[trojita] [Bug 399055] Signature spoofing in PGP signed email (GUI layer)

2022-12-30 Thread Bug Janitor Service
https://bugs.kde.org/show_bug.cgi?id=399055 Bug Janitor Service changed: What|Removed |Added Status|NEEDSINFO |RESOLVED Resolution|WAITINGFORINF

[trojita] [Bug 399055] Signature spoofing in PGP signed email (GUI layer)

2022-12-15 Thread Bug Janitor Service
https://bugs.kde.org/show_bug.cgi?id=399055 --- Comment #4 from Bug Janitor Service --- Dear Bug Submitter, This bug has been in NEEDSINFO status with no change for at least 15 days. Please provide the requested information as soon as possible and set the bug status as REPORTED. Due to regular b

[trojita] [Bug 399055] Signature spoofing in PGP signed email (GUI layer)

2022-11-30 Thread Justin Zobel
https://bugs.kde.org/show_bug.cgi?id=399055 Justin Zobel changed: What|Removed |Added Resolution|--- |WAITINGFORINFO Status|REPORTED

[trojita] [Bug 399055] Signature spoofing in PGP signed email (GUI layer)

2018-09-26 Thread Jens Mueller
https://bugs.kde.org/show_bug.cgi?id=399055 --- Comment #2 from Jens Mueller --- Hi Jan, I see the problem. You want to accept partly signed messages and require to display which part of the message was signed in the mail body. This is a hard problem of usable security. I have no good solution :

[trojita] [Bug 399055] Signature spoofing in PGP signed email (GUI layer)

2018-09-25 Thread Jan Kundrát
https://bugs.kde.org/show_bug.cgi?id=399055 --- Comment #1 from Jan Kundrát --- Hi Jens, thanks for this report, I think that you have identified a scenario which we missed. This looks like a valid concern to me. It would be reasonably straightforward to move the indication outside of the body/p