On Wed, Sep 02, 2015 at 06:47:53PM +0100, Ken Moffat wrote: > I do not have a lot of use for encrypting my mail, but it is > (sometimes) interesting to look at the signatures of signed mail on > the lists - and using signed git tags for anything which I release > sounds like a good idea. > Snipping most of this, it is not mutt. But any suggestions are still welcome. I tried putting 1.5.23 in /usr/local for testing - and that shows the exact same results.
All my mail is on my "server" (the machine which serves up sources, my notes, media files to my local network). The only things which have been updated there this year (and I did not seem to have a problem until recently) are the linux kernel and openssl. Oh, and I updated smartmontools yeaterday, but that is not likely to be relevant. But a small update on my theory - > Searching for a straw to pull on (google mostly finds posts about > bad signatures in apt-get), I took a look at some of today's signed > posts on lkml. > > First, a good one: > > Content-Type: multipart/signed; boundary="=-=-="; > micalg=pgp-sha1; protocol="application/pgp-signature" > > for this one, there is no Content-Disposition > > Next, two bad ones: > > Content-Type: multipart/signed; micalg=pgp-sha256; > protocol="application/pgp-signature"; > boundary="d6Gm4EdcadzBjdND" > Content-Disposition: inline > > Content-Type: multipart/signed; micalg=pgp-sha256; > protocol="application/pgp-signature"; > boundary="KUplgXDa5OCjEs8pbWXqfHVv1o4NnLftB" > > and for my own bad one: > > Content-Type: multipart/signed; micalg=pgp-sha1; > protocol="application/pgp-signature"; > boundary="bg08WKrSYDhXBjb5" > Content-Disposition: inline > > Is the fact that bad signatures are showing up with "random" > boundary identities (i.e. not =-=-=) and Content-Disposition: inline > an indication of a problem, or am I flailing randomly in the dark ? Using 1.5.23, I looked at signed mails on this list. That showed my theory is wrong : the mail from Brendan Cully announcing 1.5.24 has the non =-=-= boundary with inline disposition but is good, whereas that from Kevin J. McCarthy is similar but bad. Any ideas, please ? ĸen -- Il Porcupino Nil Sodomy Est! (if you will excuse my latatian) aka "The hedgehog song"
