holger krekel 285e8b08d8 feat: add enforce_outer_from_key_alignment config for bots using addresses as identity ...

If enabled (default is disabled) the processing of encrypted messages changes:

- the outer From address must be listed as a relay address in the signing key,
  otherwise the message is trashed,

- the sender contact keeps the outer From address instead of adopting
  the one from the encrypted part.

Otherwise an attacker sending from their own relay-enforced address,
with their own unmodified key, puts the victim's address into the
encrypted From header and the contact address becomes the victim's.

Arguably a fix: Autocrypt headers from the encrypted part are now accepted without
comparing their address to the outer From, so that a newly added relay address
is imported from the message before the check.

2026-07-20 13:40:52 +02:00

..

blob

feat: Make quality of images sent in chats more consistent

2026-06-13 10:07:56 +02:00

calls

test: use encrypted messages in more tests

2026-05-19 22:40:28 +00:00

chat

fix: Tombstone MDN before sending it (#8252)

2026-06-22 13:52:04 -03:00

config

fix: Correctly delete unneeded messages on the server; Remove "Delete Messages from Server" (delete_server_after) config option (#8240)

2026-05-22 16:45:50 +00:00

configure

feat: follow certificate check parameter in autoconfig

2026-05-28 20:18:40 +00:00

contact

test: add TestContext.allow_unencrypted()

2026-05-19 22:40:28 +00:00

context

test: add TestContext.allow_unencrypted()

2026-05-19 22:40:28 +00:00

download

feat: Send webxdc name instead of raw file name in pre-messages. Display it in summary (#7790)

2026-02-23 15:20:53 -03:00

ephemeral

test: remove timeout from pop_sent_msg_ex()

2026-06-13 23:14:13 +00:00

events

feat: add MsgReadCountChanged event

2026-06-16 11:38:07 +04:00

imap

api: Deprecate is_chatmail

2026-06-22 17:48:56 +02:00

imex

refactor: move ensure_secret_key_exists into key.rs

2026-06-21 04:18:39 +00:00

log

refactor: enable clippy::arithmetic_side_effects lint

2026-02-17 16:01:16 +00:00

message

test: add TestContext.allow_unencrypted()

2026-05-19 22:40:28 +00:00

mimefactory

refactor: remove the ability to send messages with non-standard header protection

2026-06-20 00:09:48 +00:00

mimeparser

refactor: make crate::pgp::symm_encrypt_message non-async

2026-06-20 00:36:05 +00:00

net

feat: switch to aws-lc-rs cryptography provider for Rustls

2026-06-06 09:56:31 +00:00

provider

fix: Correctly delete unneeded messages on the server; Remove "Delete Messages from Server" (delete_server_after) config option (#8240)

2026-05-22 16:45:50 +00:00

qr

refactor: Make Fingerprint not implement Display (#8177)

2026-04-27 11:22:21 +02:00

receive_imf

feat: add enforce_outer_from_key_alignment config for bots using addresses as identity

2026-07-20 13:40:52 +02:00

scheduler

fix: hide connectivity HTML quota if not supported

2026-05-20 18:11:14 +04:00

securejoin

fix: Rerun the full securejoin protocol if the address was outdated (#8358)

2026-06-25 16:59:08 +00:00

smtp

feat: do not log the recipient list for sent messages

2026-06-15 13:41:40 +00:00

sql

fix: recreate imap_markseen with PRIMARY KEY constraint

2026-06-23 03:33:33 +00:00

stats

feat: Add cryptography-related statistics (#8293)

2026-06-02 10:26:53 +02:00

stock_str

feat: adapt quota warning to automatic cleanup

2026-04-25 21:50:13 +02:00

tests

refactor: move ensure_secret_key_exists into key.rs

2026-06-21 04:18:39 +00:00

tools

feat: message info: add database msg ID

2026-05-29 15:33:14 +04:00

transport

feat: Add IMAP folder to Context::get_info() (#8285)

2026-05-31 19:59:31 -03:00

webxdc

test: remove timeout from pop_sent_msg_ex()

2026-06-13 23:14:13 +00:00

accounts.rs

chore: clippy::useless-borrows-in-formatting fixes

2026-05-12 21:28:45 +00:00

aheader.rs

refactor: Use regular functions rather than FromStr impls (#8178)

2026-04-27 11:09:01 +02:00

blob.rs

feat: Make quality of images sent in chats more consistent

2026-06-13 10:07:56 +02:00

calls.rs

refactor: replace async RwLock with sync RwLock for stock strings

2026-03-25 19:48:40 +00:00

chat.rs

fix: replace last_added_location_id with last_added_location_timestamp

2026-07-01 12:02:53 +00:00

chatlist.rs

test: add TestContext.allow_unencrypted()

2026-05-19 22:40:28 +00:00

color.rs

refactor: enable clippy::arithmetic_side_effects lint

2026-02-17 16:01:16 +00:00

config.rs

feat: add enforce_outer_from_key_alignment config for bots using addresses as identity

2026-07-20 13:40:52 +02:00

configure.rs

feat: remove ?emailaddress argument from autoconfig URL that is not using a dedicated domain

2026-06-29 18:07:17 +00:00

constants.rs

feat: remove show_emails config

2026-04-25 20:24:57 +00:00

contact.rs

refactor: Make Fingerprint not implement Display (#8177)

2026-04-27 11:22:21 +02:00

context.rs

feat: add enforce_outer_from_key_alignment config for bots using addresses as identity

