[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: gpg/pgp noise



On Tue, May 08, 2012 at 03:41:40PM +0300, Mika Suomalainen wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> 08.05.2012 15:38, Indulekha kirjoitti:
> > On Tue, May 08, 2012 at 03:05:30PM +0300, Mika Suomalainen wrote: 
> > 08.05.2012 15:03, Indulekha kirjoitti:
> >>>> On Tue, May 08, 2012 at 03:00:16PM +0300, Mika Suomalainen
> >>>> wrote: 08.05.2012 14:57, Indulekha kirjoitti:
> >>>>>>> On Tue, May 08, 2012 at 02:53:30PM +0300, Mika
> >>>>>>> Suomalainen wrote: 08.05.2012 14:45, Jochen Spieker
> >>>>>>> kirjoitti:
> >>>>>>>>>> Indulekha:
> >>>>>>>>>>> 
> >>>>>>>>>>> No, I think you may have an incorrect or
> >>>>>>>>>>> incomplete configuration....
> >>>>>>>>>> 
> >>>>>>>>>> This is inline vs. MIME:
> >>>>>>>>>> 
> >>>>>>>>>> http://www.phildev.net/pgp/pgp_clear_vs_mime.html
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>> 
> J.
> >>>>>>> 
> >>>>>>> And that page forgets the problems in MIME.
> >>>>>>> 
> >>>>>>> PGP/MIME requires headers, message and the
> >>>>>>> signature.asc to be verified. Some mailing list
> >>>>>>> programs mess up with the headers and this way make
> >>>>>>> PGP/MIME signatures unverifiable.
> >>>>>>> 
> >>>>>>> In INLINE, the signature is in message and it doesn't
> >>>>>>> require headers to be verified so it's harder to be
> >>>>>>> messed up by mailing list software.
> >>>>>>> 
> >>>>>>>> 
> >>>>>>> 
> >>>>>>> Well, all I know is that Jochen Spieker is able to use
> >>>>>>> it without being intrusive.... Maybe you should try to
> >>>>>>> follow his example? :)
> >>>> 
> >>>> If I used PGP/MIME, my signatures couldn't be verified on
> >>>> Ubuntu mailing lists (I am on 5 of them if I recall
> >>>> correctly), nor Enigmail mailing list nor gnupg-user mailing
> >>>> lists nor many others. This is small list of those MLs, which
> >>>> I mean with http://mkaysi.github.com/PGP/Clearsigning.html .
> >>>> 
> >>>> 
> >>>> I see... so the people on the *proper* msiling lists will
> >>>> just have to suffer then, eh? :\
> >>>> 
> > 
> > I don't understand how those other mailing lists are inproper.
> > 
> >> 
> >> 
> > 
> > They don't support the considerate version of gpg/pgp. Now that I
> > know that people using this actually have a choice and choose to be
> > rude, it does make it rather tempting to set up an autoresponder
> > and filter to nag them...
> 
> Note that gnupg mailing lists are also affected and they aren't lists
> themselves, the problem is in mailing list software. I think that they
> all use GNU Mailman, which is very popular among mailing lists.
> 
> People don't have a choice if they are on mailing lists, which force
> this by having this bug, but do as you want.
> 
> - -- 
> Mika Suomalainen
> gpg --keyserver pool.sks-keyservers.net --recv-keys 4DB53CFE82A46728
> Key fingerprint = 24BC 1573 B8EE D666 D10A  AA65 4DB5 3CFE 82A4 6728
> http://mkaysi.github.com/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.19 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
> 
> iQIcBAEBAgAGBQJPqRSCAAoJEE21PP6CpGcoBeAQAKQi1y2zJo6t54b3CrsZRtUn
> jj7aA3SDK7QHDKisQM4EScJLuiH6VFhbIr6ca2s8E99zjVx2Z26R400wfUDYqyJS
> VX1q4zceo8ttLbu9Qi0ai8G2o3FaAJn5zB6yz59n33sqxI9xCJwlDu8t/AYk76gP
> B57bII0P0GOvqvxzuTwAmOcYh/h6q0vZQlsHTlkIf94YFLAqSCg/uOYLKOyZF1Us
> PytI+PLFzuzFrXemHSSRZKWundjGC0rKry7IceHiWRAY+nDNMSnF7MNcWn+WhDep
> zvUv2YZ+zGAc2NDlBeusE97kmzZ8m3yNpeUpMoid6RoiFLGUEx0s6l1c6d0ghrH9
> hPq5HWlnGgAPuKGmY5XrrMev/pVD6EOf8VKKejcYUprrXD4+jlnNCR9gX1npihdp
> 04hh3fgRWALpXp/qklISo5t032tgCKg1Jqr+DktSHquiXMUjnvO41L3KhNhwh74l
> 5SCY0R5F31mFvDT+rlLIJZG8baJ+5XmfGzPBkMOkkAvX25PORgJwhs6x5jVcoq/3
> Wgd+gkIdi79ut/R/uZct8GyDHbBnLrLLM8KX3NvMuVW7ZctHoBR77D2tCTT34jto
> qDMJ/bd6Po6FYWAlKBL9DUKQHmHgzxRz7gKRgRnTf3lL2IxOFztJ9PzwjBiS1h5H
> GipAd3YeiJYqYdkgf61u
> =bH/X
> -----END PGP SIGNATURE-----
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org 
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> Archive: 4FA91484.6050505@hotmail.com">http://lists.debian.org/4FA91484.6050505@hotmail.com
> 

There is always a choice --for instance you have the choice to only sign 
the maill to those lists.

-- 
❤ ♫ ❤ ♫ ❤ ♫ ❤   
 Indulekha 


Reply to: