On 03/15/2013 03:48 AM, Patrick Brunschwig wrote:
> On 15.03.13 07:32, Daniel Kahn Gillmor wrote:
>> On 03/15/2013 02:20 AM, Daniel Kahn Gillmor wrote:
>>> I'm signing this message using S/MIME, out of curiosity to see
>>> what it does after the mailman footer is appended.
>
>> OK, i've checked this out now, and Thunderbird silently ignores
>> all S/MIME signatures unless the entire message itself is
>> S/MIME-signed. (that is, the top level Content-Type needs to be
>> multipart/signed)
>
> I get a "red" signature indicator from your message (which means
> signature invalid).
You get this for Message-ID: 5142bda8.6000...@fifthhorseman.net ? does
it have the enigmail-users mailman footer in your copy? If so, i'm
interested in figuring out what is different between your version of
thunderbird and mine. I wouldn't expect to see any evaluation of the
signature in question.
> I personally think that the best compromise is to display the status
> as we do now, but prefix it with something like "only a part of the
> message is signed". I'd love to hear other opinions though.
just brainstorming: there's also the inline-pgp approach, which brackets
the signed part with lines like:
********* *BEGIN ENCRYPTED or SIGNED PART* *********
Patrick Brunschwig did not write this.
********** *END ENCRYPTED or SIGNED PART* **********
But this is itself spoofable, because messages can contain these strings
(e.g. which part of this message was actually signed by Patrick?)
I'd love to hear other suggestions too.
--dkg
Please excuse my inclusion of this extra block below, its content isn't
relevant for this message :)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
On 17.02.13 18:52, commb wrote:
> I just now deactivated Enigmail, and immediately after the
> TB-restart the notifications did work again. So i am almost sure
> that this is somehow related to Enigmail. Also i have 3 other
> email-accounts in TB, but have not activated OpenPGP for them, and
> with those accounts this problem did not occur at all. I have no
> message filters or any plugins other than enigmail.
Do you see any error message in the Error Console (menu Tools > Error
Console) when Enigmail is enabled and after you got a mail for which
you missed the notification?
- -Patrick
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.18 (Darwin)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/
iQEVAwUBUSHs1sk25cDiHiw+AQiangf/dLKNBngfS3j+wPJBQjtArLgalCFirDeb
hybc9Hd2J/2KvaIWzrnGfN+WduXqtBXC7kAly6F+V3VrtxFCgLzkt8DWOluRjqKT
6w56yqixeirJnWRttZr54amRua/jMIWcVr/0u7DNO0p05lZ2RRYY95bIvSSdbZRz
Qc8Q5JN+wbH4PXgecug1SgQQxQ21ib3rWsylSzYixAz7I8n8ABGQFs8bVoE5eVy8
t7ulOo7ChC94it3+Tofbtza6A3VNtYzgnmV820pWyqGUOrHb0AhXxxZULAsTupDg
sRmNK90KiA18EeFvdCF+KOLNx2IS3EpkUCcfSWDf7Vgd3l5/XMyjmw==
=eLoZ
-----END PGP SIGNATURE-----
_______________________________________________
enigmail-users mailing list
enigmail-users@enigmail.net
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
