Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

V3 - Add a option to allow disabling the unauthenticated messages check #314

Merged
merged 3 commits into from
Nov 25, 2024

Conversation

JasonQuinn
Copy link
Contributor

This relates to #282

Copy link
Member

@lubux lubux left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the PR. Since this flag compromises security, appropriate documentation should be present.

crypto/decryption_handle_builder.go Show resolved Hide resolved
@lubux lubux added the v3 Targeting GopenPGP v3 label Nov 18, 2024
@lubux lubux merged commit 646577f into ProtonMail:v3 Nov 25, 2024
7 of 9 checks passed
lubux pushed a commit that referenced this pull request Nov 25, 2024
#314)

Allows to decrypt legacy messages that have no integrity protection.
This option should be used with extreme care as it allows for downgrade attacks.
lubux added a commit that referenced this pull request Nov 25, 2024
#314) (#315)

Allows to decrypt legacy messages that have no integrity protection.
This option should be used with extreme care as it allows for downgrade attacks.

Co-authored-by: Jason Quinn <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
v3 Targeting GopenPGP v3
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants