search

lavab / api

Lavaboom's main backend API.
https://lavaboom.com
23 stars 11 forks source link

API exposes&&store subject of raw emails in clear-text #89

Closed let4be closed 9 years ago

let4be commented 9 years ago

How to reproduce:

  1. send email to gmail
  2. reply to this email from gmail
  3. email.name contains subject in clear text while it should be "Encrypted message (xxx)" and subject should be in the manifest only

Email is getting encrypted as soon as it hits out servers, no reason to expose neither store subject in clear text.