-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 15.03.13 07:32, Daniel Kahn Gillmor wrote: > On 03/15/2013 02:20 AM, Daniel Kahn Gillmor wrote: >> I'm signing this message using S/MIME, out of curiosity to see >> what it does after the mailman footer is appended. > > OK, i've checked this out now, and Thunderbird silently ignores > all S/MIME signatures unless the entire message itself is > S/MIME-signed. (that is, the top level Content-Type needs to be > multipart/signed)
I get a "red" signature indicator from your message (which means signature invalid). > So i suppose one option for enigmail would be to behave in the same > way -- that would certainly avoid the confusion we've identified. > However, it also means that enigmail would be unable to verify any > message that passes through a standard footer-appending mailman > list (since mailman makes the whole message multipart/mixed with > two immediate parts: multipart/signed and the text/plain footer. > > Yuck, i don't see any good options right now for doing proper > verification given the user interface we currently have to work > with. I'd love to hear other suggestions or proposals. I personally think that the best compromise is to display the status as we do now, but prefix it with something like "only a part of the message is signed". I'd love to hear other opinions though. - -Patrick -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.18 (Darwin) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iQEVAwUBUULSTMk25cDiHiw+AQjrzAf/UCusWU/5CcGK11PapBBX26Nt3GT8QzIL VIJMSllydbpQODVdDp5BRsoQj5QTJBNzkq0/o+sqJ5rfdTX/0JDemQ0p3jz89Grk LPW2hk22tx6XhWa5y7Z4DMHs0lLeGySqaMjCwIc72R6+DsIGczUfyejcd0vUEpHC tqdRT69vp/B615qqDaoliq5dDMSqETKynqODiZE0aitwchB0CWXn2nR/zyWmZPow 3LGhLzYNoP8R9rClDVRYlNw9ii+U+w6mEaiFBFDTmHpq76rLmfBqpc84bXY4kLAJ O8rtWQ9+CkGzCzUEw74oVLnfFe1466DKqO0OOC5mQfqEZ3SQ82oxlg== =iRzD -----END PGP SIGNATURE----- _______________________________________________ enigmail-users mailing list [email protected] https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
