GNU bug report logs -
#19585
23.4; message-mode quietly saves plaintext in draft folder (potentially remote IMAP servers)
Previous Next
Reported by: Attila Lendvai <attila <at> lendvai.name>
Date: Tue, 13 Jan 2015 17:23:01 UTC
Severity: normal
Tags: moreinfo, security
Found in version 23.4
Done: Lars Ingebrigtsen <larsi <at> gnus.org>
Bug is archived. No further changes may be made.
To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 19585 in the body.
You can then email your comments to 19585 AT debbugs.gnu.org in the normal way.
Toggle the display of automated, internal messages from the tracker.
Report forwarded
to
bug-gnu-emacs <at> gnu.org
:
bug#19585
; Package
emacs
.
(Tue, 13 Jan 2015 17:23:02 GMT)
Full text and
rfc822 format available.
Acknowledgement sent
to
Attila Lendvai <attila <at> lendvai.name>
:
New bug report received and forwarded. Copy sent to
bug-gnu-emacs <at> gnu.org
.
(Tue, 13 Jan 2015 17:23:02 GMT)
Full text and
rfc822 format available.
Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):
i have a gmail+gnus setup. when a message is marked to be encrypted in
message-mode (with a <#secure ...> tag) then drafts of the message end
up being saved quietly in cleartext to the gmail drafts folder.
i propose to change the defaults so that drafts are either saved
encrypted (to the sender as recipient, so that it can be decrypted for
further editing), or at least a warning should be shown to the user
before saving the message in cleartext.
thank you for all your efforts, past, present, and future!
--
- attila lendvai
- PGP: 963F 5D5F 45C7 DFCD 0A39
--
"We do not learn from experience... we learn from reflecting on experience."
- John Dewey (1859-1952)
PS: i'm sending this from gmail because i couldn't set up SMTP for my
gmail account (cannot find any fix for "Must issue a STARTTLS command
first").
In GNU Emacs 23.4.1 (x86_64-pc-linux-gnu, GTK+ Version 2.24.10)
of 2012-09-08 on trouble, modified by Debian
Windowing system distributor `The X.Org Foundation', version 11.0.11204000
configured using `configure '--build' 'x86_64-linux-gnu' '--build'
'x86_64-linux-gnu' '--prefix=/usr' '--sharedstatedir=/var/lib'
'--libexecdir=/usr/lib' '--localstatedir=/var/lib'
'--infodir=/usr/share/info' '--mandir=/usr/share/man' '--with-pop=yes'
'--enable-locallisppath=/etc/emacs23:/etc/emacs:/usr/local/share/emacs/23.4/site-lisp:/usr/local/share/emacs/site-lisp:/usr/share/emacs/23.4/site-lisp:/usr/share/emacs/site-lisp'
'--with-crt-dir=/usr/lib/x86_64-linux-gnu' '--with-x=yes'
'--with-x-toolkit=gtk' '--with-toolkit-scroll-bars'
'build_alias=x86_64-linux-gnu' 'CFLAGS=-g -O2 -fstack-protector
--param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wall
-DDEBIAN -O2' 'CPPFLAGS=-D_FORTIFY_SOURCE=2''
Important settings:
value of $LC_ALL: nil
value of $LC_COLLATE: nil
value of $LC_CTYPE: nil
value of $LC_MESSAGES: nil
value of $LC_MONETARY: nil
value of $LC_NUMERIC: nil
value of $LC_TIME: nil
value of $LANG: en_US.utf8
value of $XMODIFIERS: nil
locale-coding-system: utf-8-unix
default enable-multibyte-characters: t
Information forwarded
to
bug-gnu-emacs <at> gnu.org, bugs <at> gnus.org
:
bug#19585
; Package
emacs,gnus
.
(Wed, 25 Jan 2017 21:15:02 GMT)
Full text and
rfc822 format available.
Message #8 received at 19585 <at> debbugs.gnu.org (full text, mbox):
Attila Lendvai <attila <at> lendvai.name> writes:
> i have a gmail+gnus setup. when a message is marked to be encrypted in
> message-mode (with a <#secure ...> tag) then drafts of the message end
> up being saved quietly in cleartext to the gmail drafts folder.
>
> i propose to change the defaults so that drafts are either saved
> encrypted (to the sender as recipient, so that it can be decrypted for
> further editing), or at least a warning should be shown to the user
> before saving the message in cleartext.
