Follow up of T7778
In the case that both options "automatically encrypt messages" (autosecure=1) and "even for not trusted keys" (autoencryptUntrusted=1) are set, a mail is send encrypted if any valid key is available for the recipient. This is as intended except for in the VSD versions (where, arguably, you should not set autoencryptUntrusted as this is contrary to VS-NfD procedures)
Expected behavior for VSD versions: Before actually sending, the security approval dialog shows up for an untrusted certificate. This ensures that the sender is aware that the encryption to the not certified certificate is not VS-compliant and can abort, if desired.
To reproduce:
- Set autosecure=1 and autoencryptUntrusted=1 + (but probably not relevant) encryptDefault=1, signDefault=1
- Import a certificate with RSA3072 or 4096
- sent mail to that recipient address
-> mail is sent encrypted but without the security approval dialog showing
Two possible solutions:
- Make the approval dialog show in the VSD versions in this case
- Do not allow to set (and/or always ignore) the autoencryptUntrusted setting