Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

ابحث في الدعم

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Can't delete attachment from digitally signed email

heinz.stockinger
heinz.stockinger
more options

I'm using Thunderbird 45 on Mac.

When somebody sends me emails that are signed with a digital certificate, attachments added to such a signed email can't be deleted (see figure) - however, if the email is not signed, deleting/detaching attachments works fine.

Is there a way to delete attachments so signed emails can be archived on the email server without storing attachments?

Thank you very much in advance for your help. Heinz

I'm using Thunderbird 45 on Mac. When somebody sends me emails that are signed with a digital certificate, attachments added to such a signed email can't be deleted (see figure) - however, if the email is not signed, deleting/detaching attachments works fine. Is there a way to delete attachments so signed emails can be archived on the email server without storing attachments? Thank you very much in advance for your help. Heinz

All Replies (5)

christ1
christ1
  • Top 25 Contributor
more options

I'm having the same problem, and I haven't found a solution for this yet. As a workaround I'm temporarily using Outlook to remove the attachment.

Matt
Matt
  • Moderator
  • Top 10 Contributor
more options

a digital signature guarantees the mail as presented has not been modified since it was signed. This is done by way of a checksum on the entire email message body (attachments included)

SO by definition changing the mail by removing content, be it an attachment or substituting new text in the email is not possible with signed or encrypted mail.

I am sure you used to be able to remove the attachments and break the signature. But I just tried and it no longer does that.

heinz.stockinger
heinz.stockinger صاحب السؤال
more options

Thanks for your answers, christ1 and Matt.

Yes, using Outlook is a good temporary workaround. I'm wondering if there is a "solution" also for Thunderbird.

For me, it's ok to break the signature for _archived_ emails in Thunderbird. I tried with the Thunderbird add-on "AttachmentExtractor" but that doesn't seem to work either. Would anybody know of another way to do so?

Matt
Matt
  • Moderator
  • Top 10 Contributor
more options

I considered it yesterday, and I think you should file a bug and call it a regression. When I was looking for one yesterday I did find a couple of bug to support my aging memory.

Here https://bugzilla.mozilla.org/show_bug.cgi?id=288700

The discussion is about what to do about the signature and that is is broken post detach.

And here https://bugzilla.mozilla.org/show_bug.cgi?id=2920 (1999) were the detach feature was implemented in Sea Monkey or at the time it would have been called Mozilla Suite.

If you file a bug, please post A link. I would like to follow that one.

heinz.stockinger
heinz.stockinger صاحب السؤال
more options

I added my comment to the previous bug:

and also filed a new bug to increase priority: