Consider shipping claws-mail 3.10.1-2~bpo70+1
As pointed out by Adam Burns on https://mailman.boum.org/pipermail/tails-dev/2015-April/thread.html, version 3.10 has a new option Automatically save message to Draft folder every … → Even if message is to be encrypted which allows to disable autosave of plain text messages.
This is only a partial fix but it could mitigate the issue in some cases.
- Is it worth it?
- Could this option then be made off by default in Tails and applied to all users who already configured? I don’t think we can count on people reading the release notes, so if we can’t automate that we should probably issue the security advisory about Claws as a separate blog post and after the release of 1.4.
Parent Task: #8986 (closed)
Related issues
- Related to #9161 (closed)
- Related to #8305 (closed)
- Related to #6459 (closed)
Original created by @sajolida on 9302 (Redmine)