* mml2015.el Feedback
@ 2002-12-12 15:28 Georg C. F. Greve
2002-12-12 16:42 ` Josh Huber
` (2 more replies)
0 siblings, 3 replies; 6+ messages in thread
From: Georg C. F. Greve @ 2002-12-12 15:28 UTC (permalink / raw)
Cc: ding
[-- Attachment #1.1: Type: text/plain, Size: 1133 bytes --]
Hi,
it seems that Crypto support has made a leap forward in gnus, which
makes me pretty happy. Currently I'm using CVS-gnus of Dec 11th 2002,
but there is one thing that disturbed me.
When I get a mail that is only signed, I get a
[[PGP Signed Part:OK]]
tag, as it should be.
When the same person sends me an encrypted mail, I get a
[[PGP Encrypted Part:OK, Signer: From unknown user]]
which seems a weird result, as the signer is the same person who
encrypted the mail. The way the message is crafted, I would expect the
email address or real name of the person who signed that mail / some
hint about whether the signature was okay.
"From unknown user" seems strange as it seems to say the signature is
okay, but it doesn't know who signed it. But if Gnus didn't know who
signed it, how did it know which key to check the signature against? :)
Regards,
Georg
--
Georg C. F. Greve <greve@gnu.org>
Free Software Foundation Europe (http://fsfeurope.org)
Brave GNU World (http://brave-gnu-world.org)
[-- Attachment #2: Type: application/pgp-signature, Size: 258 bytes --]
^ permalink raw reply [flat|nested] 6+ messages in thread* Re: mml2015.el Feedback
2002-12-12 15:28 mml2015.el Feedback Georg C. F. Greve
@ 2002-12-12 16:42 ` Josh Huber
2002-12-13 15:27 ` Georg C. F. Greve
2002-12-12 17:45 ` Georg C. F. Greve
2002-12-13 14:36 ` Simon Josefsson
2 siblings, 1 reply; 6+ messages in thread
From: Josh Huber @ 2002-12-12 16:42 UTC (permalink / raw)
[-- Attachment #1: Type: text/plain, Size: 672 bytes --]
"Georg C. F. Greve" <greve@gnu.org> writes:
> "From unknown user" seems strange as it seems to say the signature
> is okay, but it doesn't know who signed it. But if Gnus didn't know
> who signed it, how did it know which key to check the signature
> against? :)
Well, is the mail actually signed as well as being encrypted? Looking
at the mml2015 code, it looks like if there's no signature, this is
what the output text might be.
Perhaps that should be more clear? Hit RET on the:
"[[PGP Encrypted Part:OK, Signer: From unknown user]]"
button, and see what the actual gpg output displayed. Is there any
signature information?
--
Josh Huber
[-- Attachment #2: Type: application/pgp-signature, Size: 188 bytes --]
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: mml2015.el Feedback
2002-12-12 15:28 mml2015.el Feedback Georg C. F. Greve
2002-12-12 16:42 ` Josh Huber
@ 2002-12-12 17:45 ` Georg C. F. Greve
2002-12-13 14:36 ` Simon Josefsson
2 siblings, 0 replies; 6+ messages in thread
From: Georg C. F. Greve @ 2002-12-12 17:45 UTC (permalink / raw)
Cc: ding
[-- Attachment #1.1: Type: text/plain, Size: 978 bytes --]
|| On Thu, 12 Dec 2002 16:28:34 +0100
|| Georg C. F. Greve <greve@gnu.org> wrote:
gg> it seems that Crypto support has made a leap forward in gnus,
gg> which makes me pretty happy. Currently I'm using CVS-gnus of Dec
gg> 11th 2002, but there is one thing that disturbed me.
Another thing: It seems that the signature verification is broken in
digests... when I put several (perfectly fine signed mails that verify
individually) into a digest and mail that off in encrypted form, the
signatures on the mails in the digest all fail.
So there seems to be some systematic bug in there somehow.
