Skip to content

GitLab

T
tails
Open
Opened by import-from-Redmine@import-from-Redmine6 of 6 tasks completed6/6 tasks
Report abuse New issue

Upstream secure Thunderbird autoconfig wizard

Originally created by Tails on #6156 (Redmine)

Get these patches merged in Thunderbird upstream.

Upstream tickets and merge requests:

Status of current patches in Tails

As of 66bd9dc5 our patches are as follows:

  • Add-pref-for-whether-to-accept-plaintext-protocols-d.patch: we can drop this patch; when plaintext is selected by autoconfig, a scary warning is shown which is good enough.
  • Add-pref-for-whether-we-accept-OAuth2-during-autocon.patch: this should be reworked into "enable javascript while doing OAuth2".
  • Fix-buggy-pref-for-disabling-MS-Exchange-autoconfig-.patch: this is a brand new patch we should upstream; the reason for this patch is that work that happened upstream broke our previous contribution.
  • Make-use-of-non-SSL-Exchange-AutoDiscover-methods-op.patch: we can drop this patch; upstream wasn't interested, but we already managed to upstream a pref to completely disable Exchange AutoDiscover, so we are happy just doing that.
  • Prefer-fetched-configurations-using-SSL-over-plainte.patch: upstream is outright hostile towards this change so there is no point trying to upstream it unless there is a change of maintainer. We could drop it for that reason, but I think it is a nice patch, however, so I'd prefer to keep it as long as there are other reasons for us to custom patch Thunderbird.

These are already upstreamed:

  • Avoid-local-timestamp-disclosure-in-Date-header.patch
  • Avoid-spellchecking-language-disclosure-in-Content-Language-header.patch

Attachments

Subtasks

Related issues

Edited by anonym

The one place for your designs

To enable design management, you'll need to meet the requirements. If you need help, reach out to our support team for assistance.