Skip to content

Password-protected messages compliance #5878

@sosnovsky

Description

@sosnovsky

To ensure password-protected messages comply with security rules, client apps must check the subjects of composed password-protected email messages for specified strings. If any configured terms are found, the application should display an error message indicating that the password encryption method is incompatible with the composed message.

Client configuration will have 2 new optional properties (subject check should be performed only if both properties are set):

  • disallow_password_messages_for_terms (string[]) - specifies an array of strings to check against the subject of the composed password-protected message. If any string in this array is found in the subject, an error alert must be displayed.
  • disallow_password_messages_error_text (string) - defines the text to be displayed in the error alert.

related FlowCrypt/flowcrypt-ios#2644

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions