On 2002-02-01 14:32:20 -0500, Mike Schiraldi wrote: >I could attach just a signature and leave out the certs when >sending to certain mailing lists (using a hook to change >smime_sign_command to toggle OpenSSL's "--nocerts" switch). >However, this only decreases the smime.p7s size (after base64 >decoding) from ~1700 bytes to ~650 bytes.
That's not that bad, and it's actually better than compression: Because certificates naturally contain a lot of high-entropy data, compression of signatures won't yield such a large reduction. I'm right now trying this: send-hook ~A "set smime_sign_command=\"openssl smime -sign -signer %c -inkey %k -passin stdin -in %f -certfile %i -outform DER\"" send-hook ~l "set smime_sign_command=\"openssl smime -sign -signer %c -inkey %k -passin stdin -in %f -certfile %i -outform DER -nocerts\"" (But I'm only signing replies to signed messages anyways.) -- Thomas Roessler <[EMAIL PROTECTED]>
smime.p7s
Description: application/pkcs7-signature
