GNU bug report logs - #19585
23.4; message-mode quietly saves plaintext in draft folder (potentially remote IMAP servers)

Previous Next

Packages: gnus, emacs;

Reported by: Attila Lendvai <attila <at> lendvai.name>

Date: Tue, 13 Jan 2015 17:23:01 UTC

Severity: normal

Tags: moreinfo, security

Found in version 23.4

Done: Lars Ingebrigtsen <larsi <at> gnus.org>

Bug is archived. No further changes may be made.

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 19585 in the body.
You can then email your comments to 19585 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to bug-gnu-emacs <at> gnu.org:
bug#19585; Package emacs. (Tue, 13 Jan 2015 17:23:02 GMT) Full text and rfc822 format available.

Acknowledgement sent to Attila Lendvai <attila <at> lendvai.name>:
New bug report received and forwarded. Copy sent to bug-gnu-emacs <at> gnu.org. (Tue, 13 Jan 2015 17:23:02 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Attila Lendvai <attila <at> lendvai.name>
To: bug-gnu-emacs <at> gnu.org
Subject: 23.4; message-mode quietly saves plaintext in draft folder
 (potentially remote IMAP servers)
Date: Tue, 13 Jan 2015 17:49:45 +0100
i have a gmail+gnus setup. when a message is marked to be encrypted in
message-mode (with a <#secure ...> tag) then drafts of the message end
up being saved quietly in cleartext to the gmail drafts folder.

i propose to change the defaults so that drafts are either saved
encrypted (to the sender as recipient, so that it can be decrypted for
further editing), or at least a warning should be shown to the user
before saving the message in cleartext.

thank you for all your efforts, past, present, and future!

-- 
- attila lendvai
- PGP: 963F 5D5F 45C7 DFCD 0A39
--
"We do not learn from experience... we learn from reflecting on experience."
- John Dewey (1859-1952)

PS: i'm sending this from gmail because i couldn't set up SMTP for my
gmail account (cannot find any fix for "Must issue a STARTTLS command
first").



In GNU Emacs 23.4.1 (x86_64-pc-linux-gnu, GTK+ Version 2.24.10)
 of 2012-09-08 on trouble, modified by Debian
Windowing system distributor `The X.Org Foundation', version 11.0.11204000
configured using `configure  '--build' 'x86_64-linux-gnu' '--build'
'x86_64-linux-gnu' '--prefix=/usr' '--sharedstatedir=/var/lib'
'--libexecdir=/usr/lib' '--localstatedir=/var/lib'
'--infodir=/usr/share/info' '--mandir=/usr/share/man' '--with-pop=yes'
'--enable-locallisppath=/etc/emacs23:/etc/emacs:/usr/local/share/emacs/23.4/site-lisp:/usr/local/share/emacs/site-lisp:/usr/share/emacs/23.4/site-lisp:/usr/share/emacs/site-lisp'
'--with-crt-dir=/usr/lib/x86_64-linux-gnu' '--with-x=yes'
'--with-x-toolkit=gtk' '--with-toolkit-scroll-bars'
'build_alias=x86_64-linux-gnu' 'CFLAGS=-g -O2 -fstack-protector
--param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wall
-DDEBIAN -O2' 'CPPFLAGS=-D_FORTIFY_SOURCE=2''

Important settings:
  value of $LC_ALL: nil
  value of $LC_COLLATE: nil
  value of $LC_CTYPE: nil
  value of $LC_MESSAGES: nil
  value of $LC_MONETARY: nil
  value of $LC_NUMERIC: nil
  value of $LC_TIME: nil
  value of $LANG: en_US.utf8
  value of $XMODIFIERS: nil
  locale-coding-system: utf-8-unix
  default enable-multibyte-characters: t




Information forwarded to bug-gnu-emacs <at> gnu.org, bugs <at> gnus.org:
bug#19585; Package emacs,gnus. (Wed, 25 Jan 2017 21:15:02 GMT) Full text and rfc822 format available.

Message #8 received at 19585 <at> debbugs.gnu.org (full text, mbox):

From: Lars Ingebrigtsen <larsi <at> gnus.org>
To: Attila Lendvai <attila <at> lendvai.name>
Cc: 19585 <at> debbugs.gnu.org
Subject: Re: bug#19585: 23.4;
 message-mode quietly saves plaintext in draft folder (potentially
 remote IMAP servers)
Date: Wed, 25 Jan 2017 22:13:54 +0100
Attila Lendvai <attila <at> lendvai.name> writes:

> i have a gmail+gnus setup. when a message is marked to be encrypted in
> message-mode (with a <#secure ...> tag) then drafts of the message end
> up being saved quietly in cleartext to the gmail drafts folder.
>
> i propose to change the defaults so that drafts are either saved
> encrypted (to the sender as recipient, so that it can be decrypted for
> further editing), or at least a warning should be shown to the user
> before saving the message in cleartext.

Yes, that would seem to be unwanted behaviour.  Does anybody who knows
more about the encrypted mail part have any idea how to fix this problem?

