In pgp signed unencrypted text mails it happens, too, that first the "converted to plain text" message is shown without content, and after open/close the message is gone and the content is displayed.

At which point did were you asked for the passphrase for decryption? You flushed the gpg-agent cache, right?

Happens on vsd 3.3.2, too.

I can read the plain text message in outlook web, so it is definitly unencrypted:

We did decrypt the mail successfully and called put_oom_string to update the Body successfully, but for some reason for new mails the put calls succeed but the displayed Text is not updated i.e. no "OpenGPG Message Please wait..." or decrypted message.
When closing the mail window the mail is still open in the preview pane and we should get back the mail content (Body), but we don't get back what we set with the put call but what is displayed i.e nothing (empty string).
So we pass on the close call which does write back our put value. (Plaintext leak)

Fix we put an empty string into the body before passing.

Note: if you select an other mail in explorer and then back to the new empty mail, it gets decrypted again and no longer is empty showing the decrypted content.

With the beta-25 the body of the mail is not saved back to the server any more but the security level tags are. So the test mail still seems to be a signed and decrypted empty mail even if you deactivate gpgol.

additionally, the body of the messages is (in most cases) not shown any more.

Even if the body of the decrypted mail is shown (in plain text), choosing "display as HTML" does not show the HTML part (msg to Edward, 2025-10-17, 11:10)
When no message at all is shown in the plain part, this does not change with choosing "display as HTML" either (msg to edward, 11:42 and 11:48)

When deactivating "Read as plain", the messages HTML version is shown and the text is there.

that's probably at least partly another issue: https://dev.gnupg.org/T7843

with 3.3.90.29-Beta:

It looks on the first checks as if this fixes the leak but a) the UX is really bad for decrypting a mail for the fist time, it is NOT a case of click a second time, see gif.
And b) some other signed/encrypted mails can't be selected any more, too, see example gif for the sent folder. Seen also for a pgp-inline mail. Also, these mails are always empty, even if I open them in a separate window (instead of preview, where no mail at all is shown, not even the header).

Have a look at the log.

I saw no "the message was changed, do you want to save?" messages any more

This is a gif to show the UX. It is to complicated for words…

And when I switch of read-as-plain, both testmails in the inbox are displayed as expected but one of the ones from the sent-folder has an empty body:

Test with beta32

with read-as-plain set, gpg al combinations with sign+encrypt:

• no leak with the procedure from the description any more
• the security level tags are kept encrypted, too
• mail is displayed on first reception like this, with the content in a .txt file:

Should the text not be displayed in the body in some few cases (in the Sent folder it is always the case), toggling read/unread helps.
For S/MIME the text is usually directly shown in the body, only text of signed only mails is shown on the first view as .txt attachment.

Change of displayed security level still works even when the text is displayed as attachment (did not work in an earlier test version).

So far for today. But timegrid seems to have found some data loss issue regarding S/MIME encrypted mails with this beta-version which is probably related to the changes from this ticket. Further investigation needed.

This here is resolved, for timegrids findings see other ticket, the issue is not related to the one from this ticket and no regression, as it turned out. And difficult to trigger.