[aklug] Re: Ecartis and PGP

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Christopher Howard wrote:
> I noticed that my mail clients (Mutt & Thunderbird) are not able to
> verify most of the PGP sigs sent to the AKLUG. It seems like this is
> because Ecartis converts the attached sig to inline text, and then
> inserts extra text between the sig and the message text ("-- Attached
> file included as plaintext... etc.") So Thunderbird just says
> "Error - No valid armored OpenPGP data block found".
>
> But Kenneth's sig seems to be verifiable, as he includes his inline from
> the start, with "start PGP" and "end PGP" delimiters.

I'm using the enigmail plugin for thunderbird.

> Has the list every discussed this problem? Does the list server need to
> mangle the messages this way? Or do we all need to switch over to real
> inline sigs? (I thought I heard inline sigs were kind of outdated.)

By the way - yours came across as:

Part of the message signed; click Pen icon for details
Key ID: 0xD8B405C5 / Signed on: 04/28/2009 11:16 AM

It was "part of the message" because the signature is added at the end
after the signature.

And it's not really a pen icon any more, but the details were:

OpenPGP Security Info

UNTRUSTED Good signature from Christopher Howard <choward@indicium.us>
Key ID: 0xD8B405C5 / Signed on: 04/28/2009 11:16 AM
Key fingerprint: F91A 7EF5 7FA4 CE34 ADC4 0428 4391 4B35 D8B4 05C5
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkn3UP8ACgkQH0OpnUzq8fCDswCfZjTmUTP3Lcmlt5TSqmc0mTLU
6SoAoIQvAEaQsursKvXf69FqAPRW8BHS
=q5RS
-----END PGP SIGNATURE-----
---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Tue Apr 28 10:55:10 2009