GNU bug report logs - #19585
23.4; message-mode quietly saves plaintext in draft folder (potentially remote IMAP servers)

Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.

Package: emacs,gnus; Reported by: Attila Lendvai <attila@HIDDEN>; Keywords: security; dated Tue, 13 Jan 2015 17:23:01 UTC; Maintainer for emacs is bug-gnu-emacs@HIDDEN.

Message received at 19585 <at> debbugs.gnu.org:


Received: (at 19585) by debbugs.gnu.org; 25 Jan 2017 21:14:52 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Wed Jan 25 16:14:52 2017
Received: from localhost ([127.0.0.1]:43683 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1cWUu4-0002Tv-Iz
	for submit <at> debbugs.gnu.org; Wed, 25 Jan 2017 16:14:52 -0500
Received: from hermes.netfonds.no ([80.91.224.195]:46472)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <larsi@HIDDEN>) id 1cWUu3-0002Tn-3H
 for 19585 <at> debbugs.gnu.org; Wed, 25 Jan 2017 16:14:51 -0500
Received: from 2.150.50.220.tmi.telenormobil.no ([2.150.50.220] helo=mouse)
 by hermes.netfonds.no with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <larsi@HIDDEN>)
 id 1cWUu0-00026X-7S; Wed, 25 Jan 2017 22:14:50 +0100
From: Lars Ingebrigtsen <larsi@HIDDEN>
To: Attila Lendvai <attila@HIDDEN>
Subject: Re: bug#19585: 23.4;
 message-mode quietly saves plaintext in draft folder (potentially
 remote IMAP servers)
In-Reply-To: <CAE4vfcJo8VBq0OX+Q3oiS-4WezzD7=bB81Ugr6ucdWv9nvnxag@HIDDEN>
 (Attila Lendvai's message of "Tue, 13 Jan 2015 17:49:45 +0100")
Date: Wed, 25 Jan 2017 22:13:54 +0100
Message-ID: <87wpdider1.fsf@HIDDEN>
References: <CAE4vfcJo8VBq0OX+Q3oiS-4WezzD7=bB81Ugr6ucdWv9nvnxag@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.50 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 19585
Cc: 19585 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.0 (/)

Attila Lendvai <attila@HIDDEN> writes:

> i have a gmail+gnus setup. when a message is marked to be encrypted in
> message-mode (with a <#secure ...> tag) then drafts of the message end
> up being saved quietly in cleartext to the gmail drafts folder.
>
> i propose to change the defaults so that drafts are either saved
> encrypted (to the sender as recipient, so that it can be decrypted for
> further editing), or at least a warning should be shown to the user
> before saving the message in cleartext.

Yes, that would seem to be unwanted behaviour.  Does anybody who knows
more about the encrypted mail part have any idea how to fix this problem?

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no




Information forwarded to bug-gnu-emacs@HIDDEN, bugs@HIDDEN:
bug#19585; Package emacs,gnus. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 13 Jan 2015 17:22:19 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Tue Jan 13 12:22:19 2015
Received: from localhost ([127.0.0.1]:55677 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.80)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1YB5AY-0005uP-TD
	for submit <at> debbugs.gnu.org; Tue, 13 Jan 2015 12:22:19 -0500
Received: from eggs.gnu.org ([208.118.235.92]:37025)
 by debbugs.gnu.org with esmtp (Exim 4.80)
 (envelope-from <attila.lendvai@HIDDEN>) id 1YB4fi-00058N-5R
 for submit <at> debbugs.gnu.org; Tue, 13 Jan 2015 11:50:26 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <attila.lendvai@HIDDEN>) id 1YB4fb-0007wC-NN
 for submit <at> debbugs.gnu.org; Tue, 13 Jan 2015 11:50:20 -0500
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,FREEMAIL_FROM,
 T_DKIM_INVALID autolearn=disabled version=3.3.2
Received: from lists.gnu.org ([2001:4830:134:3::11]:58958)
 by eggs.gnu.org with esmtp (Exim 4.71)
 (envelope-from <attila.lendvai@HIDDEN>) id 1YB4fb-0007w6-J2
 for submit <at> debbugs.gnu.org; Tue, 13 Jan 2015 11:50:19 -0500
Received: from eggs.gnu.org ([2001:4830:134:3::10]:38736)
 by lists.gnu.org with esmtp (Exim 4.71)
 (envelope-from <attila.lendvai@HIDDEN>) id 1YB4fa-0007bp-Ke
 for bug-gnu-emacs@HIDDEN; Tue, 13 Jan 2015 11:50:19 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <attila.lendvai@HIDDEN>) id 1YB4fZ-0007vc-CC
 for bug-gnu-emacs@HIDDEN; Tue, 13 Jan 2015 11:50:18 -0500
Received: from mail-ie0-x22e.google.com ([2607:f8b0:4001:c03::22e]:35216)
 by eggs.gnu.org with esmtp (Exim 4.71)
 (envelope-from <attila.lendvai@HIDDEN>) id 1YB4fZ-0007vS-61
 for bug-gnu-emacs@HIDDEN; Tue, 13 Jan 2015 11:50:17 -0500
Received: by mail-ie0-f174.google.com with SMTP id at20so3826510iec.5
 for <bug-gnu-emacs@HIDDEN>; Tue, 13 Jan 2015 08:50:16 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=mime-version:sender:from:date:message-id:subject:to:content-type;
 bh=VyFE9TIavDUrlJMDBynDqaq1icPG5ugHa0KwJn3ep6s=;
 b=021CXWPotTgr2hDL6HCcjiBRXrZU1hX8AOf+9rZdpYRMI5WXZ2A7O9fld/qrf8MY6y
 EPs2fo6GEhvshqRCBOFTDJ8qOGLq+jDY7kvXSiRVG9KpTlhYr+PhNXwdkZaEKhlL/CNI
 tRHxYlyHjR0egeQSvMopLR53NowyAogHfjGYql8OE/mmwtW+ffTjI5M2G2faSkUNUoFw
 ty4n2seEPAcNAIbLefMrXBM8a0mGSUNe2XP10vk8ijcip+isJ4mQtaTNOacjfqjMmEa6
 KBHo15kKRpqqnYnlqybEh8OG7VCoCImSEFgHAuJLWnlphBIPYpzY+GX3kX5oO7ohXbrM
 r2EQ==
X-Received: by 10.50.102.4 with SMTP id fk4mr21240509igb.28.1421167816139;
 Tue, 13 Jan 2015 08:50:16 -0800 (PST)
MIME-Version: 1.0
Received: by 10.107.151.71 with HTTP; Tue, 13 Jan 2015 08:49:45 -0800 (PST)
From: Attila Lendvai <attila@HIDDEN>
Date: Tue, 13 Jan 2015 17:49:45 +0100
X-Google-Sender-Auth: UtXUyHfR2rOS3zAKlpmpWn9T3_g
Message-ID: <CAE4vfcJo8VBq0OX+Q3oiS-4WezzD7=bB81Ugr6ucdWv9nvnxag@HIDDEN>
Subject: 23.4; message-mode quietly saves plaintext in draft folder
 (potentially remote IMAP servers)
To: bug-gnu-emacs@HIDDEN
Content-Type: text/plain; charset=UTF-8
X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address
 (bad octet value).
X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address
 (bad octet value).
X-Received-From: 2001:4830:134:3::11
X-Spam-Score: -4.0 (----)
X-Debbugs-Envelope-To: submit
X-Mailman-Approved-At: Tue, 13 Jan 2015 12:22:18 -0500
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -4.0 (----)

