Re: gpg/pgp noise
On Tue, May 08, 2012 at 03:00:16PM +0300, Mika Suomalainen wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> 08.05.2012 14:57, Indulekha kirjoitti:
> > On Tue, May 08, 2012 at 02:53:30PM +0300, Mika Suomalainen wrote:
> > 08.05.2012 14:45, Jochen Spieker kirjoitti:
> >>>> Indulekha:
> >>>>>
> >>>>> No, I think you may have an incorrect or incomplete
> >>>>> configuration....
> >>>>
> >>>> This is inline vs. MIME:
> >>>>
> >>>> http://www.phildev.net/pgp/pgp_clear_vs_mime.html
> >>>>
> >>>> J.
> >
> > And that page forgets the problems in MIME.
> >
> > PGP/MIME requires headers, message and the signature.asc to be
> > verified. Some mailing list programs mess up with the headers and
> > this way make PGP/MIME signatures unverifiable.
> >
> > In INLINE, the signature is in message and it doesn't require
> > headers to be verified so it's harder to be messed up by mailing
> > list software.
> >
> >>
> >
> > Well, all I know is that Jochen Spieker is able to use it without
> > being intrusive.... Maybe you should try to follow his example? :)
>
> If I used PGP/MIME, my signatures couldn't be verified on Ubuntu
> mailing lists (I am on 5 of them if I recall correctly), nor Enigmail
> mailing list nor gnupg-user mailing lists nor many others. This is
> small list of those MLs, which I mean with
> http://mkaysi.github.com/PGP/Clearsigning.html .
>
> - --
> Mika Suomalainen
> gpg --keyserver pool.sks-keyservers.net --recv-keys 4DB53CFE82A46728
> Key fingerprint = 24BC 1573 B8EE D666 D10A AA65 4DB5 3CFE 82A4 6728
> http://mkaysi.github.com/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.19 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iQIcBAEBAgAGBQJPqQrNAAoJEE21PP6CpGcoVhkQAIcHael5c6lkF7nUennVwaBz
> om4wUj4n5zW3TSfr1F4k0OO0saTZgXOU9zgevtXwVHvaO+SaxjId3ngTfwAUFmHN
> 8mxvCStFkYw578Q0y520d0GdLFD8f3H4BAuSMAQx9Lotgp5XJcRTbiT2ng/79GqJ
> QUdPC6S6/A/WiQqO7tue8pTnNmSJPEzye1dEhdVzA+LMSmaqTGrVTUEAEVnKzFmo
> kXKf7SYM1TKfDQOEXKurRRSogj/2xtjDiXkGQiqrnNDw/k/E5f2oSIn4fx1Nx/gF
> miZ8o1A8AAvYhEamPBRM3R+OnZHKLROAc+9oAOM+TxnVyfXVTVDuCVOf6TUgsXh1
> A0gpeoeaMutG052jJC8oT82o0Aclce92Iq+DwG0UkhMMc0JCApMeAAb1SJN3jdI6
> 7Ec2oR1XJ3Tci9FJx3TfyfLizzZHxjx+gP17qSQsSJ08fpvb+nCJgYUFh+5jmpMK
> FpbTNvRCFd4g9RBA3KivNgF+fQJLi7xblMOFR+2TiWr9e8782SdDrQG47Yx1iz6y
> YIlKTcNSNFwmCxtCohXbDji6L6/jTY4Rt/Z7IbPrIQAcYfUE07sJiPa2jhtYokRS
> i8FKvkXfNmZdCEev98Ik6gb+Ntm0y6GfUKzZoEmQE2SB+Q4pgXZOF/EQ7vj5L5Iw
> 3LG2NhfYmdYQ2R6okRbS
> =Kx3T
> -----END PGP SIGNATURE-----
I see... so the people on the *proper* msiling lists will just have
to suffer then, eh? :\
--
❤ ♫ ❤ ♫ ❤ ♫ ❤
Indulekha
Reply to: