Message ID | 20220421003152.339542-1-alobakin@pm.me (mailing list archive) |
---|---|
Headers | show |
Series | bpf: random unpopular userspace fixes (32 bit et al) | expand |
On Wed, Apr 20, 2022 at 5:38 PM Alexander Lobakin <alobakin@pm.me> wrote: Again? -----BEGIN PGP MESSAGE----- Version: ProtonMail wcFMA165ASBBe6s8AQ/8C9y4TqXgASA5xBT7UIf2GyTQRjKWcy/6kT1dkjkF FldAOhehhgLYjLJzNAIkecOQfz/XNapW3GdrQDq11pq9Bzs1SJJekGXlHVIW Sorry I'm tossing the series out of patchwork.
Alexei Starovoitov <alexei.starovoitov@gmail.com> writes: > On Wed, Apr 20, 2022 at 5:38 PM Alexander Lobakin <alobakin@pm.me> wrote: > > Again? > > -----BEGIN PGP MESSAGE----- > Version: ProtonMail > > wcFMA165ASBBe6s8AQ/8C9y4TqXgASA5xBT7UIf2GyTQRjKWcy/6kT1dkjkF > FldAOhehhgLYjLJzNAIkecOQfz/XNapW3GdrQDq11pq9Bzs1SJJekGXlHVIW > > Sorry I'm tossing the series out of patchwork. FWIW I'm not seeing this in the version I pulled from Lore. So maybe it's something ProtonMail does on a per-recipient basis? Still really weird to do behind the scenes, though... :/ -Toke
From: Alexei Starovoitov <alexei.starovoitov@gmail.com> Date: Wed, 20 Apr 2022 17:40:34 -0700 > On Wed, Apr 20, 2022 at 5:38 PM Alexander Lobakin <alobakin@pm.me> wrote: > > Again? > > -----BEGIN PGP MESSAGE----- > Version: ProtonMail > > wcFMA165ASBBe6s8AQ/8C9y4TqXgASA5xBT7UIf2GyTQRjKWcy/6kT1dkjkF > FldAOhehhgLYjLJzNAIkecOQfz/XNapW3GdrQDq11pq9Bzs1SJJekGXlHVIW > > Sorry I'm tossing the series out of patchwork. Oh sorry, I was hoping upgrading Bridge would help >_< Let me know if you're reading this particular message in your inbox finely. Toke guessed it precisely regarding the per-recipient lists -- Proton by default saves every address I've ever sent mails to to Contacts and then tries to fetch PGP public keys for each contact. Again, for some reason, for a couple addresses, including ast@kernel.org, it managed to fetch something, but that something was sorta broken. So at the end I've been having broken PGP for the address I've never manually set or even wanted PGP. If it's still messed, I'll contact support then. Sorry again for this. Thanks, Al
Alexander Lobakin <alobakin@pm.me> writes: > From: Alexei Starovoitov <alexei.starovoitov@gmail.com> > Date: Wed, 20 Apr 2022 17:40:34 -0700 > >> On Wed, Apr 20, 2022 at 5:38 PM Alexander Lobakin <alobakin@pm.me> wrote: >> >> Again? >> >> -----BEGIN PGP MESSAGE----- >> Version: ProtonMail >> >> wcFMA165ASBBe6s8AQ/8C9y4TqXgASA5xBT7UIf2GyTQRjKWcy/6kT1dkjkF >> FldAOhehhgLYjLJzNAIkecOQfz/XNapW3GdrQDq11pq9Bzs1SJJekGXlHVIW >> >> Sorry I'm tossing the series out of patchwork. > > Oh sorry, I was hoping upgrading Bridge would help >_< > > Let me know if you're reading this particular message in your inbox > finely. Toke guessed it precisely regarding the per-recipient lists > -- Proton by default saves every address I've ever sent mails to to > Contacts and then tries to fetch PGP public keys for each contact. > Again, for some reason, for a couple addresses, including > ast@kernel.org, it managed to fetch something, but that something > was sorta broken. So at the end I've been having broken PGP for > the address I've never manually set or ev > en wanted PGP. > If it's still messed, I'll contact support then. Sorry again for > this. Heh, yeah, now that I was in the direct Cc list, I got your message in encrypted form as well. So, erm, I'm reading it "fine" now that I figured out how to get my MUA to decrypt it. Probably not what you want for patch submissions, though... :P -Toke
