Gloda message queries allow 'deleted' gloda messages to be returned. The capability to retrieve these messages intentionally is desired, but by default queries should be excluding them.

blocking b1

moving to b2

This was fixed by bug 464359, which ended up in beta 1.

I have no idea of the technical aspects of this, but aren't we compromising privacy by keeping <shift>-deleted (expunged) messages in gloda and "allowing them to be returned" through some query at all? Will data of expunged messages still live in gloda after user has compacted a folder to wipe out the physical trace of the expunged message? (This objection does NOT apply to deleted messages that are still in trash, we'll need to index those of course)

I'd appreciate a response on the privacy concern raised in comment #4. Furthermore, this does not seem to be entirely fixed as I am still seeing non-existing / deleted draft messages in my search results (bug 521632).

This specific bug remains fixed; messages marked as deleted are not returned in fulltext queries. Bug 465618 deals with the problem of us not actually purging the messages marked as deleted and it has a patch that just needs the i's dotted and t's crossed. No part of Thunderbird, especially gloda, makes any claim to wipe out physical traces of messages. If you have serious concerns about the privacy of your data I would suggest storing your Thunderbird profile on an encrypted file-system.