Opened 8 years ago

Closed 5 years ago

#6315 closed defect (fixed)

prevent leak via Message-ID header field (local timestamp disclosure)

Reported by: tagnaq Owned by: ioerror
Priority: High Milestone:
Component: Applications/TorBirdy Version:
Severity: Normal Keywords:
Cc: sukhbir, intrigeri Actual Points:
Parent ID: #9131 Points:
Reviewer: Sponsor:


Emails send with TorBirdy installed are currently leaking local timestamp information via the Message-ID header field.

Sukhbir is preparing a patch for Thunderbird that will modify the Message-ID format to a time-independent version as described in chapter 4.2.3:

Child Tickets

Change History (9)

comment:1 Changed 8 years ago by ioerror

Is there an upstream bug number for this in Mozilla's bug tracker?

comment:4 Changed 7 years ago by sukhbir

Keywords: SponsorT added

comment:5 Changed 7 years ago by sukhbir

Parent ID: #9131

comment:7 Changed 6 years ago by intrigeri

Cc: intrigeri added

comment:8 Changed 5 years ago by sukhbir

Keywords: SponsorT removed

comment:9 Changed 5 years ago by arthuredelstein

Resolution: fixed
Severity: Normal
Status: newclosed
Note: See TracTickets for help on using tickets.