Menu

#983 Signature Spoofing in Enigmail, once again

fixed
nobody
None
2.0.10
Major
All
2.0.11
nobody
2019-05-16
2019-04-30
No

A variant of bugs #849 / #709 still works.

1 Attachments

Related

Bugs: #995
Forum: Enigmail no longer displays unencrypted part of message

Discussion

  • Jens Müller

    Jens Müller - 2019-04-30

    Screenshot impersonating Phil Zimmermann

     
  • Jens Müller

    Jens Müller - 2019-04-30
    • Severity: Minor --> Major
     
  • Patrick Brunschwig

    I hate inline-PGP ... :-/

     
  • Patrick Brunschwig

    • status: open --> fixed
    • Fixed in version: --- --> 2.1
     
  • Patrick Brunschwig

    Bug fixed: in case of inline-PGP messages, the old approach was to find the node that holds the encrypted (or signed) message part, and replace it with the decrypted or verified message part. If the node is not visible then the operation did succeed but you could not see it - but still the status bar would be green. The new approach is now to always replace the complete HTML document with the decrypted or verified message.

     
  • Patrick Brunschwig

    • Fixed in version: 2.1 --> 2.0.11
     

Log in to post a comment.