--- Begin Message ---
Hello,
I am attempting to verify a signed protonmail.com email using Openpgpjs library
for a small client-side application. However, I have been unable to do so since
I can't figure out what boundaries or the subsection of the raw email message
does protonmail service encapsulate to formulate the standard PGP signature.
From my understanding it should be these lines (starting with an '&') that
should get encapsulated to formulate the PGP signature:
MIME-Version: 1.0
Content-Type: multipart/signed; protocol="application/pgp-signature";
micalg=pgp-sha256;
boundary="---------------------i6v6xkxfcyrp6486l406uof887n42li5"; charset=UTF-8
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
-----------------------i6v6xkxfcyrp6486l406uof887n42li5
Content-Type:
multipart/mixed;boundary=---------------------yfgbj0fktxh9pfgqxbdq1ehdbm62dfys
-----------------------yfgbj0fktxh9pfgqxbdq1ehdbm62dfys
&Content-Type:
multipart/alternative;boundary=---------------------fujsoqrfmpwp177zji13yuzv1gwrz2sq
&
&-----------------------fujsoqrfmpwp177zji13yuzv1gwrz2sq
&Content-Transfer-Encoding: quoted-printable
&Content-Type: text/plain;charset=utf-8
&
&A generic signed email message.
&-----------------------fujsoqrfmpwp177zji13yuzv1gwrz2sq
&Content-Type:
multipart/related;boundary=---------------------oz10cb6hrv0pghmqvoggdrf0zxkcjst0
&
&-----------------------oz10cb6hrv0pghmqvoggdrf0zxkcjst0
&Content-Type: text/html;charset=utf-8
&Content-Transfer-Encoding: base64
&
&PGRpdj5BIGdlbmVyaWMgc2lnbmVkIGVtYWlsIG1lc3NhZ2UuPC9kaXY+
&-----------------------oz10cb6hrv0pghmqvoggdrf0zxkcjst0--
&-----------------------fujsoqrfmpwp177zji13yuzv1gwrz2sq--
-----------------------yfgbj0fktxh9pfgqxbdq1ehdbm62dfys
Content-Type: application/pgp-keys; filename="publickey - [email protected] -
0xXXXXXXXX.asc"; name="publickey - [email protected] - 0xXXXXXXXX.asc"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="publickey - [email protected] -
0xXXXXXXXX.asc"; name="publickey - [email protected] - 0xXXXXXXXX.asc"
.....................................................................................
.....................................................................................
.....................................................................................
.....................................................................................
..................Base64 Encoded Public Key.....................
.....................................................................................
.....................................................................................
.....................................................................................
.....................................................................................
-----------------------yfgbj0fktxh9pfgqxbdq1ehdbm62dfys--
-----------------------i6v6xkxfcyrp6486l406uof887n42li5
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: ProtonMail
Comment: https://protonmail.com
iQIcBAEBCAAGBQJT3MFeAAoJEF8rR1bthz0jslMP/RMRODVKLmLwZ3sMR62COGc/
0yQSh3c37qkkVjD0RvgdziHuCSSYelhNl7UMQofpdLonnJgPW3svlftE3Gn11JLp
ZYv2iMwCzwyM2eLYpSQoJBNnGZzQDGnZRBkFOwdkkohUSBjhPjiszYw3KwnpsuxG
I+m81IMJATR0wOylLumVdjbvS1/f9bOzBRvhgu2HS54lfPnl162RRZpycrrb5IOi
07QWIlUGVUdAxFUq4Jlm99KB17lQhri3zm6m7O5k0faD3IKFRTQGKseq7j88pRs6
j85v/cc35CHW9+66jcz7Y3UtOIj3gqDQd/Wj05YP01QSwSCuuVAezvXngljF8fLP
OKQhFpLoLnWvDPgX3nKwGbX52qZwLGN0bZduhOmMPYwKAEFAYDOOW7q+i/dyz5xT
od54j32QiNkSqDCVkvOT6dKiCdCa8GvtwwXPKa9X7+VZB2xYeJorJiaIesD7wyVN
CQDx11uMGMkpZ/BmCIA5mDIkDnUTIxHxNFpn2kS6nHJqmJ/LleTpAKLhPWuY1U28
YVraBzmAZ/Wj2Frq0utPi4cFf5r3x9jXIzie4fYrUjMKCN+CNfLL15Py/z9OY1ux
vvYdMiLAzL1Ujvjpyw7sCdc2KnbXaM9jmbBGjmVCMX/wGcGKT6cIxYnkR4NOW62L
jaBgelaHIL5kZ+E/kpS6
=wh+e
-----END PGP SIGNATURE-----
-----------------------i6v6xkxfcyrp6486l406uof887n42li5--
Regardless, I've tried encapsulating various subsections to verify
protonmail.com signed email messages but I've not been able to verify them at
my end successfully.
I even scripted a small jsfiddle example to quickly verify various subsections
of the signed raw email against the respective signature but that has been
unfruitful as well. (https://jsfiddle.net/xrdvbhaw/18/)
Please let me know exactly what all subsections of the raw email does the
protonmail webclient uses to formulate the standard PGP signature.
Thank you & Regards,
Random Noodles
--- End Message ---
_______________________________________________
enigmail-users mailing list
[email protected]
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
