* On 22 Feb 2015, Vincent Lefevre wrote: > On 2015-02-21 09:59:41 -0800, Kevin J. McCarthy wrote: > > We could have the code allow it both ways: if they try to delete an > > attachment (except for the signature), we ask confirmation with a > > warning that it will invalidate the signature. If they try to delete > > the signature, then we make sure to flip the SIGN bit off. Would that > > work?
I agree there should be a warning. But should it prompt? I think it's probably enough to simply notify that the signature was invalidated, but leaving the original message in the inbox, marked for deletion as we do for edit-message. But I'm happy with either approach. > If the signature was checked, I think it would be useful to keep this > information at the same time the attachment is deleted. It looks like I forgot to post part of my thinking: when taking action that invalidates a signature, we should change the signature to application/invalidated-pgp-signature or somesuch (and leave the signature content as-is). Then they can delete the sig if they wish. -- David Champion • [email protected]