i have a gmail+gnus setup. when a message is marked to be encrypted in
message-mode (with a <#secure ...> tag) then drafts of the message end
up being saved quietly in cleartext to the gmail drafts folder.

i propose to change the defaults so that drafts are either saved
encrypted (to the sender as recipient, so that it can be decrypted for
further editing), or at least a warning should be shown to the user
before saving the message in cleartext.

thank you for all your efforts, past, present, and future!

-- 
- attila lendvai
- PGP: 963F 5D5F 45C7 DFCD 0A39
--
"We do not learn from experience... we learn from reflecting on experience."
- John Dewey (1859-1952)

PS: i'm sending this from gmail because i couldn't set up SMTP for my
gmail account (cannot find any fix for "Must issue a STARTTLS command
first").



In GNU Emacs 23.4.1 (x86_64-pc-linux-gnu, GTK+ Version 2.24.10)
 of 2012-09-08 on trouble, modified by Debian
Windowing system distributor `The X.Org Foundation', version 11.0.11204000
configured using `configure  '--build' 'x86_64-linux-gnu' '--build'
'x86_64-linux-gnu' '--prefix=/usr' '--sharedstatedir=/var/lib'
'--libexecdir=/usr/lib' '--localstatedir=/var/lib'
'--infodir=/usr/share/info' '--mandir=/usr/share/man' '--with-pop=yes'
'--enable-locallisppath=/etc/emacs23:/etc/emacs:/usr/local/share/emacs/23.4/site-lisp:/usr/local/share/emacs/site-lisp:/usr/share/emacs/23.4/site-lisp:/usr/share/emacs/site-lisp'
'--with-crt-dir=/usr/lib/x86_64-linux-gnu' '--with-x=yes'
'--with-x-toolkit=gtk' '--with-toolkit-scroll-bars'
'build_alias=x86_64-linux-gnu' 'CFLAGS=-g -O2 -fstack-protector
--param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wall
-DDEBIAN -O2' 'CPPFLAGS=-D_FORTIFY_SOURCE=2''

Important settings:
  value of $LC_ALL: nil
  value of $LC_COLLATE: nil
  value of $LC_CTYPE: nil
  value of $LC_MESSAGES: nil
  value of $LC_MONETARY: nil
  value of $LC_NUMERIC: nil
  value of $LC_TIME: nil
  value of $LANG: en_US.utf8
  value of $XMODIFIERS: nil
  locale-coding-system: utf-8-unix
  default enable-multibyte-characters: t




Acknowledgement sent to Attila Lendvai <attila@HIDDEN>:
New bug report received and forwarded. Copy sent to bug-gnu-emacs@HIDDEN. Full text available.
Report forwarded to bug-gnu-emacs@HIDDEN:
bug#19585; Package emacs. Full text available.
Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Last modified: Wed, 25 Jan 2017 21:30:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.