-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 I can confirm this behaviour on Linux x64 with latest (non-beta) Enigmail and Thunderbird 17.0.8 (latest from ubuntu repositories). Never noticed it before, but this is a big information leak.
Also, saving the draft encrypted appearently always saves it as PGP/MIME, even if the default setting is to use inline PGP, which can lead to tears if you try to open the draft on another device (like Android with K9 Mail + APG, which cannot really handle PGP/MIME). Max On 09/14/2013 01:56 PM, Lars Noodén wrote: > Hi, > > I notice that if a message draft is started encrypted and then > postponed, it becomes unencrypted when the message is continued. > The box becomes unchecked in the Encrypt Message checkbox under the > OpenPGP menu. Then, unless encryption is re-specified right away, > the draft seems to get saved unencrypted in the drafts folder. > This save is automatic after a few minutes, so there is only a > short window to manually restore the missing encryption. That > exposes the contents of the message if no action is taken. > > This happens every time a message is started, postponed and then > resumed. > > The steps to reproduce it are as follows: > > 1. start a message with encryption 2. save it and then postpone > it, closing the message 3. find the unfinished message in the > appropriate drafts folder and resume editing 4. either wait for > the message to be saved (unencrypted) or repeat steps 2 and 3. > > The message will go from being encrypted to being unencrypted every > time. > > I've checked in the list of common problems and do not find this > listed. https://www.enigmail.net/support/troubles.php > > I've looked at some of the existing bug reports and can't find > anything quite like this: > https://sourceforge.net/p/enigmail/bugs/search/?q=unencrypted > > Is this something that should be added to the list of bugs? > > Regards, /Lars > > _______________________________________________ enigmail-users > mailing list enigmail-users@enigmail.net > https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQJ8BAEBCgBmBQJSNFNDXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ4NEM0ODA5N0EzQUY3RDU1MTg5QTc3QUMx NjlGOTYyNDM0MDg4MjVFAAoJEBafliQ0CIJeaXQP/3kwRDXuYSKOZkBMq+kqdWx0 wTxCy7Fu75lWV/vKjD5WHCzgfQriCEI4j1fBZEJSw3IY3/Xwp3Qxi+QcobqV7cSi +pFX1ySfObyyBGyjas1lzhWpDgI4ACdvmQiEfllS7j5OYgmHw9dO8qN6vPvSemhk cW9YbraQGvYeFIbDOXJhzu68X2nxrUSzlHQOFKFHC6o7kylFNwNSoFdvvBwRY9sS rvt7dqOoi/o8eXHe4oE4G3uckeUlRTgXibFO7/M67phy4qwcGKR4q7YHxKHLLuCt k0BaC7YFklyc+EYT58CikpT5Aa6k7/ewvVtjCUM/Db9H9ciF6lGT6nGLwKayED3y vIbOt6LKF+GKxQ67oNLGsrm9lQgFE7oY25Mm+cBUmUHNcRbzlp3ZIHvqxk3GLYqf MHPFb6KlIVsqpaKKfSIJsBc2WHx84lvEt5lu+bC7Xfa8Awj9NpfQM7a0uyxY+gtG hS0Kai6o1qnF7OkOqnkR//c8Xt54MxM7Dtv4quPe+tS+gkAV2ErR9ea/oH8B5rfR KzTp8UtLFNIimOQWToBkww+h1edOUFJJTWEHkJw9BmlcUZrbeSkHMVaCYCunwdMM 6QaKVT+pH2PxuPCXGzUH91lZVotzHpxB/EhSkRd/RUEW16JAKwHfXYnbj2V6iyf1 Wh2JPuntMyNbnx4ocgAb =aIXI -----END PGP SIGNATURE----- _______________________________________________ enigmail-users mailing list enigmail-users@enigmail.net https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
