-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 09/15/2013 04:55 PM, Lars Noodén wrote: > On 09/15/2013 05:46 PM, Patrick Brunschwig wrote: >> On 15.09.13 16:44, Lars Noodén wrote: >>> On 09/15/2013 05:39 PM, Patrick Brunschwig wrote: >>>> On 14.09.13 14:15, Max Maass wrote: >>>>> On 09/14/2013 01:56 PM, Lars Noodén wrote: >>>>>> Hi, > >>>>>> I notice that if a message draft is started encrypted and >>>>>> then postponed, it becomes unencrypted when the message >>>>>> is continued. The box becomes unchecked in the Encrypt >>>>>> Message checkbox under the OpenPGP menu. Then, unless >>>>>> encryption is re-specified right away, the draft seems >>>>>> to get saved unencrypted in the drafts folder. This save >>>>>> is automatic after a few minutes, so there is only a >>>>>> short window to manually restore the missing encryption. >>>>>> That exposes the contents of the message if no action is >>>>>> taken. > >>>>>> This happens every time a message is started, postponed >>>>>> and then resumed. > >>>>>> The steps to reproduce it are as follows: > >>>>>> 1. start a message with encryption 2. save it and then >>>>>> postpone it, closing the message 3. find the unfinished >>>>>> message in the appropriate drafts folder and resume >>>>>> editing 4. either wait for the message to be saved >>>>>> (unencrypted) or repeat steps 2 and 3. > >>>>>> The message will go from being encrypted to being >>>>>> unencrypted every time. > >>>>> I can confirm this behaviour on Linux x64 with latest >>>>> (non-beta) Enigmail and Thunderbird 17.0.8 (latest from >>>>> ubuntu repositories). Never noticed it before, but this is >>>>> a big information leak. > >>>> Is my understanding correct that you only get this behavior >>>> if the draft message is _not_ shown before you continue >>>> editing it, e.g. if the preview pane is off? > >>>> -Patrick > >>> It seems to happen even with the preview pane open at the >>> bottom of the window. Try closing and opening the message >>> again. It will go to plain text if encryption is not manually >>> reselected again each time. > >>> (I'm not sure of the names. The preview pane is the pane at >>> the bottom of the window under the pane with the list of >>> message subjects, right? ) > >> Is the draft message encrypted at all? > >> -Patrick > > When you first close the draft message, you are given the option > to encrypt the message before saving. If you choose "Encrypt > Message", it gets encrypted that first time. But then if you open > it, the encryption goes away and any subsequent saves are > unencrypted unless it is manually reselected. > > I'm also noticing some problems were the content of the body of > the draft disappears, but that's a separate issue I think. > > /Lars > > _______________________________________________ enigmail-users > mailing list enigmail-users@enigmail.net > https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net > > In my case, when I reactivated the preview window at the bottom and viewed the message in there before opening it again, encryption settings seem to have been preserved. I only tried this once though, as I don't have much time right now.
Max -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQJ8BAEBCgBmBQJSNiv5XxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ4NEM0ODA5N0EzQUY3RDU1MTg5QTc3QUMx NjlGOTYyNDM0MDg4MjVFAAoJEBafliQ0CIJeUV4P/iHlhcn81Am5QfAftRFTfv6+ Lx1Tc/bqHN5uRK6nt5cFWe9ETmrwAl+UfO9ybK9GbZj/YnC3Kp65N31ESOIuClBW svM7AfWfQLBS3PSZUqfTWxEV47X7E3rIJhfhbWXs0xI1JZJN5OyuO7ivl4cu2ft0 hpHZT2Dt/hsi0Og6+3abwyVraPLTMQRIiOR5X1COFXFyCh9VHPOSWNRf+wJMjOIQ R49w51dINMoMMB97eblhAOLXajeZmrXuK1chRkJysQFV0kCBlTQOe0Xv3bvX7AdT 2gCilplnpTUuDDzmW3QmGjPn/KxNqo9ZUwt6/q9PrXH72y0sN8lsHtzciITYUsrt fFgIiQMX9ciZuAYv500erl+I8ooOqG/a1d/hiqzOPY93uaqz1zZCoAUsbWDAQyru BhOjkodDc25+3MV/Ft9jdQMd3WXyiimKGcse6+gl/SHCpZxDAudQ6eXueG1mHYK+ y/sSfqwRGtstN6RjR0T4X+9B4HgZK/lauqi14c5hFwtSOEhRSTj40J28dUQ7SVE5 avldHqOkp3KWZuWdGjX/OjGM0KVw6/QmHisv+C4upfKihqrRRjmrPp0xSA1tvbc5 mBvsUQNBUgkRK8umaAcCGP2FH/jyVtnCIKu7dX000n6YRA7KshlQvW/ticKnd4I7 RvI1GSAe+kfYogtUg+Bv =zR69 -----END PGP SIGNATURE----- _______________________________________________ enigmail-users mailing list enigmail-users@enigmail.net https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
