On Wed, May 09, 2012 at 12:20:08PM +0300, Mika Suomalainen wrote:
> 09.05.2012 11:56, Jon Dowland kirjoitti:
> > On Wed, May 09, 2012 at 12:29:31PM +1000, Scott Ferguson wrote:
> >> Bob's PGP signature is valid - yours is not
> >> You waste our time and bandwidth.
> >
> > In what way? I can verify Mika's signatures just fine. The signatures
> > are valid.
> >
> >> Bob's key validates his identity - yours does not.
> >> I can verify that "Bob" is "Bob" through a chain of trust.
> >
> > Why does Mikka's not? It's not impossible for someone to have a trust
> > path to Mikka. Albeit one step removed, since the signing key he uses
> > has one signature, from another of his keys - but that one has at
> > least one. (I haven't managed to construct a trust path to Mikka
> > myself, since most of the public pathfinder servers don't have his
> > key)
> >
> >
>
> Because nobody else near Kotka, Finland uses PGP and the nearest CAcert
> assurers are after 110KMs from me.
>
> PS. I am back to weird long signatures. I won't comment to this thread
> anymore nor to anything else which I haven't written in my signature or
> elsewhere.
>

Bye.

--
� ♫ � ♫ � ♫ �
Indulekha


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 20120509125701.GB11415@radhesyama">http://lists.debian.org/20120509125701.GB11415@radhesyama

Hopefully not reigniting this...

On Ma, 08 mai 12, 05:43:17, Indulekha wrote:
> Hi,
>
> I'm getting this with most gog/pgp-signed mails received
> from this list (using mutt):

This part has been solved, but since it is highly unlikely for you to
have a trust path to my key you'll still get a block of 5 or so lines
telling you that the message is properly signed, but there is no
indication that the key belongs to the user (i.e. no trust path).

Sorry, I'm trying to get my key in the Debian web-of-trust soonish, but
I understand you already have filters for that.


I have a few other technical remarks that I'm adding here instead of
digging a specific message to reply:

@Indulekha and other squeeze+mutt users:
beware of a bug where mutt incorrectly sends GPG/MIME signatures with
"disposition=inline".

This is not a problem for mutt itself, but for example Gmail will
(correctly) quote the entire GPG signature on reply to such messages.
Fixed in 1.5.21 (available from squeeze-backports).

@Mika:
At least in my experience Mailman is NOT breaking GPG/MIME. I know of at
least 4 different Mailman installations (including
lists.alioth.debian.org) that work fine.

Assuming the issues with Mailman + GPG/MIME are not at your end[1], did
you consider signing inline only to those specific lists? I'd be amazed
if Thunderbird/Icedove can't do this (for mutt it's trivial with a send-
or a folder-hook).

[1] You could BCC yourself and compare the message with the one received
from the mailing list. Also consider any mail server on the way, I've
read rumors of Microsoft Exchange messing with messages (especially
encodings).

Kind regards,
Andrei
--
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic

13.05.2012 10:26, Andrei POPESCU kirjoitti:
> @Mika:
> At least in my experience Mailman is NOT breaking GPG/MIME. I know of at
> least 4 different Mailman installations (including
> lists.alioth.debian.org) that work fine.

At least it doesn't work on gnupg-user nor enigmail nor lists.ubuntu.com
mailing lists.

> Assuming the issues with Mailman + GPG/MIME are not at your end[1], did
> you consider signing inline only to those specific lists? I'd be amazed
> if Thunderbird/Icedove can't do this (for mutt it's trivial with a send-
> or a folder-hook).

This is little hard to remember to do with 4 computers and 7 different OSes.

> [1] You could BCC yourself and compare the message with the one received
> from the mailing list. Also consider any mail server on the way, I've
> read rumors of Microsoft Exchange messing with messages (especially
> encodings).

When I have time. I have been busy lately.

> Kind regards,
> Andrei

--
[Mika Suomalainen](https://mkaysi.github.com/) ||
[gpg --keyserver pool.sks-keyservers.net --recv-keys
4DB53CFE82A46728](http://mkaysi.github.com/PGP/key.txt) ||
[Why do I sign my
emails?](http://mkaysi.github.com/PGP/WhyDoISignEmails.html) ||
[Please don't send
HTML.](http://mkaysi.github.com/articles/complaining/HTML.html) ||
[Please don't
toppost](http://mkaysi.github.com/articles/complaining/topposting.html) ||
[This signature](https://gist.github.com/2643070) ||