On Tue 2017-02-14 02:32:15 -0500, vv01f wrote:
> On 14.02.2017 08:20, vv01f wrote:
>> Is there any option to make it signed first intentionally in enigmail or
>> gpg to ensure this is will happen?
>
> Well, it is the standard[0], is there any otion still to intentonally
> change it?
>
> [0]: http://www.metzdowd.com/pipermail/cryptography/2014-January/019748.html

The message you're linking to talks about the structure of OpenPGP
itself.  Putting the signature outside of the encryption leaks a bunch
of metadata that most people do not want to leak.

Patrick's earlier response was:

>>> If the message was signed and encrypted in one step, then the
>>> signature will be removed as well. GnuPG does not have a
>>> functionality to extract the signature from the encryption (which
>>> would theoretically be possible). If the message was first signed
>>> and then encrypted, then the signature will remain intact.

Enigmail depends on GnuPG.  Without GnuPG having that capability,
enigmail won't be able to do this.

I've recorded the missing feature on GnuPG's upstream bugtracker here,
if you want to pursue it further:

  https://bugs.gnupg.org/gnupg/issue2958

Regards,

  --dkg

Attachment: signature.asc
Description: PGP signature

_______________________________________________
enigmail-users mailing list
[email protected]
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Reply via email to