Re: [PLUG] Possible Trojan/Virus in the wild?

[gabriel rosenkoetter <gr@eclipsed.net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, May 05, 2002 at 02:16:30PM -0400, ian reinhart geiser wrote:
> Well unlike the mutt sent gpg emails this one seems to render properly in 
> KMail...  odd...  the mutt emails show up with the email as an attachment 
> while this one renders correctly.
> 
> any mutt users ideas on this?

I've answered this question at least twice now.

That was, as yours was, a clearsigned message. mutt follows RFC
2015, many other mailers don't. (Yet.)

I can clearsign just fine in mutt (I'll clearsign this just to
prove it), but auto-verifying a clearsigned message is a bit
complicated (it means the MUA needs to do parsing of the message
content itself which, as we know from Outlook, is a Bad Idea), which
is why RFC 2015 is such a good idea. Sure, someone could still put
evil stuff in a message and claim that it was application/pgp, but
it would be gpg, not the MUA, that took the hit for that, which is
less likely to be useful for an email virus. (mutt always keeps the
addressbook data in the same place as far as data structures go, but
people have many different ways the like to store that on-disk. I
doubt many of you are also using ~/.addressbook for it, as I am,
since I converted over from pine.)

Verifying clearsigning requires a |gpg -v in mutt (which I did on
both your message and Jesse's, and they both verified fine).

Clearsigning is a bit more irritating in mutt, since it's a shell
escape every time, which means it doesn't cache my (40 character)
passphrase. But that's not really a justifiable complaint.

- -- 
gabriel rosenkoetter
gr@eclipsed.net
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (NetBSD)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAjzVfLYACgkQ9ehacAz5CRrCXgCePMltHXZpuAAiB2FDV+pQq2Dy
LQgAoILsTaWsxO6ogyfEa17EUpAITWQk
=eouf
-----END PGP SIGNATURE-----

______________________________________________________________________
Philadelphia Linux Users Group       -      http://www.phillylinux.org
Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug