Re: broken: #secure method=pgp mode=signencrypt

[Matthias Andree <matthias.andree@gmx.de>]

On Wed, 09 Jul 2003, Simon Josefsson wrote:

> > Does Gnus run gnupg twice or something? Once to clearsign, then to
> > encrypt?
> 
> Yup.  See the Message manual on Security.  You want:
> 
>      (setq mml-signencrypt-style-alist '(("smime" combined)
>                                          ("pgp" combined)
>                                          ("pgpmime" combined)))
> 
> I think Gnus should default to this, or even better, figure out when
> it doesn't work and revert back to the combined mode.

This convolution is an astonishment, and as such, violates the POLA. :->

What I particularly take offense at is this allegation:

   Will cause Gnus to sign and encrypt in one pass, thus generating a
   single signed and encrypted part.  Note that combined sign and encrypt
   does not work with all supported OpenPGP implementations (in
   particular, PGP version 2 do not support this).

I have just verified this with mutt and pgp-2.6.3i, and pgp on the
command line, it just works. It has always worked as long as I can
remember. (Plus, PGP-2 certainly doesn't claim OpenPGP conformance, it's
too old to.)

The other issue (might be a feature request or yet another question for
help with the configuration) is that Gnus doesn't show me the boundaries
of the encrypted part of such a mail unless I press W s, and if I do, it
still doesn't tell me the part was signed, I only get to know it was
encrypted. Strange?

-- 
Matthias Andree