Join the Mozilla’s Test Days event from 9–15 Jan to test the new Firefox address bar on Firefox Beta 135 and get a chance to win Mozilla swag vouchers! 🎁

Шукати в статтях підтримки

Остерігайтеся нападів зловмисників. Mozilla ніколи не просить вас зателефонувати, надіслати номер телефону у повідомленні або поділитися з кимось особистими даними. Будь ласка, повідомте про підозрілі дії за допомогою меню “Повідомити про зловживання”

Докладніше

messenger.listAttachments fails to return attachments when the attachment is PGP encrypted named after message.asc

  • 1 відповідь
  • 0 мають цю проблему
  • 8 переглядів
  • Остання відповідь від Mart Gil Robles

more options

The messenger.messages.listAttachments() function fails when an email without a body that has an encrypted attachment named "message.asc" is included. There's no other information included and requires user to have the appropriate PGP key imported before having access to the attachment. It is fair but I think there should be a flag/option called "decrypt" similar to https://webextension-api.thunderbird.net/en/latest/messages.html#getfull-messageid-options.

Context: We are developing a PGP Mail Extension for Thunderbird and this prevents us from accessing the encrypted attachment and requires us to import the PGP private key just to access the file. I am expecting to at least let us access the encrypted "message.asc" file and proceed process without requiring to have the PGP key imported into the Thunderbird.

Steps to reproduce:

1. PGP encrypt a message and save it to message.asc. 2. Send the message using Thunderbird client as follow: - add a subject. - add the message.asc as an attachment. - leave the email body blank. - send the email. 3. Install a debug attachment that uses `messenger.messages.listAttachments()` and noticed that it won't return any attachments at all. The error will say, error decrypting message x (where x is messageId) even though the error actually happens in messenger.messages.listAttachments(x) and messages.getFull() uses decrypt set to "true" option.

Reference: https://webextension-api.thunderbird.net/en/latest/messages.html#listattachments-messageid

The messenger.messages.listAttachments() function fails when an email without a body that has an encrypted attachment named "message.asc" is included. There's no other information included and requires user to have the appropriate PGP key imported before having access to the attachment. It is fair but I think there should be a flag/option called "decrypt" similar to https://webextension-api.thunderbird.net/en/latest/messages.html#getfull-messageid-options. Context: We are developing a PGP Mail Extension for Thunderbird and this prevents us from accessing the encrypted attachment and requires us to import the PGP private key just to access the file. I am expecting to at least let us access the encrypted "message.asc" file and proceed process without requiring to have the PGP key imported into the Thunderbird. Steps to reproduce: 1. PGP encrypt a message and save it to message.asc. 2. Send the message using Thunderbird client as follow: - add a subject. - add the message.asc as an attachment. - leave the email body blank. - send the email. 3. Install a debug attachment that uses `messenger.messages.listAttachments()` and noticed that it won't return any attachments at all. The error will say, error decrypting message x (where x is messageId) even though the error actually happens in messenger.messages.listAttachments(x) and messages.getFull() uses decrypt set to "true" option. Reference: https://webextension-api.thunderbird.net/en/latest/messages.html#listattachments-messageid

Усі відповіді (1)

more options

I also want to add that I do not have PGP keys imported in my accounts in Thunderbird so I think this would be one of a good reason for letting extensions handle decryption otherwise there's no visible hint as to why messages.listAttachments().

Змінено Mart Gil Robles

Корисно?

Запитати

Щоб відповідати на повідомлення, ви повинні ввійти у свій обліковий запис. Поставте нове питання, якщо ви ще не маєте облікового запису.