It could potentially be related to the MIME boundary bug that existed
for a long time (has it been fixed by now?)...
Regards,
Georg
--
Georg C. F. Greve <greve@gnu.org>
Free Software Foundation Europe (http://fsfeurope.org)
Brave GNU World (http://brave-gnu-world.org)
[-- Attachment #2: Type: application/pgp-signature, Size: 258 bytes --]
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: mml2015.el Feedback
2002-12-12 15:28 mml2015.el Feedback Georg C. F. Greve
2002-12-12 16:42 ` Josh Huber
2002-12-12 17:45 ` Georg C. F. Greve
@ 2002-12-13 14:36 ` Simon Josefsson
2002-12-13 14:51 ` Georg C. F. Greve
2 siblings, 1 reply; 6+ messages in thread
From: Simon Josefsson @ 2002-12-13 14:36 UTC (permalink / raw)
Cc: Shenghuo Zhu, ding
"Georg C. F. Greve" <greve@gnu.org> writes:
> When the same person sends me an encrypted mail, I get a
>
> [[PGP Encrypted Part:OK, Signer: From unknown user]]
>
> which seems a weird result, as the signer is the same person who
> encrypted the mail. The way the message is crafted, I would expect the
> email address or real name of the person who signed that mail / some
> hint about whether the signature was okay.
What is the output from a mouse-2 click on the PGP button?
> "From unknown user" seems strange as it seems to say the signature is
> okay, but it doesn't know who signed it. But if Gnus didn't know who
> signed it, how did it know which key to check the signature against? :)
GnuPG selects the key, Gnus only parses the output from gpg.
Presumably, it is the parsing that fails here.
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: mml2015.el Feedback
2002-12-13 14:36 ` Simon Josefsson
@ 2002-12-13 14:51 ` Georg C. F. Greve
0 siblings, 0 replies; 6+ messages in thread
From: Georg C. F. Greve @ 2002-12-13 14:51 UTC (permalink / raw)
Cc: ding
[-- Attachment #1.1: Type: text/plain, Size: 1566 bytes --]
|| On Fri, 13 Dec 2002 15:36:31 +0100
|| Simon Josefsson <jas@extundo.com> wrote:
>> When the same person sends me an encrypted mail, I get a
>>
>> [[PGP Encrypted Part:OK, Signer: From unknown user]]
>>
>> which seems a weird result, as the signer is the same person who
>> encrypted the mail. The way the message is crafted, I would expect
>> the email address or real name of the person who signed that mail
>> / some hint about whether the signature was okay.
sj> What is the output from a mouse-2 click on the PGP button?
I get a "No details." down in the minibuffer.
Since I normally don't select mails by mouse-clicking on them, I just
discovered something else:
When I mouse-2 click on the mail itself, it is being displayed the
same way, but I get a pop-up window telling me that there was a
signature by XYZ and it was okay.
>> "From unknown user" seems strange as it seems to say the signature
>> is okay, but it doesn't know who signed it. But if Gnus didn't
>> know who signed it, how did it know which key to check the
>> signature against? :)
sj> GnuPG selects the key, Gnus only parses the output from gpg.
sj> Presumably, it is the parsing that fails here.
I see. Maybe a more descriptive phrase could be found than "From
unknon user" then?
Regards,
Georg
--
Georg C. F. Greve <greve@gnu.org>
Free Software Foundation Europe (http://fsfeurope.org)
Brave GNU World (http://brave-gnu-world.org)
[-- Attachment #2: Type: application/pgp-signature, Size: 258 bytes --]
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2002-12-13 15:27 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2002-12-12 15:28 mml2015.el Feedback Georg C. F. Greve
2002-12-12 16:42 ` Josh Huber
2002-12-13 15:27 ` Georg C. F. Greve
2002-12-12 17:45 ` Georg C. F. Greve
2002-12-13 14:36 ` Simon Josefsson
2002-12-13 14:51 ` Georg C. F. Greve
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).