Page MenuHomePhabricator

Mask the sender for "Must Encrypt" mail
ClosedPublic

Authored by epriestley on Feb 6 2018, 12:34 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sat, Mar 23, 5:01 AM
Unknown Object (File)
Sat, Mar 23, 5:01 AM
Unknown Object (File)
Sun, Mar 10, 4:09 PM
Unknown Object (File)
Sun, Mar 10, 1:48 AM
Unknown Object (File)
Feb 4 2024, 10:01 AM
Unknown Object (File)
Jan 16 2024, 5:08 PM
Unknown Object (File)
Jan 12 2024, 4:43 PM
Unknown Object (File)
Jan 1 2024, 4:49 PM
Subscribers
None

Details

Summary

Depends on D18998. Ref T13053. When we send "Must Encrypt" mail, we currently send it with a normal "From" address.

This discloses a little information about the object (for example, if the Director of Silly Walks is interacting with a "must encrypt" object, the vulnerability is probably related to Silly Walks), so anonymize who is interacting with the object.

Test Plan

Processed some mail. (The actual final "From" is ephemeral and a little tricky to examine and I didn't actually transmit mail over the network, but it should be obvious if this works or not on secure.)

Diff Detail

Repository
rP Phabricator
Lint
Lint Not Applicable
Unit
Tests Not Applicable