Re: Fire 1.5.2rc1 Critical GPG Bug

Jason Townsend <[email protected]> Thu, 28 Apr 2005 21:38:23 -0700
Newsgroups gmane.network.fire.devel
Message-ID <[email protected]>
--Apple-Mail-2--996649643
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
	charset=US-ASCII;
	format=flowed

On Apr 27, 2005, at 2:39 PM, Michael Diehr wrote:
> On Apr 27, 2005, at 11:02 AM, Colter Reed wrote:
>> On Apr 27, 2005, at 10:54 AM, Michael Diehr wrote:
>>> I just tried Fire 1.5.2rc1 on Mac OS X 10.3.9 with a Jabber account, 
>>> and unfortunately it still contains the awful GPG bug:  Fire claims 
>>> to be using Encryption + Signing (Red Lock Icon) but is in fact 
>>> sending messages in Plain Text.
>>
>> Is this just with Jabber or with any service?
>>
>> Colter
>
> I don't have anyone set up with GPG on AIM, so I can't test 
> Encryption, but I just tested sending a Signed message via AIM, and it 
> was indeed sent as a GPG packet.
>
> So, this might be a Jabber-only bug?

This is a Jabber only bug and it has to do with the interaction between 
our encryption and the new Jabber library which handles the message 
transmission differently than the other services since the library is 
now Objective C based.

I'll take a look at this problem and see if it's something we can get a 
quick fix for.

-Jason

--Apple-Mail-2--996649643
Content-Transfer-Encoding: base64
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Disposition: attachment;
	filename=smime.p7s
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--Apple-Mail-2--996649643--



-------------------------------------------------------
SF.Net email is sponsored by: Tell us your software development plans!
Take this survey and enter to win a one-year sub to SourceForge.net
Plus IDC's 2005 look-ahead and a copy of this survey
Click here to start!  http://www.idcswdc.com/cgi-bin/survey?id=105hix