Re: Trying to end my subscription? HELP!

[Jim Hyslop <jhyslop@dreampossible.ca>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Brad Rogers <brad@fineby.me.uk> wrote:

> Unless somebody has PGP signed their message.  Then, for some reason[0],
> the unsub info doesn't get attached to the message sent to the list.
> Of course, the remaining 70% of messages have the details.
The info is there, your mail reader is just not displaying it. I looked
at the plain-text version of your message, and it's there.

Celejar wrote:
> Perhaps I'm missing something, but wouldn't adding anything to a PGP
> signed message break the signature?

Not if it's added after the signature. The plain-text version of Brad's
message that I mentioned looks something like this:

- ---------------- Brad's previous message in plain text ------------
<lots of headers snipped>
Content-Type: multipart/signed; boundary="Sig_6A1pNWv=kYQC3oFY4md.EvJ";
 protocol="application/pgp-signature"; micalg=PGP-SHA1
<more header mumbo-jumbo>

- --Sig_6A1pNWv=kYQC3oFY4md.***
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

On Wed, 18 Apr 2007 08:07:08 -0400
Greg Folkert <greg@gregfolkert.net> wrote:

Hello Greg,

<then the rest of Brad's message>

- --Sig_6A1pNWv=kYQC3oFY4md****
Content-Type: application/pgp-signature; name=signature.asc
Content-Disposition: attachment; filename=signature.asc

- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGJi2nSXvR9Iq2E38RAoDcAJsFYuibWgLQbITBMfaQQCW1OIRbWACeKwF4
T6wAZiW6xHKa81p+M67T9Ck=
=5WZ1
- -----END PGP SIGNATURE-----

- --Sig_6A1pNWv=kYQC3oFY4md****--


- --
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact
listmaster@lists.debian.org

- ---------------------------- end of plain-text message ----------------

The GPG signature only applies to the lines marked by the "--Sig_6A1..."
boundaries. The unsubscribe is appended after the boundaries, and
therefore does not affect the signature in any way.

It's important to understand what the signature means: it does not mean
the entire message is valid, only the portion of the message bracketed
by the signature boundaries.

Dave, it looks like your mail reader (and mine, BTW - Thunderbird)
ignores anything appearing after the signature.

- --
Jim Hyslop
Dreampossible: Better software. Simply.     http://www.dreampossible.ca
                 Consulting * Mentoring * Training in
    C/C++ * OOD * SW Development & Practices * Version Management
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGJjvbLdDyDwyJw+MRArEsAJ98AkanlDlr+tokAB1dZHJWeFCrlwCeMMmp
vPILtJwGq7+hh8dHsYJAEu8=
=/mIN
-----END PGP SIGNATURE-----