Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

encryption: not possible to see who encrypted or signed attachments #507

Open
gauteh opened this issue Jul 1, 2018 · 2 comments
Open

encryption: not possible to see who encrypted or signed attachments #507

gauteh opened this issue Jul 1, 2018 · 2 comments

Comments

@gauteh
Copy link
Member

gauteh commented Jul 1, 2018

Attachments are just colored depending on encryption and signature state. If someone intercepts an email it is therefore possible to add attachments and make them appear to be signed or encrypted by the same signer as the main part of the message.

Somewhat related to #499.

@gauteh gauteh added the security label Jul 1, 2018
@mxmehl
Copy link
Contributor

mxmehl commented Jul 8, 2018

Perhaps related. With WebExt the left-hand bar to indicate the encryption/signing status is ending after the first line. Could have to do with the iframe stuff. Or is it my stylesheet?

image

@gauteh
Copy link
Member Author

gauteh commented Jul 8, 2018 via email

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants