On Fri, Jul 26, 2019 at 05:08:06AM +0000, Mike Burns wrote: > On 2019-07-26 03.02.43 +0000, Mike Burns wrote: > > Poking around signify and learned that `verifyzdata` calls `verifymsg` > > with `1` hardcoded in the `quiet` parameter. > > > > I do appreciate that there is a distinction between case 'z' setting > > `quiet = 1` vs `verifyzdata` passing `1` as an argument, so maybe this > > diff doesn't quiet capture a truth: > > Now that I've played with signify more, it's clear that mentioning -q is > quite far from from a complete statement of what -z is all about, Forget > about this diff, apologies.
Yep. The verify part specifically only passes the gzip through if it's properly signed, and the signature is block-by-block... so it wouldn't be able to say anything positive until you reach the end of the file anyway.
