"Paul Wise" <[EMAIL PROTECTED]> wrote in message
On Sun, Jun 08, 2008 at 06:48:48PM +0800, Paul Wise wrote:
Where can we find your package?
My mistake, gmail interpreted your signed message as an attachment.
Other User Agents did the same thing. I think it was the Application/pgp
mimetype. Since plaintext PGP signatures are still textual messages, a
text/* mimetype really should have been used.
The application/pgp mimetype is old and depreciated.
A preferable system is the "multipart/signed" mimetype's
"application/pgp-signature" protocol, that most people here who use OpenPGP
signatures seem to use. A few User Agents (most notably some of Microsoft's)
get that wrong, but most get it right.
OF course the old fallback of text/plain with PGP plaintext signatures
always work, although does make the message more visibly cluttered, and
harder to automatically validate.
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]