From: Alexei Starovoitov <alexei.starovoitov@gmail.com> Date: Wed, 20 Apr 2022 17:40:34 -0700 > On Wed, Apr 20, 2022 at 5:38 PM Alexander Lobakin <alobakin@pm.me> wrote: > > Again? > > -----BEGIN PGP MESSAGE----- > Version: ProtonMail > > wcFMA165ASBBe6s8AQ/8C9y4TqXgASA5xBT7UIf2GyTQRjKWcy/6kT1dkjkF > FldAOhehhgLYjLJzNAIkecOQfz/XNapW3GdrQDq11pq9Bzs1SJJekGXlHVIW ProtonMail support: " The reason that some of the recipients are receiving PGP-encrypted emails is that kernel.org is providing public keys for those recipients (ast@kernel.org and toke@kernel.org specifically) via WKD (Web Key Directory), and our API automatically encrypts messages when a key is served over WKD. Unfortunately, there is currently no way to disable encryption for recipients that server keys over WKD but the recipients should be able to decrypt the messages using the secret keys that correspond to their public keys provided by kernel.org. This is applicable both to messages sent via the ProtonMail web app, and messages sent via Bridge app. We have forwarded your feedback to the appropriate teams, and we will see if we can implement a disable encryption option for these cases. Unfortunately, we cannot speculate when we might implement such an option. " Weeeeeird, it wasn't like that a year ago. Anyway, since it's address specific and for now I observed this only for ast@ and toke@, can I maybe send the series adding your Gmail account rather that korg one? Alternatively, I can send it from my Intel address if you prefer (thankfully, it doesn't encrypt anything without asking), I just didn't want to mix personal stuff with corp. > > Sorry I'm tossing the series out of patchwork. Thanks, Al
Alexander Lobakin <alobakin@pm.me> writes: > From: Alexei Starovoitov <alexei.starovoitov@gmail.com> > Date: Wed, 20 Apr 2022 17:40:34 -0700 > >> On Wed, Apr 20, 2022 at 5:38 PM Alexander Lobakin <alobakin@pm.me> wrote: >> >> Again? >> >> -----BEGIN PGP MESSAGE----- >> Version: ProtonMail >> >> wcFMA165ASBBe6s8AQ/8C9y4TqXgASA5xBT7UIf2GyTQRjKWcy/6kT1dkjkF >> FldAOhehhgLYjLJzNAIkecOQfz/XNapW3GdrQDq11pq9Bzs1SJJekGXlHVIW > > ProtonMail support: > > " > The reason that some of the recipients are receiving PGP-encrypted > emails is that kernel.org is providing public keys for those > recipients (ast@kernel.org and toke@kernel.org specifically) via WKD > (Web Key Directory), and our API automatically encrypts messages > when a key is served over WKD. > > Unfortunately, there is currently no way to disable encryption for > recipients that server keys over WKD but the recipients should be > able to decrypt the messages using the secret keys that correspond > to their public keys provided by kernel.org. > This is applicable both to messages sent via the ProtonMail web app, > and messages sent via Bridge app. > > We have forwarded your feedback to the appropriate teams, and we > will see if we can implement a disable encryption option for these > cases. Unfortunately, we cannot speculate when we might implement > such an option. > " > > Weeeeeird, it wasn't like that a year ago. Well, they're also doing something non-standard with their WKD retrieval, so maybe that changed? GPG itself will refuse to retrieve a key that doesn't have the email address specified in the key itself: $ gpg --locate-keys toke@kernel.org gpg: key 4A55C497F744F705: no valid user IDs gpg: Total number processed: 1 gpg: w/o user IDs: 1 gpg: error retrieving 'toke@kernel.org' via WKD: No fingerprint Given that they do it this way, I suppose this will affect every @kernel.org address that has a PGP key attached (of which there are currently 519, according to pgpkeys.git)... -Toke