search results (bug 521632).
This specific bug remains fixed; messages marked as deleted are not returned in fulltext queries.  Bug 465618 deals with the problem of us not actually purging the messages marked as deleted and it has a patch that just needs the i's dotted and t's crossed.

No part of Thunderbird, especially gloda, makes any claim to wipe out physical traces of messages.  If you have serious concerns about the privacy of your data I would suggest storing your Thunderbird profile on an encrypted file-system.
You need to log in before you can comment on or make changes to this bug.