2026-07-20 13:40:52 +02:00

debug_logging.rs

build: increase MSRV to 1.88.0

2025-11-16 14:48:50 +00:00

decrypt.rs

chore: update rPGP from 0.19.0 to 0.20.0

2026-06-25 16:17:24 +00:00

dehtml.rs

chore: fix clippy warnings

2026-03-25 19:53:10 +00:00

download.rs

refactor: make should_delete_all_downloaded_messages non-async

2026-05-29 08:37:21 +00:00

e2ee.rs

refactor: move ensure_secret_key_exists into key.rs

2026-06-21 04:18:39 +00:00

ephemeral.rs

feat: immediately remove all encrypted messages from the server in single-device mode

2026-05-29 08:37:21 +00:00

events.rs

perf: batched event reception

2026-02-23 15:58:06 +00:00

headerdef.rs

refactor: cleanup remaining Autocrypt Setup Message processing in mimeparser

2026-03-25 19:54:19 +00:00

html.rs

feat: MsgId::get_html: Make only one db query

2026-06-14 03:25:03 -03:00

imap.rs

feat: Remove trailing '.' from device message about receive_imf failure

2026-06-29 14:33:52 -03:00

imex.rs

refactor: move ensure_secret_key_exists into key.rs

2026-06-21 04:18:39 +00:00

internals_for_benches.rs

refactor: remove KeyPair type

2026-02-28 16:27:00 +00:00

key.rs

refactor: move ensure_secret_key_exists into key.rs

2026-06-21 04:18:39 +00:00

lib.rs

refactor: remove timesmearing

2026-06-13 15:43:47 +00:00

location.rs

fix: replace last_added_location_id with last_added_location_timestamp

2026-07-01 12:02:53 +00:00

log.rs

chore: rustfmt

2025-11-08 03:26:23 +00:00

login_param.rs

feat: follow certificate check parameter in autoconfig

2026-05-28 20:18:40 +00:00

message.rs

fix: Make pre-messages w/o text want MDNs (#8004)

2026-06-17 00:02:07 -03:00

mimefactory.rs

fix: do not put locations into pre-messages

2026-07-01 12:02:53 +00:00

mimeparser.rs

feat: add enforce_outer_from_key_alignment config for bots using addresses as identity

2026-07-20 13:40:52 +02:00

net.rs

feat: follow certificate check parameter in autoconfig

2026-05-28 20:18:40 +00:00

oauth2.rs

refactor: enable clippy::arithmetic_side_effects lint

2026-02-17 16:01:16 +00:00

param.rs

chore: deprecate unused SkipAutocrypt param

2026-06-21 04:18:20 +00:00

peer_channels.rs

fix: Return early from receive_imf to not tombstone Iroh-Node-Addr message if webxdc instance isn't found (#8372)

2026-06-29 14:33:52 -03:00

pgp.rs

chore: update rPGP from 0.19.0 to 0.20.0

2026-06-25 16:17:24 +00:00

plaintext.rs

fix: use correct dir converting plaintext to HTML (#8248)

2026-05-15 23:11:33 +02:00

provider.rs

fix: remove Config::DeleteToTrash and Config::ConfiguredTrashFolder

2026-02-03 18:31:55 +00:00

push.rs

feat: improve IMAP loop logs

2026-03-25 20:31:53 +00:00

qr_code_generator.rs

chore: clippy::useless-borrows-in-formatting fixes

2026-05-12 21:28:45 +00:00

qr.rs

fix: Rerun the full securejoin protocol if the address was outdated (#8358)

2026-06-25 16:59:08 +00:00

quota.rs

fix: hide connectivity HTML quota if not supported

2026-05-20 18:11:14 +04:00

reaction.rs

test: add TestContext.allow_unencrypted()

2026-05-19 22:40:28 +00:00

receive_imf.rs

fix: Return early from receive_imf to not tombstone Iroh-Node-Addr message if webxdc instance isn't found (#8372)

2026-06-29 14:33:52 -03:00

release.rs

refactor: replace once_cell::sync::Lazy with std::sync::LazyLock

2025-04-04 20:51:37 +00:00

scheduler.rs

feat: Remove imap::Session::sync_seen_flags() (#7742)

2026-06-17 21:02:27 -03:00

securejoin.rs

fix: Rerun the full securejoin protocol if the address was outdated (#8358)

2026-06-25 16:59:08 +00:00

simplify.rs

ci: update Rust to 1.95.0

2026-04-17 15:24:24 +00:00

smtp.rs

fix: Tombstone MDN before sending it (#8252)

2026-06-22 13:52:04 -03:00

sql.rs

api!(location): avoid repeating module name in function names

2026-04-27 03:12:26 +00:00

stats.rs

feat: Add number_of_keys to statistics (#8297)

2026-06-03 12:36:31 +02:00

stock_str.rs

fix: hide connectivity HTML quota if not supported

2026-05-20 18:11:14 +04:00

storage_usage.rs

refactor: enable clippy::arithmetic_side_effects lint

2026-02-17 16:01:16 +00:00

summary.rs

refactor: replace async RwLock with sync RwLock for stock strings

2026-03-25 19:48:40 +00:00

sync.rs

feat: add option to force encryption

2026-05-19 22:40:28 +00:00

test_utils.rs

feat: add enforce_outer_from_key_alignment config for bots using addresses as identity

2026-07-20 13:40:52 +02:00

tests.rs

feat: pre-messages / next version of download on demand (#7371)

2026-01-08 22:14:32 +00:00

token.rs

fix: Drop messages encrypted with the wrong symmetric secret (#7963)

2026-03-12 18:59:19 +00:00

tools.rs

refactor: remove timesmearing

2026-06-13 15:43:47 +00:00

transport.rs

feat: Add IMAP folder to Context::get_info() (#8285)

2026-05-31 19:59:31 -03:00

update_helper.rs

test: use encrypted messages in more tests

2026-05-19 22:40:28 +00:00

webxdc.rs

refactor: remove timesmearing

2026-06-13 15:43:47 +00:00