Windows 10 reached EOS (end of support) on October 14, 2025. If you are on Windows 10, see this article.

Mozilla 도움말 검색

고객 지원 사기를 피하세요. 저희는 여러분께 절대로 전화를 걸거나 문자를 보내거나 개인 정보를 공유하도록 요청하지 않습니다. "악용 사례 신고"옵션을 사용하여 의심스러운 활동을 신고해 주세요.

자세히 살펴보기
Open

OpenPGP breaks for newline in html-formatted signature

6eorgeLucas

Environment:

Thunderbird for Android: 24.0 OpenKeychain: 6.0.4 (60400) Android Version: 17 Andorid Build: CP3A.261005.002.A1

When sending a PGP/MIME-signed message from Thunderbird for Android, the OpenPGP signature becomes invalid when an HTML-formatted signature contains markup that enforces line breaks.

A plain newline in the HTML source does not create a visible line break, as expected because HTML collapses whitespace.

However, adding any of the following causes the signature to become invalid:


 

The first and second are used to create a normal line break and the third is used to create an empty spacing line.

Inline HTML formatting, such as or <a>, does not cause the problem.

Expected result:

HTML line-break elements should be included in the content covered by the OpenPGP signature, and the signature should remain valid.

Actual result:

The message is sent successfully, but the received OpenPGP signature cannot be verified whenever the HTML signature contains markup for a line break or empty spacing line.

The issue does not occur when the signature contains only text and inline formatting. Raw .eml samples can be provided if needed.

Environment: Thunderbird for Android: 24.0 OpenKeychain: 6.0.4 (60400) Android Version: 17 Andorid Build: CP3A.261005.002.A1 When sending a PGP/MIME-signed message from Thunderbird for Android, the OpenPGP signature becomes invalid when an HTML-formatted signature contains markup that enforces line breaks. A plain newline in the HTML source does not create a visible line break, as expected because HTML collapses whitespace. However, adding any of the following causes the signature to become invalid: <br> <div></div> <div>&nbsp;</div> The first and second are used to create a normal line break and the third is used to create an empty spacing line. Inline HTML formatting, such as <strong> or <a>, does not cause the problem. Expected result: HTML line-break elements should be included in the content covered by the OpenPGP signature, and the signature should remain valid. Actual result: The message is sent successfully, but the received OpenPGP signature cannot be verified whenever the HTML signature contains markup for a line break or empty spacing line. The issue does not occur when the signature contains only text and inline formatting. Raw .eml samples can be provided if needed.

모든 댓글 (2)

I meant to write b-tag or a-tag I didnt mean to write in bold of course

Hi George

I'd recommend you open a new issue ticket on Github to report the bug. https://github.com/thunderbird/thunderbird-android/issues

질문하기

글에 답글을 달기 위해서는 계정으로 로그인해야만 합니다. 계정이 아직 없다면 새로운 질문을 올려주세요.