From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-3.3 required=5.0 tests=MAILING_LIST_MULTI, RCVD_IN_DNSWL_MED,RCVD_IN_MSPIKE_H2 autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 19124 invoked from network); 3 Nov 2022 07:09:43 -0000 Received: from lists.gnu.org (209.51.188.17) by inbox.vuxu.org with ESMTPUTF8; 3 Nov 2022 07:09:43 -0000 Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1oqULz-0004Tp-Ez; Thu, 03 Nov 2022 03:09:31 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oqULw-0004SK-Jf for info-gnus-english@gnu.org; Thu, 03 Nov 2022 03:09:29 -0400 Received: from mout-u-107.mailbox.org ([80.241.59.207]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_CHACHA20_POLY1305:256) (Exim 4.90_1) (envelope-from ) id 1oqULt-0006YN-Vg for info-gnus-english@gnu.org; Thu, 03 Nov 2022 03:09:27 -0400 Received: from smtp202.mailbox.org (smtp202.mailbox.org [10.196.197.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mout-u-107.mailbox.org (Postfix) with ESMTPS id 4N2vy858KRz9sRh for ; Thu, 3 Nov 2022 08:09:20 +0100 (CET) From: Jens Lechtenboerger To: info-gnus-english@gnu.org Subject: Re: Signing a message with S/MIME in Gnus? References: <871qql9021.fsf@gmail.com> <87r0yl41ie.fsf@informationelle-selbstbestimmung-im-internet.de> <87leotw05b.fsf@gmail.com> Mail-Followup-To: info-gnus-english@gnu.org Date: Thu, 03 Nov 2022 08:09:19 +0100 In-Reply-To: <87leotw05b.fsf@gmail.com> (Angel de Vicente's message of "Wed, 02 Nov 2022 20:51:12 +0000") Message-ID: <87y1ss1pls.fsf@informationelle-selbstbestimmung-im-internet.de> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Received-SPF: softfail client-ip=80.241.59.207; envelope-from=jens.lechtenboerger@fsfe.org; helo=mout-u-107.mailbox.org X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: info-gnus-english@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Announcements and discussions for GNUS, the GNU Emacs Usenet newsreader \(in English\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "info-gnus-english" Errors-To: info-gnus-english-bounces+ml=inbox.vuxu.org@gnu.org On 2022-11-02, at 20:51, Angel de Vicente wrote: > [...] > But here is a question. To send messages to this group I use another > e-mail address (which is not present in any of the certificates). There > is no way for me, then, to sign messages to this group with S-MIME? There is. Before coming to that, please reconsider for what you ask: Alice sends a message to Bob, but the message is signed by Mallory. What is Bob supposed to do with this? IMO, the signature should really match the sender=E2=80=99s FROM address. Maybe you can ask your CA to include your other e-mail addresses as well? Or switch to GnuPG for your other e-mail addresses, where you are in control and not some CA (which Bob probably does neither know nor trust anyways)? See [1] for more information. Coming back to your question: You can customize mml-secure-smime-signers to include a list of IDs of signing keys. Best wishes Jens P.S. Google =E2=80=9Cprotects=E2=80=9D you from receiving my e-mails addres= sed to you directly as I spoof my FROM address here (SPF and DKIM both 550-5.7.26 do not pass). Thus, I remove your e-mail address in this reply. P.P.S. If you do not need direct replies, Gnus (Message, in fact) can set a Mail-Followup-To header [2]. [1] https://blogs.fsfe.org/jens.lechtenboerger/2013/12/23/openpgp-and-smime/ [2] https://www.gnu.org/software/emacs/manual/html_mono/message.html#Compos= ing-a-correct-MFT-header-automagically