Windows 10 reached EOS (end of support) on October 14, 2025. If you are on Windows 10, see this article.

Pretraži podršku

Izbjegni prevare podrške. Nikad te nećemo tražiti da nas nazoveš, da nam pošalješ telefonski broj ili da podijeliš osobne podatke. Prijavi sumnjive radnje pomoću opcije „Prijavi zlouporabu”.

Saznaj više
Open

OpenPGP breaks for newline in html-formatted signature

6eorgeLucas

Environment:

Thunderbird for Android: 24.0 OpenKeychain: 6.0.4 (60400) Android Version: 17 Andorid Build: CP3A.261005.002.A1

When sending a PGP/MIME-signed message from Thunderbird for Android, the OpenPGP signature becomes invalid when an HTML-formatted signature contains markup that enforces line breaks.

A plain newline in the HTML source does not create a visible line break, as expected because HTML collapses whitespace.

However, adding any of the following causes the signature to become invalid:


 

The first and second are used to create a normal line break and the third is used to create an empty spacing line.

Inline HTML formatting, such as or <a>, does not cause the problem.

Expected result:

HTML line-break elements should be included in the content covered by the OpenPGP signature, and the signature should remain valid.

Actual result:

The message is sent successfully, but the received OpenPGP signature cannot be verified whenever the HTML signature contains markup for a line break or empty spacing line.

The issue does not occur when the signature contains only text and inline formatting. Raw .eml samples can be provided if needed.

Environment: Thunderbird for Android: 24.0 OpenKeychain: 6.0.4 (60400) Android Version: 17 Andorid Build: CP3A.261005.002.A1 When sending a PGP/MIME-signed message from Thunderbird for Android, the OpenPGP signature becomes invalid when an HTML-formatted signature contains markup that enforces line breaks. A plain newline in the HTML source does not create a visible line break, as expected because HTML collapses whitespace. However, adding any of the following causes the signature to become invalid: <br> <div></div> <div>&nbsp;</div> The first and second are used to create a normal line break and the third is used to create an empty spacing line. Inline HTML formatting, such as <strong> or <a>, does not cause the problem. Expected result: HTML line-break elements should be included in the content covered by the OpenPGP signature, and the signature should remain valid. Actual result: The message is sent successfully, but the received OpenPGP signature cannot be verified whenever the HTML signature contains markup for a line break or empty spacing line. The issue does not occur when the signature contains only text and inline formatting. Raw .eml samples can be provided if needed.

Svi odgovori (2)

I meant to write b-tag or a-tag I didnt mean to write in bold of course

Hi George

I'd recommend you open a new issue ticket on Github to report the bug. https://github.com/thunderbird/thunderbird-android/issues

Postavi pitanje

Za odgovaranje na poruke moraš se prijaviti na tvoj račun. Postavi novo pitanje, ako još nemaš račun.