Bug#334206: mozilla-enigmail not decrypting messages
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I feel a need to add to this bug: | currently there is no way to fix this. So if you want decryption you | have to allow to load remote images :( ... for now. Recently I got a very annoying web bug contaminated newsletter. While analyzing that matter I found several spam mails containing web bugs as a means to verify my email address. Both incidents show how important it is to not allow remote images. So this isn't a viable option. Will this issue be solved some day? What about etch? caspar -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFtMwXzpQ+GCsPNMERAj6MAJ4ppJjg8QBGRAqX3mQcYgd/HGbbmQCg4YOe 21ZI5n/ow5OK1OY3idbGGgU= =+02z -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#334206: mozilla-enigmail not decrypting messages
severity 334206 important thanks though not nice, definitly not release critical. -- GPG messages preferred. | .''`. ** Debian GNU/Linux ** Alexander Sack| : :' : The universal [EMAIL PROTECTED] | `. `' Operating System http://www.asoftsite.org | `-http://www.debian.org -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#334206: mozilla-enigmail not decrypting messages
tags 334206 - unreproducible thanks Alexander Sack wrote: On Wed, Oct 19, 2005 at 09:43:53AM +0200, Caspar Bothmer wrote: Are there bugs posted for those issues? While we're at it -- this bug may not be RC but it surely is reproducible... signature.asc Description: OpenPGP digital signature
Bug#334206: mozilla-enigmail not decrypting messages
I was a bit too fast... :-)) Caspar Bothmer wrote: On Wed, Oct 19, 2005 at 09:43:53AM +0200, Caspar Bothmer wrote: Are there bugs posted for those issues? No. AFAIR it was fixed pretty fast in Gentoo and therefore I didn't see a need to. And it seems to be fixed in Debian with yesterdays update anyway. caspar signature.asc Description: OpenPGP digital signature
Bug#334206: mozilla-enigmail not decrypting messages
Alexander Sack wrote: true, but only for pgp/mime encrypted messages. If you inline, it should work. Ok, this is a viable workaround for you and me, but is it OK for everybody? I have enough difficulties to have others sign their messages at all... - narrowing view via Subject or Recipient contains - traversal between mboxes I no nothing about those issues, maybe you can explain them? These aren't enigmail issues. Just try these functions, but make sure you don't just switch between mboxes but actually open mails within these mboxes. Maybe you first have to try to decrypt a pgp/mime mail... https://bugzilla.mozilla.org/show_bug.cgi?id=303523 Ok, it's a known issue :-// Thanks for these references. caspar signature.asc Description: OpenPGP digital signature
Bug#334206: mozilla-enigmail not decrypting messages
On Wed, Oct 19, 2005 at 09:43:53AM +0200, Caspar Bothmer wrote: Alexander Sack wrote: true, but only for pgp/mime encrypted messages. If you inline, it should work. Ok, this is a viable workaround for you and me, but is it OK for everybody? I have enough difficulties to have others sign their messages at all... All looks like this gets a hard-wired in mozilla 1.7.13 or maybe one release later. So lets live with it for now. - narrowing view via Subject or Recipient contains - traversal between mboxes I no nothing about those issues, maybe you can explain them? These aren't enigmail issues. Just try these functions, but make sure you don't just switch between mboxes but actually open mails within these mboxes. Maybe you first have to try to decrypt a pgp/mime mail... Are there bugs posted for those issues? Please use separate bugs so such info does not get lost and gets documented in a proper context. Thanks -- GPG messages preferred. | .''`. ** Debian GNU/Linux ** Alexander Sack| : :' : The universal [EMAIL PROTECTED] | `. `' Operating System http://www.asoftsite.org | `-http://www.debian.org -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#334206: mozilla-enigmail not decrypting messages
Alexander Sack wrote: tags 334206 + unreproducible tags 334206 + sarge thanks cannot reproduce this. Maybe pressing decrypt button manually helps? That doesn't work as the whole message is seen as containing nothing but attachments. I can decrypt the attachment to a browser window, select it there and copy and paste it into the empty reply message -- but that isn't very comfortable. I can't reproduce this error with a new account. It is my existing account and deleting XUL.mfasl and chrome/*.rdf doesn't help. I just rechecked it... caspar signature.asc Description: OpenPGP digital signature
Bug#334206: mozilla-enigmail not decrypting messages
Caspar Bothmer wrote: I can't reproduce this error with a new account. I did some tests and I am able to reproduce this error with a new account: After starting mozilla mail using `mozilla --mail` I created a user test and pulled an encrypted message from the server I sent to that user before. There is nothing special with the settings. I was able to decrypt the message normally. Then I changed the preferences: In Preferences-PrivacySecurity-Images is an option Do not load remote images in Mail Newsgroup messages. I checked this option. It still decrypted properly. After exiting and restarting mozilla I wasn't able to decrypt the message. After unchecking that option and restarting mozilla it worked again (Indeed it works without having to restart, but that was a later test...). As I started mozilla from the command line I got kind of a log. This is a plain cut'n'paste without any changes. The warnings are OK, I am logged in via ssh. Only with mozilla-bin:8582 and mozilla-bin:8679 the message got decrypted properly. These didn't have