838674 - Can't delete or detach signed attachments

Status: RESOLVED WORKSFORME

(Thunderbird :: Security, defect)

Description

[Tristan Miller]

If someone forwards me a signed message as an attachment, I can't delete the attachment.  The forwarded message shows up as two attachments (named "forwarded message" and "signature.asc"), but if I right-click on either one, the "Delete" and "Detach" commands are inactive.

I believe this bug is distinct from Bug 288700.  That bug is about deleting attachments from signed messages, whereas in my case I have an *unsigned* message which happens to contain a fully encapsulated signed message as an attachment.  I want to delete or detach the entire forwarded message, signature and all.

Reproducibility: Always

Steps to reproduce:

1. Person A sends an OpenPGP-signed e-mail to Person B.
2. Person B forwards the e-mail as an attachment to Person C.  (Person B does *not* sign their own message or the attachment.)
3. Person C receives Person B's message and right-clicks on the attached forwarded message.

Observed behaviour:

3. "Delete" and "Detach" are greyed out.

Expected behaviour:

3. "Delete" and "Detach" should be active and functional.

Comment 1

[Tristan Miller]

Attachment: An example of an unsigned message containing a signed forwarded message as an attachment

Comment 2

[Wayne Mery (:wsmwk)]

Nicolas, Christian, can you email between yourselves to see if this still reproduces?

Comment 3

[Tristan Miller]

No longer reproducible with Thunderbird 115.2.0.