Windows 10 reached EOS (end of support) on October 14, 2025. If you are on Windows 10, see this article.

Søg i Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Læs mere
Åben

OpenPGP breaks for newline in html-formatted signature

6eorgeLucas

Environment:

Thunderbird for Android: 24.0 OpenKeychain: 6.0.4 (60400) Android Version: 17 Andorid Build: CP3A.261005.002.A1

When sending a PGP/MIME-signed message from Thunderbird for Android, the OpenPGP signature becomes invalid when an HTML-formatted signature contains markup that enforces line breaks.

A plain newline in the HTML source does not create a visible line break, as expected because HTML collapses whitespace.

However, adding any of the following causes the signature to become invalid:


 

The first and second are used to create a normal line break and the third is used to create an empty spacing line.

Inline HTML formatting, such as or <a>, does not cause the problem.

Expected result:

HTML line-break elements should be included in the content covered by the OpenPGP signature, and the signature should remain valid.

Actual result:

The message is sent successfully, but the received OpenPGP signature cannot be verified whenever the HTML signature contains markup for a line break or empty spacing line.

The issue does not occur when the signature contains only text and inline formatting. Raw .eml samples can be provided if needed.

Environment: Thunderbird for Android: 24.0 OpenKeychain: 6.0.4 (60400) Android Version: 17 Andorid Build: CP3A.261005.002.A1 When sending a PGP/MIME-signed message from Thunderbird for Android, the OpenPGP signature becomes invalid when an HTML-formatted signature contains markup that enforces line breaks. A plain newline in the HTML source does not create a visible line break, as expected because HTML collapses whitespace. However, adding any of the following causes the signature to become invalid: <br> <div></div> <div>&nbsp;</div> The first and second are used to create a normal line break and the third is used to create an empty spacing line. Inline HTML formatting, such as <strong> or <a>, does not cause the problem. Expected result: HTML line-break elements should be included in the content covered by the OpenPGP signature, and the signature should remain valid. Actual result: The message is sent successfully, but the received OpenPGP signature cannot be verified whenever the HTML signature contains markup for a line break or empty spacing line. The issue does not occur when the signature contains only text and inline formatting. Raw .eml samples can be provided if needed.

Alle svar (2)

I meant to write b-tag or a-tag I didnt mean to write in bold of course

Hi George

I'd recommend you open a new issue ticket on Github to report the bug. https://github.com/thunderbird/thunderbird-android/issues

Stil et spørgsmål

Du skal logge ind på din konto for at svare på et indlæg. Start et nyt spørgsmål, hvis du ikke har en konto endnu.