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no




Information forwarded to bug-gnu-emacs <at> gnu.org, bugs <at> gnus.org:
bug#19585; Package emacs,gnus. (Mon, 23 Sep 2019 11:44:01 GMT) Full text and rfc822 format available.

Message #11 received at 19585 <at> debbugs.gnu.org (full text, mbox):

From: Lars Ingebrigtsen <larsi <at> gnus.org>
To: Attila Lendvai <attila <at> lendvai.name>
Cc: 19585 <at> debbugs.gnu.org
Subject: Re: bug#19585: 23.4; message-mode quietly saves plaintext in draft
 folder (potentially remote IMAP servers)
Date: Mon, 23 Sep 2019 13:43:14 +0200
Attila Lendvai <attila <at> lendvai.name> writes:

> i have a gmail+gnus setup. when a message is marked to be encrypted in
> message-mode (with a <#secure ...> tag) then drafts of the message end
> up being saved quietly in cleartext to the gmail drafts folder.

I'm not quite sure I understand.  How does the draft end up in Gmail in
the first place?  I didn't think Gnus supported storing the drafts on an
IMAP server?

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no




Added tag(s) moreinfo. Request was from Lars Ingebrigtsen <larsi <at> gnus.org> to control <at> debbugs.gnu.org. (Mon, 23 Sep 2019 11:44:02 GMT) Full text and rfc822 format available.

Information forwarded to bug-gnu-emacs <at> gnu.org, bugs <at> gnus.org:
bug#19585; Package emacs,gnus. (Mon, 23 Sep 2019 17:07:02 GMT) Full text and rfc822 format available.

Message #16 received at 19585 <at> debbugs.gnu.org (full text, mbox):

From: Attila Lendvai <attila <at> lendvai.name>
To: Lars Ingebrigtsen <larsi <at> gnus.org>
Cc: 19585 <at> debbugs.gnu.org
Subject: Re: bug#19585: 23.4; message-mode quietly saves plaintext in draft
 folder (potentially remote IMAP servers)
Date: Mon, 23 Sep 2019 19:06:19 +0200
> > i have a gmail+gnus setup. when a message is marked to be encrypted in
> > message-mode (with a <#secure ...> tag) then drafts of the message end
> > up being saved quietly in cleartext to the gmail drafts folder.
>
> I'm not quite sure I understand.  How does the draft end up in Gmail in
> the first place?  I didn't think Gnus supported storing the drafts on an
> IMAP server?

unfortunately i don't remember the details anymore.

i suspect what happened was something like this: i configured
gmail/IMAP as the "backend" for gnus, and the local draft folder got
linked to the gmail/IMAP draft folder.

keep in mind that i'm not an expert in gnus. i was in the process of
evaluating whether to move my emailing over to emacs when this
happened.

-- 
• attila lendvai
• PGP: 963F 5D5F 45C7 DFCD 0A39
--
“It isn't enough to say: "I was mistaken"; one must say how one was mistaken.”
— Claude Bernard (1813–1878), paraphrased




Information forwarded to bug-gnu-emacs <at> gnu.org, bugs <at> gnus.org:
bug#19585; Package emacs,gnus. (Wed, 25 Sep 2019 12:58:02 GMT) Full text and rfc822 format available.

Message #19 received at 19585 <at> debbugs.gnu.org (full text, mbox):

From: Lars Ingebrigtsen <larsi <at> gnus.org>
To: Attila Lendvai <attila <at> lendvai.name>
Cc: 19585 <at> debbugs.gnu.org
Subject: Re: bug#19585: 23.4; message-mode quietly saves plaintext in draft
 folder (potentially remote IMAP servers)
Date: Wed, 25 Sep 2019 14:57:11 +0200
Attila Lendvai <attila <at> lendvai.name> writes:

>> I'm not quite sure I understand.  How does the draft end up in Gmail in
>> the first place?  I didn't think Gnus supported storing the drafts on an
>> IMAP server?
>
> unfortunately i don't remember the details anymore.
>
> i suspect what happened was something like this: i configured
> gmail/IMAP as the "backend" for gnus, and the local draft folder got
> linked to the gmail/IMAP draft folder.

I've had another look at the gnus-draft code, and it hard-codes
"nndraft:drafts" all over the place, and that backend (as far as I can
see) only supports storing drafts locally on disk.

So I don't see how this can happen.  :-)

I'm closing this bug report, but please reopen if anybody experiences
the same.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no




bug closed, send any further explanations to 19585 <at> debbugs.gnu.org and Attila Lendvai <attila <at> lendvai.name> Request was from Lars Ingebrigtsen <larsi <at> gnus.org> to control <at> debbugs.gnu.org. (Wed, 25 Sep 2019 12:58:02 GMT) Full text and rfc822 format available.

bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Thu, 24 Oct 2019 11:24:10 GMT) Full text and rfc822 format available.

This bug report was last modified 5 years and 298 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.