On 23.09.15 10:53, Anne Wilson wrote:
> On 22/09/2015 19:43, Doug Barton wrote:
>> On 9/22/15 11:30 AM, Patrick Brunschwig wrote:
>>> The state doesn't depend on whetherthe key is expired or 
>>> revoked_today_. What matters is whether the key was valid at the 
>>> time of signature creation.
> 
>> ... unless the key was revoked because it was compromised.
> 
> The Details box tells me that part of it was signed by an untrusted
> good signature from Douglas Barton.
> 
> OK - I understand - I think.  But a new user?  Part of the message?
> What part?

Enigmail shows the following markers:

| ********* *BEGIN ENCRYPTED or SIGNED PART* *********
| (...)
| ********** *END ENCRYPTED or SIGNED PART* **********

Anything between is part of the signature. Anything else is not
protected by the OpenPGP-signature (including the message headers!).

>  Why part?

Because the mailing list software automatically adds the following footer:
> _______________________________________________
> enigmail-users mailing list
> [email protected]
> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

This is not part of Dougs message when sent and therefore cannot be part
of his signature.

HTH

Ludwig

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
enigmail-users mailing list
[email protected]
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Reply via email to