[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: gpg/pgp noise



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

08.05.2012 15:38, Indulekha kirjoitti:
> On Tue, May 08, 2012 at 03:05:30PM +0300, Mika Suomalainen wrote: 
> 08.05.2012 15:03, Indulekha kirjoitti:
>>>> On Tue, May 08, 2012 at 03:00:16PM +0300, Mika Suomalainen
>>>> wrote: 08.05.2012 14:57, Indulekha kirjoitti:
>>>>>>> On Tue, May 08, 2012 at 02:53:30PM +0300, Mika
>>>>>>> Suomalainen wrote: 08.05.2012 14:45, Jochen Spieker
>>>>>>> kirjoitti:
>>>>>>>>>> Indulekha:
>>>>>>>>>>> 
>>>>>>>>>>> No, I think you may have an incorrect or
>>>>>>>>>>> incomplete configuration....
>>>>>>>>>> 
>>>>>>>>>> This is inline vs. MIME:
>>>>>>>>>> 
>>>>>>>>>> http://www.phildev.net/pgp/pgp_clear_vs_mime.html
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> 
J.
>>>>>>> 
>>>>>>> And that page forgets the problems in MIME.
>>>>>>> 
>>>>>>> PGP/MIME requires headers, message and the
>>>>>>> signature.asc to be verified. Some mailing list
>>>>>>> programs mess up with the headers and this way make
>>>>>>> PGP/MIME signatures unverifiable.
>>>>>>> 
>>>>>>> In INLINE, the signature is in message and it doesn't
>>>>>>> require headers to be verified so it's harder to be
>>>>>>> messed up by mailing list software.
>>>>>>> 
>>>>>>>> 
>>>>>>> 
>>>>>>> Well, all I know is that Jochen Spieker is able to use
>>>>>>> it without being intrusive.... Maybe you should try to
>>>>>>> follow his example? :)
>>>> 
>>>> If I used PGP/MIME, my signatures couldn't be verified on
>>>> Ubuntu mailing lists (I am on 5 of them if I recall
>>>> correctly), nor Enigmail mailing list nor gnupg-user mailing
>>>> lists nor many others. This is small list of those MLs, which
>>>> I mean with http://mkaysi.github.com/PGP/Clearsigning.html .
>>>> 
>>>> 
>>>> I see... so the people on the *proper* msiling lists will
>>>> just have to suffer then, eh? :\
>>>> 
> 
> I don't understand how those other mailing lists are inproper.
> 
>> 
>> 
> 
> They don't support the considerate version of gpg/pgp. Now that I
> know that people using this actually have a choice and choose to be
> rude, it does make it rather tempting to set up an autoresponder
> and filter to nag them...

Note that gnupg mailing lists are also affected and they aren't lists
themselves, the problem is in mailing list software. I think that they
all use GNU Mailman, which is very popular among mailing lists.

People don't have a choice if they are on mailing lists, which force
this by having this bug, but do as you want.

- -- 
Mika Suomalainen
gpg --keyserver pool.sks-keyservers.net --recv-keys 4DB53CFE82A46728
Key fingerprint = 24BC 1573 B8EE D666 D10A  AA65 4DB5 3CFE 82A4 6728
http://mkaysi.github.com/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=bH/X
-----END PGP SIGNATURE-----


Reply to: