launchpad e-mail interface breaks PGP signatures without warning
Bug #611084 reported by
Francis Russell
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Launchpad itself |
Triaged
|
Low
|
Unassigned | ||
Bug Description
I just reported this bug against monotone-viz using the requestsync program:
https:/
As it uses the e-mail interface, the message needs to be PGP signed. Obviously, the message's signature was valid as launchpad accepted it. However, formatting changes (a line-break) to the message mean that it won't pass PGP verification. The same goes for the copy of the message that was mailed back to me. Someone paranoid checking these could get the impression that someone malicious had managed to find a way around Launchpad's PGP verification in the e-mail interface.
Perhaps clear-signed messages could be stripped?
| description: | updated |
| description: | updated |
| affects: | launchpad → launchpad-foundations |
| Changed in launchpad-foundations: | |
| status: | New → Triaged |
| importance: | Undecided → Low |
To post a comment you must log in.
