[Mailman-Developers] PGP-signed message verification using the email module (and in Mailman)

2014-01-08 Thread Paul Boddie
Hello, Sorry if this is too off-topic for the Mailman list and should really be directed to the email-sig list, but as I noticed that one of the GSOC projects touched upon message signing and verification, I thought that there might be more expertise on hand amongst this list's members, and

Re: [Mailman-Developers] PGP-signed message verification using the email module (and in Mailman)

2014-01-08 Thread Daniel Kahn Gillmor
On 01/08/2014 12:35 PM, Paul Boddie wrote: Of course, RFC 3156 warns about the pitfalls of encoding the part that is to be signed, It doesn't just warn about the pitfalls. it states that: Multipart/signed and multipart/encrypted are to be treated by agents as opaque, meaning that the

Re: [Mailman-Developers] PGP-signed message verification using the email module (and in Mailman)

2014-01-08 Thread Stephen J. Turnbull
Daniel Kahn Gillmor writes: so if python's email module really does mangle this part, it cannot be used within RFC-2480-compliant mail gateways. This is a bug in python's email module, and it needs to be fixed. Have you reported it to the python email module? I believe the problem is

Re: [Mailman-Developers] PGP-signed message verification using the email module (and in Mailman)

2014-01-08 Thread Paul Boddie
On Wednesday 8. January 2014 19.21.12 Daniel Kahn Gillmor wrote: On 01/08/2014 12:35 PM, Paul Boddie wrote: Of course, RFC 3156 warns about the pitfalls of encoding the part that is to be signed, It doesn't just warn about the pitfalls. it states that: Multipart/signed and

[Mailman-Developers] GSoC 2014 ideas list

2014-01-08 Thread Terri Oda
I've had prospective Google Summer of Code students emailing me since, uh, September or so... so I guess it's time to talk ideas! I've set up a wiki page, as usual: http://wiki.list.org/display/DEV/Google+Summer+of+Code+2014 But let's start with here: what small projects would you like to see