Re: PGP signing with attachments problem

Re: PGP signing with attachments problem

[Josh Huber]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Simon Josefsson <jas@extundo.com> writes:

> Ok.  I guess the sane thing would be to implement the Outlook PGP
> approach?  Performing MIME processing first and then PGP
> sign/encrypt each terminal MIME object body without modifying the
> MIME tags. 

Could you get the same effect by going through and adding sign=pgp to
all the parts?  I guess this would individually inline-sign each MIME
part...is this what is wanted?

But it looks like what happens is each part gets inline signed, then
encoded QP...will this still be readable with clients like Outlook?
Gnus seems to handle it fine, but who knows about others?

The logic I've put in which handles the secure tag is in mml-parse-1
in mml.el. (see (looking-at "<#secure..."))  We could change it to
loop through each part and add sign=pgp if the secure method=pgp and
mode=sign.

What do you think?

Something else I think which would be neat would be to use small
graphic glyphs to indicate the secure mode, instead of the tag at the
top of the message...I wonder how hard this would be to do?

ttyl,

- -- 
Josh Huber
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAjyy/rsACgkQv+EgZWshSJqeNgCbB7T1/CJ5vf0qhD29vWJP8X2c
G0oAni2HlhZWcfUoUqiUDUUoZlF8NoGp
=nblq
-----END PGP SIGNATURE-----

Re: PGP signing with attachments problem

[Jorge Godoy]

[-- Attachment #1: Type: text/plain, Size: 869 bytes --]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Josh Huber <huber@alum.wpi.edu> writes:

> Well, as a test see if this works:
>
> put the cursor at the top of your message and do:
>
> M-x mml-secure-sign-pgp
>
> put the cursor inside a mml part, and issue the same command (M-x
> mml-secure-sign-pgp).
>
> See if that does what you want it to. (C-u C-c C-m P to preview)

You mean mml-secure-sign-pgp instead of mml-secure-message-sign-pgp?

I'm trying with this message. Here it is with a sample file attached
(the two first line of my previous test). 


See you,
- -- 
Godoy. <godoy@heilel.mine.nu>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8s0QvEzC+baSjBiURAnb+AKCOeisrPNF8jHlDpVuucH2itBDFQACcDHzM
loV0AJFeFmvgo4V7wTkFk6k=
=OgFM
-----END PGP SIGNATURE-----

[-- Attachment #2: fetchmail-test --]
[-- Type: application/octet-stream, Size: 54 bytes --]

set postmaster "godoy@dagon.conectiva"
set bouncemail

Re: PGP signing with attachments problem

[Jorge Godoy]

[-- Attachment #1: Type: text/plain, Size: 518 bytes --]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Josh Huber <huber@alum.wpi.edu> writes:

<snip />

Signing both parts.


PS:. I'm sending it to the group 'cause somebody might be following
     the discussion. 


See you,
- -- 
Godoy. <godoy@heilel.mine.nu>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8s0RrEzC+baSjBiURAl09AJ44Wff5gw3/KZeHlUbuZWt3CQgtuwCfSNOt
fg/1+VYcgFa3JUoXNV0OqT8=
=Dy3P
-----END PGP SIGNATURE-----

[-- Attachment #2: fetchmail-test --]
[-- Type: application/octet-stream, Size: 344 bytes --]

=2D----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


set postmaster "godoy@dagon.conectiva"
set bouncemail
=2D----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8s0RuEzC+baSjBiURAmfWAJ9qsD/bgEB2poorwxMNHy4X/gVLHACcC3HD
Hkq9Xfv4e2qcuvrtwImHO5U=3D
=3Db9qd
=2D----END PGP SIGNATURE-----