<feed xmlns='http://www.w3.org/2005/Atom'>
<title>leap_mail.git/src/leap/mail/incoming, branch develop</title>
<subtitle>[leap_mail] 
</subtitle>
<link rel='alternate' type='text/html' href='https://leap.se/git/leap_mail.git/'/>
<entry>
<title>[feat] Remove senders X-Leap-* headers if the email came with them</title>
<updated>2016-08-01T17:08:56+00:00</updated>
<author>
<name>Ruben Pollan</name>
<email>meskio@sindominio.net</email>
</author>
<published>2016-08-01T16:51:08+00:00</published>
<link rel='alternate' type='text/html' href='https://leap.se/git/leap_mail.git/commit/?id=f39a5284ee208a8ba8194b4317b77114e38d73d9'/>
<id>f39a5284ee208a8ba8194b4317b77114e38d73d9</id>
<content type='text'>
We use the X-Leap-Signature and X-Leap-Encryption to signal the
signature and encryption status of emails. An attacker could add this
headers and trick bitmask to believe that the email was signed and/or
encrypted. Now we remove this headers from the original email if they
are present before adding ours.

- Resolves: #7429
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
We use the X-Leap-Signature and X-Leap-Encryption to signal the
signature and encryption status of emails. An attacker could add this
headers and trick bitmask to believe that the email was signed and/or
encrypted. Now we remove this headers from the original email if they
are present before adding ours.

- Resolves: #7429
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge branch 'pixelated/fix_sign_apple_mail' into develop</title>
<updated>2016-06-08T14:47:29+00:00</updated>
<author>
<name>Ruben Pollan</name>
<email>meskio@sindominio.net</email>
</author>
<published>2016-06-08T14:47:29+00:00</published>
<link rel='alternate' type='text/html' href='https://leap.se/git/leap_mail.git/commit/?id=736ea864f0b6e8148ecca7f003f8d6997319c3b3'/>
<id>736ea864f0b6e8148ecca7f003f8d6997319c3b3</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge branch 'pixelated/fix_test_decrypt_email' into develop</title>
<updated>2016-06-07T19:02:17+00:00</updated>
<author>
<name>Ruben Pollan</name>
<email>meskio@sindominio.net</email>
</author>
<published>2016-06-07T19:02:17+00:00</published>
<link rel='alternate' type='text/html' href='https://leap.se/git/leap_mail.git/commit/?id=c3ecebbd26637e628047d71cd1ddd9338efbdc60'/>
<id>c3ecebbd26637e628047d71cd1ddd9338efbdc60</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>[refactor] change the check to validate signature from Apple Mail</title>
<updated>2016-05-25T19:11:34+00:00</updated>
<author>
<name>Caio Carrara</name>
<email>ccarrara@thoughtworks.com</email>
</author>
<published>2016-05-25T19:11:34+00:00</published>
<link rel='alternate' type='text/html' href='https://leap.se/git/leap_mail.git/commit/?id=1a6aa67ea31b4bedb2a59a84659f7e19b385ec12'/>
<id>1a6aa67ea31b4bedb2a59a84659f7e19b385ec12</id>
<content type='text'>
It changes the way that incoming service checks if a additional
verification is needed to validate signature. The way before was
checking by the type of signature object and calling the verify
signature method if the type is different from OpenPGPKey. However it
could be more readable if we check the type of decrypted message. If
it's a multipart/signed message and not a plain/text we need to verify
the signature because keymanager couldn't do it during the decryption
process.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
It changes the way that incoming service checks if a additional
verification is needed to validate signature. The way before was
checking by the type of signature object and calling the verify
signature method if the type is different from OpenPGPKey. However it
could be more readable if we check the type of decrypted message. If
it's a multipart/signed message and not a plain/text we need to verify
the signature because keymanager couldn't do it during the decryption
process.
</pre>
</div>
</content>
</entry>
<entry>
<title>[tests] add test to validate signature from apple mail</title>
<updated>2016-05-24T18:56:00+00:00</updated>
<author>
<name>Caio Carrara</name>
<email>ccarrara@thoughtworks.com</email>
</author>
<published>2016-05-24T18:56:00+00:00</published>
<link rel='alternate' type='text/html' href='https://leap.se/git/leap_mail.git/commit/?id=ff75ceecbff76bc9142516c198d726422c050797'/>
<id>ff75ceecbff76bc9142516c198d726422c050797</id>
<content type='text'>
This change adds test to validate signature of encrypted email created
by apple mail. It's important to note that apple mail has a specific way
to encrypt signed messages. First it sign the email and then encrypt the
previous signed message. It was also added a message file with the
expected data.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This change adds test to validate signature of encrypted email created
by apple mail. It's important to note that apple mail has a specific way
to encrypt signed messages. First it sign the email and then encrypt the
previous signed message. It was also added a message file with the
expected data.
</pre>
</div>
</content>
</entry>
<entry>
<title>[feat] Adapt to the new KeyManager API without key types.</title>
<updated>2016-05-18T20:58:19+00:00</updated>
<author>
<name>Ruben Pollan</name>
<email>meskio@sindominio.net</email>
</author>
<published>2016-05-03T14:49:38+00:00</published>
<link rel='alternate' type='text/html' href='https://leap.se/git/leap_mail.git/commit/?id=a681acde5bdd757ea7be33426660c0cb41cf01d8'/>
<id>a681acde5bdd757ea7be33426660c0cb41cf01d8</id>
<content type='text'>
- Related: #8031
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
- Related: #8031
</pre>
</div>
</content>
</entry>
<entry>
<title>Add not called asserts to testDecryptEmail</title>
<updated>2016-05-18T20:17:21+00:00</updated>
<author>
<name>Thais Siqueira</name>
<email>thais.siqueira@gmail.com</email>
</author>
<published>2016-05-18T20:17:21+00:00</published>
<link rel='alternate' type='text/html' href='https://leap.se/git/leap_mail.git/commit/?id=736edc16f5ce9d977586d25d60f423ac9d847b15'/>
<id>736edc16f5ce9d977586d25d60f423ac9d847b15</id>
<content type='text'>
The functions decryption_error_not_called and add_decrypted_header_called
were not being called on testDecryptEmail. So the asserts was not being
called as well.