Yes, that would seem to be unwanted behaviour. Does anybody who knows
more about the encrypted mail part have any idea how to fix this problem?
--
(domestic pets only, the antidote for overdose, milk.)
bloggy blog: http://lars.ingebrigtsen.no
Information forwarded
to
bug-gnu-emacs <at> gnu.org, bugs <at> gnus.org
:
bug#19585
; Package
emacs,gnus
.
(Mon, 23 Sep 2019 11:44:01 GMT)
Full text and
rfc822 format available.
Message #11 received at 19585 <at> debbugs.gnu.org (full text, mbox):
Attila Lendvai <attila <at> lendvai.name> writes:
> i have a gmail+gnus setup. when a message is marked to be encrypted in
> message-mode (with a <#secure ...> tag) then drafts of the message end
> up being saved quietly in cleartext to the gmail drafts folder.
I'm not quite sure I understand. How does the draft end up in Gmail in
the first place? I didn't think Gnus supported storing the drafts on an
IMAP server?
--
(domestic pets only, the antidote for overdose, milk.)
bloggy blog: http://lars.ingebrigtsen.no
Added tag(s) moreinfo.
Request was from
Lars Ingebrigtsen <larsi <at> gnus.org>
to
control <at> debbugs.gnu.org
.
(Mon, 23 Sep 2019 11:44:02 GMT)
Full text and
rfc822 format available.
Information forwarded
to
bug-gnu-emacs <at> gnu.org, bugs <at> gnus.org
:
bug#19585
; Package
emacs,gnus
.
(Mon, 23 Sep 2019 17:07:02 GMT)
Full text and
rfc822 format available.
Message #16 received at 19585 <at> debbugs.gnu.org (full text, mbox):
> > i have a gmail+gnus setup. when a message is marked to be encrypted in
> > message-mode (with a <#secure ...> tag) then drafts of the message end
> > up being saved quietly in cleartext to the gmail drafts folder.
>
> I'm not quite sure I understand. How does the draft end up in Gmail in
> the first place? I didn't think Gnus supported storing the drafts on an
> IMAP server?
unfortunately i don't remember the details anymore.
i suspect what happened was something like this: i configured
gmail/IMAP as the "backend" for gnus, and the local draft folder got
linked to the gmail/IMAP draft folder.
keep in mind that i'm not an expert in gnus. i was in the process of
evaluating whether to move my emailing over to emacs when this
happened.
--
• attila lendvai
• PGP: 963F 5D5F 45C7 DFCD 0A39
--
“It isn't enough to say: "I was mistaken"; one must say how one was mistaken.”
— Claude Bernard (1813–1878), paraphrased
Information forwarded
to
bug-gnu-emacs <at> gnu.org, bugs <at> gnus.org
:
bug#19585
; Package
emacs,gnus
.
(Wed, 25 Sep 2019 12:58:02 GMT)
Full text and
rfc822 format available.
Message #19 received at 19585 <at> debbugs.gnu.org (full text, mbox):
Attila Lendvai <attila <at> lendvai.name> writes:
>> I'm not quite sure I understand. How does the draft end up in Gmail in
>> the first place? I didn't think Gnus supported storing the drafts on an
>> IMAP server?
>
> unfortunately i don't remember the details anymore.
>
> i suspect what happened was something like this: i configured
> gmail/IMAP as the "backend" for gnus, and the local draft folder got
> linked to the gmail/IMAP draft folder.
I've had another look at the gnus-draft code, and it hard-codes
"nndraft:drafts" all over the place, and that backend (as far as I can
see) only supports storing drafts locally on disk.
So I don't see how this can happen. :-)
I'm closing this bug report, but please reopen if anybody experiences
the same.
--
(domestic pets only, the antidote for overdose, milk.)
bloggy blog: http://lars.ingebrigtsen.no
bug closed, send any further explanations to
19585 <at> debbugs.gnu.org and Attila Lendvai <attila <at> lendvai.name>
Request was from
Lars Ingebrigtsen <larsi <at> gnus.org>
to
control <at> debbugs.gnu.org
.
(Wed, 25 Sep 2019 12:58:02 GMT)
Full text and
rfc822 format available.
bug archived.
Request was from
Debbugs Internal Request <help-debbugs <at> gnu.org>
to
internal_control <at> debbugs.gnu.org
.
(Thu, 24 Oct 2019 11:24:10 GMT)
Full text and
rfc822 format available.
This bug report was last modified 5 years and 298 days ago.
Previous Next
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson.