Re: gpg/pgp noise
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Celejar <celejar@gmail.com> wrote:
>On Tue, 08 May 2012 14:53:30 +0300
>Mika Suomalainen <mika.henrik.mainio@hotmail.com> wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> 08.05.2012 14:45, Jochen Spieker kirjoitti:
>> > Indulekha:
>> >>
>> >> No, I think you may have an incorrect or incomplete
>> >> configuration....
>> >
>> > This is inline vs. MIME:
>> >
>> > http://www.phildev.net/pgp/pgp_clear_vs_mime.html
>> >
>> > J.
>>
>> And that page forgets the problems in MIME.
>>
>> PGP/MIME requires headers, message and the signature.asc to be
>> verified. Some mailing list programs mess up with the headers and
>this
>> way make PGP/MIME signatures unverifiable.
>
>I'm no expert in all this, but can you explain and document what you
>mean by the claim that "headers ... must be verified"? All emails have
>their headers modified en route (e.g., "Received:" and "Delivered-To"
>are added, as are all kinds of "X-stuff" ones). Does PGP/MIME really
>protect all headers (beyond the MIME ones)? It really breaks if *any*
>headers are modified? Please provide documentation.
>
>http://www.ietf.org/rfc/rfc1847.txt
>http://www.imc.org/ietf-openpgp/mail-archive/msg01938.html
>
>This stuff is old, but do you have anyth, PGP/MIME emails add some headers.
ing more current?
>
>Celejar
MYbinformation is based on wht others answered when I asked what caused that problem at enigmail-user.
As far as I understand, pgp/mime adds some headers to messages which AAAre signed with it.
PS. I crosslisted this so people who know about this cAAAn answer. Debian-user allows everyone to post on it, but I don't know aboutt Enigmail.
- --
Mika Suomalainen
gpg --keyserver pool.sks-keyservers.net --recv-keys 4DB53CFE82A46728
Key fingerprint = 24BC 1573 B8EE D666 D10A AA65 4DB5 3CFE 82A4 6728
http://mkaysi.github.com/
I apologize for possible "reply all" button usage on mailing list. This email client doesn't have "reply list" button, please see (and star) https://code.google.com/p/k9mail/issues/detail?id=2797
Sent from Ciblia (my Samsung Galaxy 5) with K9 Mail.
-----BEGIN PGP SIGNATURE-----
Version: APG v1.0.8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=y7/i
-----END PGP SIGNATURE-----
Reply to: