GpgOL: Empty OpenPGP mails with "Read as plain" activated
Closed, ResolvedPublic

Assigned To
Authored By
timegrid
Oct 2 2025, 6:07 PM

Description

Most OpenPGP mails are displayed empty with the "Read as plain" option set:


It also stays empty, if Display as HTML is selected on dropdown of the conversion note:

The "Display as HTML" doesn't show the formatted Rich/HTML body for S/MIME mails either.

To reproduce:

  1. In Options / Trustcenter -> Email Security activate:
    • Read all standard mail in plain text
    • Read all digitally signed mail in plain text
  2. Check mails of different combinations of signed/encrypted, openpgp/smime, html/rich/plain (e.g. in ted:INBOX/Mailformate, all have the same body content as the subject, with "rich" shown in green for Richtext format and "html" shown in red for HTML format)

For whatever reason the only exceptions of pgp mails with converted plain text shown are:

  • pgp signed unencrypted html attachment
  • pgp unsigned encrypted html noattachment

Details

Version
vsd-3.3.90.16-beta

Revisions and Commits

Event Timeline

ebo triaged this task as High priority.Oct 9 2025, 9:24 AM
ebo moved this task from Backlog to Triage on the gpgol board.

Might there be a relation to T7842? But I would have thought that then all signed messages would be unaffected.

ebo mentioned this in Unknown Object (Maniphest Task).Nov 14 2025, 2:48 PM
ebo mentioned this in Unknown Object (Maniphest Task).Dec 19 2025, 9:44 AM
alexk added a subscriber: alexk.

Marcus suggestion: offer the HTML mail content as attachment.

Not a good idea. Because then the user will open it with the browser and the browser loads all kind of additional data including drive-by malware. If HTML *mail* is shown by a MUA no links should be followed to keep information and the fact that it was read confidential.

I would suggest to show the HTML in raw form. This way the user notice that there is something. Maybe with a header explaining that for security reasons HTML are not rendered.

Der HTML Body wird als text/plain Anhang angehängt wobei alle <> durch {} ersetzt werden.

Name des Anhangs "HTML_email_content.txt".
Der Anhang erhält am Anfang die Zeile:

HTML Attachment as Text for security all <,> were replaced with {,}.

timegrid changed the task status from Open to Testing.Thu, Jun 25, 12:11 PM
ebo moved this task from Backlog to QA on the gpd5x board.
timegrid changed the task status from Testing to Open.EditedThu, Jul 16, 5:37 PM
timegrid moved this task from QA to WIP on the gpd5x board.

Tested on gpg4win-5.1.0-beta658 / gpgol-2.7.3-beta11_dd853c7 @ win11.

Here is a conversion test of some advanced outlook html. Looks fine for the most usual elements at least:

htmlread as plain

Issues found

  • Attachment is displayed, but the name for a pgp signed/encrypted html mail is GpgOL Decrypted plain text, which contains the correct plain text, but no warning line ("for security") as stated in T7843: GpgOL: Empty OpenPGP mails with "Read as plain" activated. Same for rich/text format. What is expected here? only applies to old mails, this can't be fixed for those and is fine, as the content is available
    • e.g. ted:INBOX/Mailformate/0000 oppgp both html noatt
    • without read as plain
  • Regarding format "text": this is not html and could just be displayed? only applies to old mails (and new ones, when opened the first time), so this ok
    • e.g. ted:INBOX/Mailformate/0020 openpgp both text noatt
  • Opening a mail with many/big mail attachments often (not always) results in a partially unresponsive interface, resizing the window will result in "Outlook (Not Responding)"
    • e.g. ted:INBOX/Mailformate/0002 openpgp both text mails
    • without read as plain

Ok, I think, my tests above might be not valid, as new mails behave differently.
Some comment about what is to be expected would be nice, the last comment T7843: GpgOL: Empty OpenPGP mails with "Read as plain" activated is probably outdated.

The current state seems to be:

  • When a new mail is opened for the first time, the GpgOL Decrypted plain text attachment is displayed
  • When reopened, the plaintext converted content is displayed nicely in the normal mail body (the same way as for smime mails)

@mmontkowski Is this expected?

I assume, it's due to the difference in the mail structure (as displayed in outlook web):

  • GpgOL Decrypted plain text always displayed (old mail):

  • GpgOL Decrypted plain text not displayed (new mail; plaintext displayed in body instead, which is way better than the formerly proposed fix):

timegrid changed the task status from Open to Testing.Fri, Jul 17, 2:52 PM

I talked with @mmontkowski:

  • the description of the current state above is intended
  • the display of the attachment, when the mail is opened the first time, can't be fixed
  • the above mentioned issue of a partially unresponsive interface on mails with many/big mail attachments should still be checked, so i create another ticket for it

I consider this issue resolved. This is a good improvement of the read as plain mode for new mails.

timegrid moved this task from WIP to gpd-5.1.0 on the gpd5x board.
timegrid edited projects, added gpd5x (gpd-5.1.0); removed gpd5x.