Closed
Description
We already protect the Date
header against modification here:
Lines 914 to 936 in e5a3eae
There is an open PR #6649 to protect the Date
by replacing it with unix epoch in the outer header.
However, it cannot be merged because mimeparser uses unprotected timestamp for Autocrypt header here:
Lines 348 to 353 in 7f55613
I also made a minor fix for signed-only messages: #6642
Fix for the Autocrypt issue is at #6669