• Kevin J. McCarthy's avatar
    Add $pgp_check_gpg_decrypt_status_fd. · 8ec6d766
    Kevin J. McCarthy authored
    If set (the default) mutt performs more thorough checking of the
    $pgp_decrypt_command status output for GnuPG result codes.
    Ticket #39 revealed that GnuPG (currently) does not protect against
    messages that have been manipulated to contain an empty encryption
    packet followed by a plaintext packet.
    A huge thanks to Marcus Brinkmann for researching this issue, taking
    the time to report it to us (and the GnuPG team), and taking even more
    time to clarify exactly what needed to be checked for.   
init.h 170 KB