Commits on Oct 27, 2023

1. redwood: Relax requirements for decrypting messages …

   Even if a source key is no longer valid per policy, we still want them
   to be able to decrypt a previously valid message for them. We can also
   drop the revocation/expiry filters, which were mostly theoretical in the
   SecureDrop context anyways.
   
   We first try validating the key with the StandardPolicy before trying
   again with a NullPolicy to avoid downgrade attacks. Since we now have
   another type of policy being used, the constant has been renamed to
   STANDARD_POLICY to be clearer what kind it is.
   
   Fixes #6991.

   

   legoktm committed Oct 27, 2023
   Configuration menu

   • View commit details
   • Copy full SHA for 3596bb0
   • Browse repository at this point

   Copy the full SHA

   3596bb0 View commit details

   Browse the repository at this point in the history