On Wed, Oct 16, 2002 at 03:02:31PM +0200, René Clerc wrote: > * Stephane Bortzmeyer <[EMAIL PROTECTED]> [16-10-2002 14:52]: > > [about PGP signatures] > > > Or to hide it unless specifically called? > > unset pgp_verify_sig > > -- > René Clerc - ([EMAIL PROTECTED]) > > There is a definite parallel between shots of tequila and a woman's breasts. > One is not enough and three are too many.
Mutt GPG integration is so very good it's almost a crime to suggest a change. In a perfect world, I think I'd want to know only if the signature did *NOT* check out against the keyserver copy. Otherwise I'd prefer the appearance of the signature text to be subject to an on/off switch. It is remarkably clean the way the keychain gets updated. If I ever had something I wanted to say in secret, with mutt, there is a good chance I actually could. I've been set up to use PGP since 1993, but never sent encrypted messages because key exchange was so cumbersome and because those with whom I'd have a need to speak privately are too intimidated by all the steps necessary with other email clients. For this reason I'd like to always verify, always fetch keys (that are not already on my keychain), but only see signature verification failures. Everything else should be invisible. Well, maybe a rotating slash to indicate fetch activity between me and the keyserver. Then again, all my life I've wanted things I can't have. JPK
msg31861/pgp00000.pgp
Description: PGP signature
