Mailvelope prior to 3.3.0 does not require user interaction to import public keys shown on web page. This functionality can be tricked to either hide a key import from the user or obscure which key was imported.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mailvelope | Mailvelope | * | 3.3.0 (excluding) |