792673 - I received a secure bugmail with the subject line intact

Status: RESOLVED INVALID

(bugzilla.mozilla.org :: Extensions, defect)

Description

[Dave Miller [:justdave]]

I received a bugmail for bug 789792 comment 10 which was a "created attachment" email and the attachment was private.  The content of the email was encrypted, but the subject line was intact, instead of sanitized.  I suspect the private attachment might be the differentiator, as myself and others have recently gotten other secure bug updates that had the subject correctly sanitized.

Comment 1

[Dave Miller [:justdave]]

Attachment: copy of the email I got

Comment 2

[Dave Miller [:justdave]]

Per IRC conversation, apparently the subject line intact, but content encrypted is intentional for a private attachment on an otherwise public bug, but on a secured bug (which this is) it should have still munged the subject.

Comment 3

[Dave Miller [:justdave]]

ok, Byron discovered the bug in question is in a security group which does not have the secure bugmail flag set, which makes this intended behavior (the bugmail otherwise would not have been encrypted if not for the private attachment).

This bug probably needs to stay secure as long as the bug referenced in the attached email is.

Comment 4

[Frédéric Buclin]

(In reply to Dave Miller [:justdave] from comment #3)
> This bug probably needs to stay secure as long as the bug referenced in the
> attached email is.

Or simply mark the attachment as private and make this bug public.

Comment 5

[Dave Miller [:justdave]]

(In reply to Frédéric Buclin from comment #4)
> Or simply mark the attachment as private and make this bug public.

works for me.