ian reinhart geiser on Wed, 24 Apr 2002 14:49:42 -0400


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: Mutt & Pine & GnuPG & Mental Health (Re: Urban EW (was RE: Ricochet and various wireless (was: Re: [PLUG] key-signing Thursday?)))


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

AFIK mutt is the only mailer that attaches the gpg sig as an attachment.
KMail also wraps the entire message in the GPG signature.

I think this came up before and it was decided that mutt was using an older 
implementation while KMail and Pine where using the new standard.

I forget the details on it though.  Knowing what security freaks the KMail 
guys are I find it hard to belive that KMail is using an insecure method.

- -ian reinhart geiser

On Wednesday 24 April 2002 02:42 pm, Time wrote:
> I apologize for beating this dead horse...
>
> I just found out PINE isn't standards compliant to GnuPG useage. If we
> have gone over this before I either didn't understand it or wasn't
> paying attention, but I definitely missed the buss.
>
> Well, seems even though I have GnuPG setup to run in the PINE MUA
> ( http://www.clockbot.net/pub/tools/GnuPG ) I can't verify messages sent
> to me and signed/encrypted from a MUTT/GnuPG MUA.
>
> Why? Because MUTT attaches the signature instead of putting it into the
> message body while PINE puts the sig stuff into the body.
>
> o_O So, PINE, being the easiest for my users to use cannot bring their
> security up to par unless they learn MUTT... or do a manual verification
> of the attached sig stuff...
>
> O_o This is where I ask if anyone has found a work around for this.
>
>
>
> Regards,
>
> Time
>
>
>
>    13
>
>    \
> 9   .  3   clockbot.net
>    /
>
>     6
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8xv4SPy62TRm8dvgRAgzjAJ0Z7hCmHJ1uBCvZXTuu/9htkTFCegCg7R87
Z8JIGLbK/077SYsraeXLkPU=
=PAgk
-----END PGP SIGNATURE-----


______________________________________________________________________
Philadelphia Linux Users Group       -      http://www.phillylinux.org
Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug