[Mailer] Document the new S/MIME encrypter options and the listener priorities - #22764
Open
Spomky wants to merge 1 commit into
Open
[Mailer] Document the new S/MIME encrypter options and the listener priorities#22764Spomky wants to merge 1 commit into
Spomky wants to merge 1 commit into
Conversation
Spomky
force-pushed
the
mailer-pgp-smime
branch
from
August 19, 2026 16:57
e57dc37 to
1c5d68d
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Documents symfony/symfony#64541, which aligned the S/MIME listeners with the PGP/MIME design.
In
mailer.rst, the "Encrypting Messages Globally" section is completed with the options added in 8.2:certificates, to list the recipient certificates directly in the configuration instead of writing a repository service;encrypt_for_sender, to also encrypt for the sender so it can read the messages it sent;on_missing_certificateand its per message override through theX-SMime-Encryptheader, in a new "Recipients Without a Certificate" section, with the deprecation of thesend_unencrypteddefault and the caveat thatframework.mailer.envelope.recipientsis applied after theskipbehavior.A new "Signing and Encrypting the Same Message" section documents the
PRIORITYconstants ofSmimeSignedMessageListener,SmimeEncryptedMessageListenerandDkimSignedMessageListener, and the fact that DKIM moved from-128to-228so it signs the encrypted message.The section also said that the global S/MIME encrypter "automatically applies to all outgoing messages", which was never true: the listener only encrypts the messages carrying the
X-SMime-Encryptheader. That header was not documented at all, so it is documented here rather than in a separate PR.reference/configuration/framework.rstgets the same three options in thesmime_encrypterreference.PGP/MIME is documented separately in #22732, so this PR leaves it out.
Fixes #22719