Enigmail leaks too much metadata
OpenPGP addon for Mozilla Thunderbird
Brought to you by:
pbrunschwig
Menu
▾
▴
#250 Enigmail leaks too much metadata
When I use enigmail, it adds some extra headers and comments by default to my outgoing emails that are not required but reveal information about the software and the version numbers in use.
This makes it easier to launch targeted attacks against me.
I can disable all these headers manually, but as a security software, Enigmail should be more secure/less revealing by default.
a) The "X-Enigmail-Version:" mail header
b) for GPG signatures, the comment line: "Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/"
c) Enigmail should suppress the GPG Version line by default
This is a duplicate of bug 216 (https://sourceforge.net/p/enigmail/bugs/216/). Please join the discussion there.