Lies about which email address is being used during GPG verification
Bug #29937 reported by
Matt Zimmerman
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Launchpad itself |
Fix Released
|
Low
|
Unassigned | ||
Bug Description
In order to expedite their processing, I attempted to add GPG keys for some users in Launchpad, expecting that it would send them mail for verification, allowing them to complete the process in one step.
It displayed a message like this:
"A message has been sent to <email address hidden>, encrypted with the key 1024D/9B222AA2. To confirm the key is yours, decrypt the message and follow the link inside."
however, the resulting email was sent to me, <email address hidden>, the user who was logged in.
| Changed in launchpad: | |
| assignee: | nobody → matsubara |
| status: | Unconfirmed → Confirmed |
Revision history for this message
| Celso Providelo (cprov) wrote | #1 |
| Changed in launchpad: | |
| assignee: | matsubara → cprov |
| status: | Confirmed → Fix Committed |
Revision history for this message
| Celso Providelo (cprov) wrote | #2 |
| Changed in launchpad: | |
| status: | Fix Committed → In Progress |
Revision history for this message
| Celso Providelo (cprov) wrote | #3 |
| Changed in launchpad: | |
| assignee: | cprov → nobody |
| status: | In Progress → Confirmed |
Revision history for this message
| Curtis Hovey (sinzui) wrote | #4 |
| Changed in launchpad-foundations: | |
| status: | Triaged → Fix Released |
To post a comment you must log in.
The fix is commited and under review