Skip to content

Don't degrade encryption when MDN is received#5152

Merged
link2xt merged 3 commits intomainfrom
link2xt/read-receipt-dont-degrade-encryption
Jan 5, 2024
Merged

Don't degrade encryption when MDN is received#5152
link2xt merged 3 commits intomainfrom
link2xt/read-receipt-dont-degrade-encryption

Conversation

@link2xt
Copy link
Collaborator

@link2xt link2xt commented Jan 5, 2024

I changed MDN structure to have multipart/report on the outer side and added regression test.

Fixes #5150
Fixes #5151

@link2xt link2xt marked this pull request as ready for review January 5, 2024 01:42
@link2xt link2xt force-pushed the link2xt/read-receipt-dont-degrade-encryption branch 2 times, most recently from e8bcff6 to 5818463 Compare January 5, 2024 02:16
Copy link
Collaborator

@iequidoo iequidoo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe it would be nice to have a Rust test on the MDN structure also

This is broken since 44227d7
mimeparser only recognizes read receipts
by the Content-Type being "multipart/report".
If multipart/report is hidden inside multipart/mixed
and the message is not encrypted,
it degrades encryption.
@link2xt link2xt force-pushed the link2xt/read-receipt-dont-degrade-encryption branch from 5818463 to 3bcdd17 Compare January 5, 2024 15:34
@link2xt link2xt merged commit 3bcdd17 into main Jan 5, 2024
@link2xt link2xt deleted the link2xt/read-receipt-dont-degrade-encryption branch January 5, 2024 15:35
Septias added a commit that referenced this pull request Jan 12, 2024
This PR stops MDNs from being forced to be sent unencrypted. 
If no encryption is possible (by `should_encrypt`), the fix #5152 still
applies.

close #5168
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Changed MDN structure is not recognized by chatmail servers Read receipts break encryption in non-verified 1:1 chats

2 participants

Comments