From: Angel de Vicente <angel.vicente.garrido@gmail.com>
To: info-gnus-english@gnu.org
Subject: Re: Signing a message with S/MIME in Gnus?
Date: Thu, 03 Nov 2022 07:21:04 +0000 [thread overview]
Message-ID: <87tu3gy04f.fsf@gmail.com> (raw)
In-Reply-To: <87y1ss1pls.fsf@informationelle-selbstbestimmung-im-internet.de>
[-- Attachment #1: Type: text/plain, Size: 1708 bytes --]
Hello,
Jens Lechtenboerger <jens.lechtenboerger@fsfe.org> writes:
> There is. Before coming to that, please reconsider for what you
> ask: Alice sends a message to Bob, but the message is signed by
> Mallory. What is Bob supposed to do with this?
Yes, I realized after I sent the message that this was going to be
confusing. I managed to do it by setting
'mml-secure-smime-sign-with-sender' to nil, so that I could then choose
the certificate, but Gmail (for example) complains about the mail
address in the certificate not being the same as the "From" address, so
probably not a good idea in general.
> IMO, the signature should really match the sender’s FROM address.
> Maybe you can ask your CA to include your other e-mail addresses as
> well? Or switch to GnuPG for your other e-mail addresses, where you
> are in control and not some CA (which Bob probably does neither know
> nor trust anyways)? See [1] for more information.
So, I was actually thinking of going for the second option: use SMIME
when I send from the address in the certificate, and use PGP when
sending from this gmail address. But now I need to figure out how to
tell Gnus to do that. Right now I have the following, which makes sure
that by default I will be always signing with SMIME. Do you know if
there is an easy way to set these depending on the "From" address?
,----
| (add-hook 'gnus-message-setup-hook 'mml-secure-message-sign-smime)
| (setq mml-secure-method "smime")
`----
Cheers,
--
Ángel de Vicente -- (GPG: 0x64D9FDAE7CD5E939)
Research Software Engineer (Supercomputing and BigData)
Instituto de Astrofísica de Canarias (https://www.iac.es/en)
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 702 bytes --]
next prev parent reply other threads:[~2022-11-03 7:21 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-11-02 9:29 Angel de Vicente
2022-11-02 19:09 ` Jens Lechtenboerger
2022-11-02 20:51 ` Angel de Vicente
2022-11-03 7:09 ` Jens Lechtenboerger
2022-11-03 7:21 ` Angel de Vicente [this message]
2022-11-03 15:28 ` Angel de Vicente
2022-11-03 17:52 ` GH
2022-11-03 18:32 ` Angel de Vicente
2022-11-04 18:11 ` Angel de Vicente
2022-11-03 18:55 ` Jens Lechtenboerger
2022-11-03 19:25 ` Emanuel Berg
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87tu3gy04f.fsf@gmail.com \
--to=angel.vicente.garrido@gmail.com \
--cc=info-gnus-english@gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).