This change adds the above functions as callbacks to be called after the
fetch method.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The functions decryption_error_not_called and add_decrypted_header_called
were not being called on testDecryptEmail. So the asserts was not being
called as well.

This change adds the above functions as callbacks to be called after the
fetch method.
</pre>
</div>
</content>
</entry>
<entry>
<title>[bug] verify signature of encrypted email from Apple Mail</title>
<updated>2016-05-16T20:38:46+00:00</updated>
<author>
<name>Thais Siqueira</name>
<email>thais.siqueira@gmail.com</email>
</author>
<published>2016-05-16T20:38:46+00:00</published>
<link rel='alternate' type='text/html' href='https://leap.se/git/leap_mail.git/commit/?id=64f1342d0f8ab27a95624b561b52eb8c2003e771'/>
<id>64f1342d0f8ab27a95624b561b52eb8c2003e771</id>
<content type='text'>
Fix verify signature on encrypted email from Apple Mail, adding a step
to verify signature after decrypt the email because the keymananger
could not verify signature when decrypting it
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Fix verify signature on encrypted email from Apple Mail, adding a step
to verify signature after decrypt the email because the keymananger
could not verify signature when decrypting it
</pre>
</div>
</content>
</entry>
<entry>
<title>[refactor] change IMAPAccount signature</title>
<updated>2016-04-15T20:11:18+00:00</updated>
<author>
<name>Kali Kaneko</name>
<email>kali@leap.se</email>
</author>
<published>2016-04-15T20:06:56+00:00</published>
<link rel='alternate' type='text/html' href='https://leap.se/git/leap_mail.git/commit/?id=ec0183a792223e6acd8343beb0e5ba1bf3df43b1'/>
<id>ec0183a792223e6acd8343beb0e5ba1bf3df43b1</id>
<content type='text'>
for consistency with the previous Account change.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
for consistency with the previous Account change.
</pre>
</div>
</content>
</entry>
<entry>
<title>[bug] Decode attached keys so they are recognized by keymanager</title>
<updated>2016-03-24T16:04:41+00:00</updated>
<author>
<name>Ruben Pollan</name>
<email>meskio@sindominio.net</email>
</author>
<published>2016-03-20T18:52:46+00:00</published>
<link rel='alternate' type='text/html' href='https://leap.se/git/leap_mail.git/commit/?id=13927ac178c00b729d8d660107f72d878879a5c3'/>
<id>13927ac178c00b729d8d660107f72d878879a5c3</id>
<content type='text'>
- Resolves: #7977
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
- Resolves: #7977
</pre>
</div>
</content>
</entry>
</feed>
