Page MenuHome GnuPG

GpgOL: Autosecure + autoencryptUntrusted not working as expected in VSD versions
Open, NormalPublic

Description

Follow up of T7778

In the case that both options "automatically encrypt messages" (autosecure=1) and "even for not trusted keys" (autoencryptUntrusted=1) are set, a mail is send encrypted if any valid key is available for the recipient. This is as intended except for in the VSD versions (where, arguably, you should not set autoencryptUntrusted as this is contrary to VS-NfD procedures)

Expected behavior for VSD versions: Before actually sending, the security approval dialog shows up for an untrusted certificate. This ensures that the sender is aware that the encryption to the not certified certificate is not VS-compliant and can abort, if desired.

To reproduce:

  1. Set autosecure=1 and autoencryptUntrusted=1 + (but probably not relevant) encryptDefault=1, signDefault=1
  2. Import a certificate with RSA3072 or 4096
  3. sent mail to that recipient address

-> mail is sent encrypted but without the security approval dialog showing

Two possible solutions:

  1. Make the approval dialog show in the VSD versions in this case
  2. Do not allow to set (and/or always ignore) the autoencryptUntrusted setting

Details

Version
VSD 3.3.2

Event Timeline

ebo triaged this task as Normal priority.Thu, Oct 16, 2:47 PM
ebo created this task.
ebo created this object with edit policy "Contributor (Project)".
ebo moved this task from Backlog to Triage on the gpgol board.