-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 09/15/2015 02:23 PM, Ludwig Hügelschäfer wrote:
> 
> After some tests I can observe similar behaviour if I uncheck
> "Display invalid keys": There still are a lot of keys with "-" or
> "unkown" in the key validity column.

My observation with my keyring has been that "Display invalid keys"
only hides revoked and expired keys from my list. It may do more than
that for a keyring with keys in more states than mine. Like your
experience, I still have a lot of keys with "-" or "unknown" in the
Key Validity column with that filter turned off.

> It is not clear where the limit for filtering the display is
> defined. However, unchecking "display untrusted keys" seems to work
> for me. All keys with "-" are hidden, but I don't have any keys 
> with "unknown" owner trust, which might conceal the bug for me.
> 

I just tested changing one of my co-worker test keys to "I do NOT
trust" using Enigmail. That removed them from the list of trusted
keys. All four other owner trust states, including "I don't know" (aka
unknown) put them in the list.

I had been ignoring the full list but your testing and suggestion got
me looking closer at the differences to figure out how a key I've
signed but hadn't set ownertrust on would not be in the list until I
edited it with Enigmail and then it was "stuck" in the list. I believe
I now see the reason.

All keys that I've set the Owner trust in Enigmail to "I don't know"
show unknown in the Owner Trust column. All other keys, with the
exception of my default & self-signed key and the key that I set to
trusted using Enigmail show "-" in the Owner Trust column.

Viewing a sampling of the keys using gpg, the "stuck" ones that say
"unknown" in the Owner Trust column of Enigmail say "trust: undefined"
in the gpg output. The key I have set to trusted in Enigmail says
"trust: full" in gpg. My default key that says ultimate in Enigmail
says "trust: ultimate" in gpg. The rest of the keys that show "-" in
Enigmail say "trust: unknown" in gpg:

Owner Trust mapping
Enigmail        GnuPG           trust value
ultimate        ultimate        6
trusted         full            5
marginal        marginal        4
untrusted       never           3
unknown         undefined       2
- -             unknown         <missing>

I got the trust values from gpg --export-ownertrust. The entries that
show up as "-" in Enigmail and "unknown" in GnuPG don't export. I
expect this is because an ownertrust was never assigned to those keys.
Keys in that state stay out of the trusted keys list, but once
assigned via Enigmail or gpg to a trust value of 2, 4, 5, or 6 they
show up in the list.

I think that a key with trust a value of 2 should not be in the list,
just like ones without a trust value assignment and the ones with
trust value of 3.

This seems similar to bug 178:
http://sourceforge.net/p/enigmail/bugs/178/

Thank you for looking into it. I'd be happy to help debug and test,
short of sharing my data files, but I don't know how to debug
Thunderbird plug-ins.

- -- 
Jacob
Debian 7
Icedove (Thunderbird) 31.8.0
Enigmail 1.8.2 (20150416-1748) -- From downloaded xpi, not from Debian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (GNU/Linux)

iQEcBAEBCgAGBQJV+KauAAoJEPYyMqFZRTh7H0EH/jcshqs/Sxjg7cYeTvh25PCp
scqI0m5Yz3IlN4/VMH/EEXtxTv4OT/b7k+5aHAmfzot8YGnPn2KAGHz3mcUWyKyg
5UMjCD+fDPoZkt2KouYfwJ8KEVMNrjIdA5nn/THBks3sd2kSri7cCp3aE/6d85Hi
GQQ7HAEEk3Dfoypf66iKWxDFv/qvIgdZIPZRSp/IhupkFaxBitmCh2rZ9OaRaJ2h
Vn0bB+KVXgx7O09gQcri9MkiH1Rs5hd6SKNtXkioQpwSGG0/HgWUibVJBGO5xOkY
bMdYpm/SSVKKyBdNxc3v37YwqtHqIUjSu8BU1vWEX/nzzlsT50sQKjnTVnzLRZA=
=sqeY
-----END PGP SIGNATURE-----

_______________________________________________
enigmail-users mailing list
[email protected]
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Reply via email to