Bug #8986

Claws Mail leaks cleartext of encrypted email to the Drafts IMAP folder

Added by goupille 2015-03-01 18:59:44 . Updated 2016-02-13 18:18:40 .

Status:
Resolved
Priority:
Low
Assignee:
Category:
Target version:
Start date:
2015-04-30
Due date:
% Done:

100%

Feature Branch:
Type of work:
Research
Blueprint:

Starter:
Affected tool:
Email Client
Deliverable for:

Description

when reply to an encrypted email (quoting it), then saving to draft, the mail is saved in the draft directory on the server, unencrypted. there is an option in the account settings to choose the directory for drafts, it may be a good idea to make claws mail save the drafts locally by default.

Subtasks

Feature #9302: Consider shipping claws-mail 3.10.1-2~bpo70+1 Rejected

0

History

#1 Updated by BitingBird 2015-03-01 22:34:54

  • Subject changed from claws mail should save drafts in the persistent volume by default (IMAP) to Claws mail should save drafts in the persistent volume by default (IMAP)
  • Category set to Persistence
  • Affected tool set to Email Client

#2 Updated by intrigeri 2015-03-03 12:06:34

#3 Updated by intrigeri 2015-03-03 12:08:24

  • Subject changed from Claws mail should save drafts in the persistent volume by default (IMAP) to Claws Mail leaks cleartext of encrypted email to the Drafts IMAP folder
  • Category deleted (Persistence)
  • Priority changed from Normal to Elevated
  • Target version set to Tails_1.3.2

#4 Updated by BitingBird 2015-04-01 12:48:11

  • Target version changed from Tails_1.3.2 to Tails_1.4

not fixed -> postponing

#5 Updated by intrigeri 2015-04-25 06:59:30

  • Assignee set to sajolida

#6 Updated by sajolida 2015-05-05 19:41:26

  • Assignee deleted (sajolida)
  • Target version deleted (Tails_1.4)

We did all we could do on this issue and will release an advisory before 1.4. There’s not much else we can do for the time being, so I’m removing this from 1.4 as it won’t be solved by then. Deassigning it from me either.

#7 Updated by Kurtis 2015-08-13 11:38:19

Did anyone ever create a bug report with Claws-Mail about this? It seems like much less of a problem than the Queuing issue. This Claws-Mail bug fix came out but it didn’t deal with Drafts: http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=2965

#8 Updated by intrigeri 2015-08-18 05:30:08

> Did anyone ever create a bug report with Claws-Mail about this?

I don’t think we did, and we’re now focussing on integrating Icedove, plus we’ve documented how to workaround this in Tails, so I doubt that any of us will bother with this Claws Mail problem.

#9 Updated by Anonymous 2016-01-03 19:28:14

  • Status changed from Confirmed to Rejected

Closing this ticket as we will soon drop Claws Mail.

#10 Updated by sajolida 2016-02-13 18:18:40

  • Status changed from Rejected to Resolved

The move to Icedove actually solved the original concern.