Page MenuHomePhabricator

Mask the sender for "Must Encrypt" mail
ClosedPublic

Authored by epriestley on Feb 6 2018, 12:34 PM.
Tags
None
Referenced Files
F14017832: D19000.diff
Mon, Nov 4, 11:48 PM
F13975792: D19000.id45599.diff
Fri, Oct 18, 11:39 AM
Unknown Object (File)
Oct 9 2024, 8:39 AM
Unknown Object (File)
Sep 27 2024, 3:42 AM
Unknown Object (File)
Sep 13 2024, 5:22 AM
Unknown Object (File)
Sep 13 2024, 5:18 AM
Unknown Object (File)
Sep 13 2024, 5:17 AM
Unknown Object (File)
Sep 13 2024, 5:17 AM
Subscribers
None

Details

Summary

Depends on D18998. Ref T13053. When we send "Must Encrypt" mail, we currently send it with a normal "From" address.

This discloses a little information about the object (for example, if the Director of Silly Walks is interacting with a "must encrypt" object, the vulnerability is probably related to Silly Walks), so anonymize who is interacting with the object.

Test Plan

Processed some mail. (The actual final "From" is ephemeral and a little tricky to examine and I didn't actually transmit mail over the network, but it should be obvious if this works or not on secure.)

Diff Detail

Repository
rP Phabricator
Lint
Lint Not Applicable
Unit
Tests Not Applicable