Re: Bad PGP signatures due to MIME encoding (?)

[Marshall T. Vandegrift <vandem2@rpi.edu>]

[-- Attachment #1: Type: text/plain, Size: 1479 bytes --]

Simon Josefsson <jas@extundo.com> writes:

> Hm, do you have some message-id?  I don't recall this, but then
> perhaps I don't verify the signatures all that often.

From what I can grep locally:

<news://news.gmane.org/plop87ades4rh1.fsf@gnu-rox.org>
<news://news.gmane.org/877k9tevry.fsf@pooh.honeypot.net>
<news://news.gmane.org/86d6jn1zfc.fsf@jochen.rijnh.nl>

Interestingly, some of the posters of these messages also have
messages where their signatures do verify.  In all the ones where the
signatures don't verify, a `--' has been encoded as `--' and `-- ' as
`--=20', while in the ones where it does verify they have been
correctly encoded as `=2D-' and `=2D-=20' respectively:

<news://news.gmane.org/plop87u1d0dg3x.fsf@gnu-rox.org>
<news://news.gmane.org/86fzok4xq7.fsf@jochen.rijnh.nl>

I'd try to find more examples with other people, but doing ESC s
through all the ding on gmane is slow...  (Is there a way to have the
regex be applied to the raw message?)

> Ah, right.  One idea is that the message is signed twice, sometimes
> people complain that Gnus asks them for a key phrase twice, but if you
> use gpg-agent this happens silently.  Signatures for the same message
> will always be different, so this might explain it.

Hmm. Why does it get run twice?

-- 
Marshall T. Vandegrift <vandem2@rpi.edu>

Real are the dreams of Gods, and smoothly pass
Their pleasures in a long immortal dream.
        -- John Keats, /Lamia/

[-- Attachment #2: Type: application/pgp-signature, Size: 188 bytes --]