Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-17544

Display of email messages corrupts inline PGP signatures

    XMLWordPrintable

Details

    Description

      Rather than rendering email in a <pre>...</pre> block, Confluence "html-ifies" plain-text email messages. If a message contains an inline PGP signature, this corrupts the message so that the signature can no longer be verified. Ideally, it should be possible to do something like:

      curl http://confluence.example.com/display/SPACENAME/mail/xxxxxx | gpg --verify

      Or for a plugin like FireGPG to verify inline signatures. Because of the modifications Confluence makes to email this is not possible.

      This has become an issue locally because we are using the mail archive feature to archive PGP signed messages, and we are presenting them to a tech- and security-savvy user community.

      Attachments

        Activity

          People

            barconati BillA
            58fd44731c89 Lars Kellogg-Stedman
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: