Page MenuHome GnuPG

GpgOL: Exchange mails can be stored unencrypted
Closed, ResolvedPublic

Description

Reported in: https://wald.intevation.org/forum/message.php?msg_id=5076&group_id=11

I can reproduce this when I send a mail with an outlook.com account and look into the sent messages folder. This is similar to exchange <> exchange transfer on the same exchange server. The body is available unencrypted additionally to the PGP/MIME attachment.

This is a regression as I have mails in there where the body was properly wiped.

Details

Version
master

Revisions and Commits

Event Timeline

aheinecke closed this task as Resolved.EditedAug 25 2017, 1:18 PM

We now explicitly delete the body instead of relying on the fact that the Outlook MAPI to MIME conversion deletes the body. Somehow this worked in the past but no longer does. I could not bisect it as 1.4.0 showed the same problem but old test mails from July 2016 did not show the problem. Newer ones from August 2016 already showed it in the sent mails folder.