signed headers for OpenPGP [was: Re: What is the benefit of signing an encrypted email]

2011-01-19 Thread Daniel Kahn Gillmor
On 01/19/2011 01:29 PM, Werner Koch wrote: > I'd like to see a feature in MUAs to wrap the entire mail as presented > in the composer into a message/rfc822 container and send the actual > message out with the same headers as in the rfc822 container. This > allows to sign the entire mail including

Re: What is the benefit of signing an encrypted email

2011-01-19 Thread Ingo Klöcker
On Wednesday 19 January 2011, Werner Koch wrote: > Hi! > > I'd like to see a feature in MUAs to wrap the entire mail as > presented in the composer into a message/rfc822 container and send > the actual message out with the same headers as in the rfc822 > container. This allows to sign the entire

Re: What is the benefit of signing an encrypted email

2011-01-19 Thread Werner Koch
On Wed, 19 Jan 2011 19:35, go...@fsfe.org said: > I think this would be really great. Do you think it's worth the effort > to contact the developers of Thunderbird/Enigmail, Mutt, Gnus and some I guess you will run into problems if you enable that: Many MUAs are not fully MIME compliant and may b

Re: Missing 'END PGP MESSAGE' not detected

2011-01-19 Thread Werner Koch
On Wed, 19 Jan 2011 19:32, ds...@jabberwocky.com said: > If I remember correctly, GPG only complains for invalid CRC. A missing CRC > is legal, as the CRC is a MAY. I checked the code and there is a missing CRC message. I also recalled the the CRC is may. Looking again at it I noticed that I

Re: What is the benefit of signing an encrypted email

2011-01-19 Thread Hauke Laging
Am Mittwoch 19 Januar 2011 19:29:35 schrieb Werner Koch: > I'd like to see a feature in MUAs to wrap the entire mail as presented > in the composer into a message/rfc822 container and send the actual > message out with the same headers as in the rfc822 container. This > allows to sign the entire

Re: Do smartcards stay unlocked forever by design?

2011-01-19 Thread Werner Koch
On Tue, 18 Jan 2011 17:21, marco+gn...@websource.ch said: > for me whenever the smartcard hasn't been used for some time. I do this > to reduce the chance that someone can use the unlocked card while I'm > away or when I forget to pull the card. That does only help if you have a pinpad equipped r

Re: What is the benefit of signing an encrypted email

2011-01-19 Thread Martin Gollowitzer
Hi Werner, * Werner Koch [110119 19:31]: > I'd like to see a feature in MUAs to wrap the entire mail as presented > in the composer into a message/rfc822 container and send the actual > message out with the same headers as in the rfc822 container. This > allows to sign the entire mail including

Re: GnuPG 2.1 beta released

2011-01-19 Thread Werner Koch
On Tue, 18 Jan 2011 15:14, bernh...@intevation.de said: > Looks like it needs libassuan-2.0.1 and the configure check for this does not > indicate it when running with libassuan-dev 2.0.0-0kk1. Right, the check is missing. I'll add it. > BTW: Was there an announcement of libassuan 2.0.1? Pro

Re: Missing 'END PGP MESSAGE' not detected

2011-01-19 Thread David Shaw
On Jan 19, 2011, at 1:20 PM, Werner Koch wrote: > On Wed, 19 Jan 2011 17:46, ds...@jabberwocky.com said: > >> Not really (or at least, not within GnuPG). The thing is, it doesn't >> really matter in practice. OpenPGP has its own corruption detection >> called a MDC, that applies even if part of

Re: What is the benefit of signing an encrypted email

2011-01-19 Thread Werner Koch
Hi! I'd like to see a feature in MUAs to wrap the entire mail as presented in the composer into a message/rfc822 container and send the actual message out with the same headers as in the rfc822 container. This allows to sign the entire mail including the headers. On the receiving site the MUA sh

Re: Missing 'END PGP MESSAGE' not detected

2011-01-19 Thread Werner Koch
On Wed, 19 Jan 2011 17:46, ds...@jabberwocky.com said: > Not really (or at least, not within GnuPG). The thing is, it doesn't > really matter in practice. OpenPGP has its own corruption detection > called a MDC, that applies even if part of the armor (the "END PGP > MESSAGE") is missing. A trun

Re: Missing 'END PGP MESSAGE' not detected

2011-01-19 Thread David Shaw
On Jan 19, 2011, at 12:09 PM, Kavalec wrote: > > > David Shaw wrote: >> >> On Jan 19, 2011, at 10:46 AM, Kavalec wrote: >> >>> Is there a way to force the decrypt to fail on a missing 'END PGP >>> MESSAGE' ? >> >> ... take one of your truncated files and run: >> >> gpg --list-packets the-tru

Re: Missing 'END PGP MESSAGE' not detected

2011-01-19 Thread Kavalec
David Shaw wrote: > > On Jan 19, 2011, at 10:46 AM, Kavalec wrote: > >> Is there a way to force the decrypt to fail on a missing 'END PGP >> MESSAGE' ? > > ... take one of your truncated files and run: > > gpg --list-packets the-truncated-file.asc > > Look for a line that reads "mdc_method:

Re: Missing 'END PGP MESSAGE' not detected

2011-01-19 Thread David Shaw
On Jan 19, 2011, at 10:46 AM, Kavalec wrote: > > Using GnuPG 1.4.4 we occasionally receive truncated files, but gpg decrypts > them anyway. > > Is there a way to force the decrypt to fail on a missing 'END PGP MESSAGE' ? Not really (or at least, not within GnuPG). The thing is, it doesn't real

Missing 'END PGP MESSAGE' not detected

2011-01-19 Thread Kavalec
Using GnuPG 1.4.4 we occasionally receive truncated files, but gpg decrypts them anyway. Is there a way to force the decrypt to fail on a missing 'END PGP MESSAGE' ? Thank you! -- View this message in context: http://old.nabble.com/Missing-%27END-PGP-MESSAGE%27-not-detected-tp30711102p30711102