mailnews.message_display.disable_remote_image set. The others had this option set to true. I am not sure if other settings will have a similar effect to the behaviour of enigmail. This is just the first setting I came across my tests. caspar [EMAIL PROTECTED]:~$ mozilla --mail ** (mozilla-bin:8582): WARNING **: Owner of /tmp/orbit-test1 is not the current user MimeDummy_initialize: class_name=MimeDummy MimeDummy_parse_begin: MimeDummy_parse_begin: nchildren=2 MimeDummy_parse_begin: sibling class_name=MimeEncryptedCMS MimeDummy_parse_begin: sibling superclass_name=MimeEncrypted MimeDummy_parse_begin: found MimeEncrypted MimeEnig_init: MimeEnig_eof: MimeEnig_free: [EMAIL PROTECTED]:~$ mozilla --mail ** (mozilla-bin:8621): WARNING **: Owner of /tmp/orbit-test1 is not the current user [EMAIL PROTECTED]:~$ mozilla --mail ** (mozilla-bin:8652): WARNING **: Owner of /tmp/orbit-test1 is not the current user [EMAIL PROTECTED]:~$ mozilla --mail ** (mozilla-bin:8679): WARNING **: Owner of /tmp/orbit-test1 is not the current user MimeDummy_initialize: class_name=MimeDummy MimeDummy_parse_begin: MimeDummy_parse_begin: nchildren=2 MimeDummy_parse_begin: sibling class_name=MimeEncryptedCMS MimeDummy_parse_begin: sibling superclass_name=MimeEncrypted MimeDummy_parse_begin: found MimeEncrypted MimeEnig_init: MimeEnig_eof: MimeEnig_free: [EMAIL PROTECTED]:~$ mozilla --mail ** (mozilla-bin:8714): WARNING **: Owner of /tmp/orbit-test1 is not the current user [EMAIL PROTECTED]:~$ signature.asc Description: OpenPGP digital signature
Bug#334206: mozilla-enigmail not decrypting messages
On Tue, Oct 18, 2005 at 06:13:30PM +0200, Caspar Bothmer wrote: In Preferences-PrivacySecurity-Images is an option Do not load remote images in Mail Newsgroup messages. OK, I know about this issue. Thanks for tracking this down. Anyway, currently there is no way to fix this. So if you want decryption you have to allow to load remote images :( ... for now. I am not sure if other settings will have a similar effect to the behaviour of enigmail. This is just the first setting I came across my tests. No, this is indeed the only issue. You hit the nail. I know this discussion and afaik, there was no real compromise to fix mozilla security without breaking enigmail or adding special enigmail code to the mozilla base. -- GPG messages preferred. | .''`. ** Debian GNU/Linux ** Alexander Sack| : :' : The universal [EMAIL PROTECTED] | `. `' Operating System http://www.asoftsite.org | `-http://www.debian.org -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#334206: mozilla-enigmail not decrypting messages
Alexander Sack wrote: currently there is no way to fix this. So if you want decryption you have to allow to load remote images :( ... for now. This renders mozilla mail useless. Exactly this single option is responsible for at least three broken functions: - enigmail decryption - narrowing view via Subject or Recipient contains - traversal between mboxes That's ridiculous. I know this discussion Where? Upstream within mozilla or enigmail? Or within Debian? and afaik, there was no real compromise to fix mozilla security without breaking enigmail or adding special enigmail code to the mozilla base. It looks as if I will find a compromise myself -- and get another mailer... caspar signature.asc Description: OpenPGP digital signature
Bug#334206: mozilla-enigmail not decrypting messages
On Tue, Oct 18, 2005 at 11:54:17PM +0200, Caspar Bothmer wrote: Alexander Sack wrote: currently there is no way to fix this. So if you want decryption you have to allow to load remote images :( ... for now. This renders mozilla mail useless. Exactly this single option is responsible for at least three broken functions: - enigmail decryption true, but only for pgp/mime encrypted messages. If you inline, it should work. - narrowing view via Subject or Recipient contains - traversal between mboxes I no nothing about those issues, maybe you can explain them? Where? Upstream within mozilla or enigmail? Or within Debian? http://mozdev.org/pipermail/enigmail/2005-August/004809.html and look http://mozdev.org/pipermail/enigmail/2005-August/thread.html for other messages with that topic (sorry thread appears broken in archive). and https://bugzilla.mozilla.org/show_bug.cgi?id=303523 -- GPG messages preferred. | .''`. ** Debian GNU/Linux ** Alexander Sack| : :' : The universal [EMAIL PROTECTED] | `. `' Operating System http://www.asoftsite.org | `-http://www.debian.org -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#334206: mozilla-enigmail not decrypting messages
tags 334206 + unreproducible tags 334206 + sarge thanks Encrypted mails get displayed as attachment which one has to save and decrypt on the commandline. Signed mails get checked normally. To check just send a mail to yourself using mozilla-enigmail itself. cannot reproduce this. Maybe pressing decrypt button manually helps? -- GPG messages preferred. | .''`. ** Debian GNU/Linux ** Alexander Sack| : :' : The universal [EMAIL PROTECTED] | `. `' Operating System http://www.asoftsite.org | `-http://www.debian.org -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#334206: mozilla-enigmail not decrypting messages
Package: mozilla-enigmail Version: 2:0.91.4 Severity: grave Encrypted mails get displayed as attachment which one has to save and decrypt on the commandline. Signed mails get checked normally. To check just send a mail to yourself using mozilla-enigmail itself. This behaviour shows up since the last update of mozilla. I am using the official mozilla packages coming with sarge. caspar ii mozilla-browser 1.7.8-1sarge2 ii mozilla-enigmail0.91-4 ii mozilla-mailnews1.7.8-1sarge2 ii mozilla-psm 1.7.8-1sarge2 signature.asc Description: OpenPGP digital signature
