Re: Once again: PGnus & PGP

[Jack Twilley <jmt+usenet@nycap.rr.com>]

>>>>> "Carey" == Carey Evans <c.evans@clear.net.nz> writes:

[... my struggles hand-verifying Carey's message elided ...]

    Carey> Mutt successfully verifies my message, as well as others on
    Carey> the debian-devel mailing list, where PGP/MIME is used by a
    Carey> few people.

Mmmm.  Interesting.

    Carey> To verify the signature manually:

    Carey>   Save the PGP signature in the application/pgp-signature
    Carey> part, as "msg.txt.sig" for example.

This was trivial.

    Carey>   Save the headers and content of the text/plain part,
    Carey> leaving it in its MIME encoding, e.g. as "msg.txt".

This was very difficult.  What headers?  Gnus adds headers, so does
sendmail when sending messages through mail routers, blah blah blah.
I could never get this to work, no matter how hard I tried.

    Carey>   Run PGP against the signature, e.g. as "pgp msg.txt.sig".

This is fine, but it sucks balls if you subscribe to the concept of
using filters and the like.  The filename dependency thing is annoying
too.  Not sure if this is a PGP problem in design or someone taking a
file-based solution and running with it in an email environment or
what.

    Carey> The process is described in RFC 2015.  By "leaving it in
    Carey> its MIME encoding, I mean that the first line in the file
    Carey> is the "Content-Type" header, and my .sig separator "-- "
    Carey> is still QP-encoded as "--=20".

Ugh.  If I could successfully get this to extract, I might forward on
the information to Mailcrypt Len and see if he thinks it could
happen.  It might be something that could be done with gnusish macros
but I wouldn't know.  On the outside, it looks simple.  "Extract
attachment one to a file.  Extract attachment two to a file.sig.  Run
PGP against the second attachment.  Report results.".  Anyone good at
whipping up elisp out there who isn't allergic to PGP/MIME?

    Carey> I'm not claiming that PGP/MIME is actually any good, but
    Carey> this is how I can get a good signature from my message.

Out of curiosity, does mutt support the more standard methods of
signing email messages, like gnus etc.?  Can you sign your messages
the way Rat does, for example?

    Carey> -- Carey Evans http://home.clear.net.nz/pages/c.evans/

Jack.
-- 
Jack Twilley
jmt@nycap.rr.com
.