Re: PGG: "NotDashEscaped: You need GnuPG to verify this message"

["Daiki Ueno" <ueno@unixuser.org>]

2008/1/8, Reiner Steib <reinersteib+gmane@imap.cc>:
> > I think that my ChangeLog entry is not clear.
>
> Could you please install the improved text?

I thought again, and concluded that the one I previously posted is too
descriptive.

> Is this (very naive) patch correct?
>
> +  (when (looking-at "NotDashEscaped: You need GnuPG to verify this message$")
> +    (forward-line))

Not exactly.  You should disable unescaping dashes in this case.
Please read http://thread.gmane.org/gmane.emacs.gnus.general/65087/focus=65109

> I'm not familiar with the mml2015.el code at all.  After some my very
> limited code read and test, I conclude that
> `mml2015-extract-cleartext-signature' is only used to massage the
> displayed text of the article buffer.  Verification
> (e.g. `mml2015-pgg-clear-verify') is done using the original
> ("un-massaged" text).  Is that correct?

Yes, but if the displayed text is different from the verified text,
what the purpose of digital signatures.

> Could you please add a doc string to this function?

I still believe that the right way is to use the plaintext output from
GnuPG as it is, and
mml2015-extract-cleartext-signature is just a kludge for misdesigned
libraries like PGG, which have no ability to do that.  So, I think it
should not have descriptive documentation.

Regards,
-- 
Daiki Ueno