https://bugs.kde.org/show_bug.cgi?id=427091
--- Comment #6 from Ingo Klöcker <kloec...@kde.org> --- By the way, it seems that encrypted+signed messages are not affected by this problem. On the other hand, looking at the decrypted MIME tree of such a message it makes me wonder whether protected headers is actually correctly implemented for encrypted+signed messages. To me it seems as if the "protected headers" are not part of the signed message part but of the enclosing multipart/signed message part which means that they are not really protected by the signature. Ironically, this implementation bug prevents the signatures of encrypted+signed messages to be broken by the protected headers feature. -- You are receiving this mail because: You are the assignee for the bug.
