Signature in Attachment
Don.Ferguson at mitchell.com
Wed Dec 8 01:47:48 CET 2004
Thanks for the response. Unfortunately ditching MS Outlook isn't an
option for me. I will look at the possibility of routing a message
received by Outlook into another application, but I am looking for an
Outlook/ Windows solution if one exists.
When I save the body of the message into a text file and use the
gpg --verify option, the signature still fails. Perhaps it has
something to do with the way Windows handles line breaks as opposed to
From: gnupg-users-bounces at gnupg.org
[mailto:gnupg-users-bounces at gnupg.org] On Behalf Of Stewart V. Wright
Sent: Tuesday, December 07, 2004 3:59 PM
To: gnupg-users at gnupg.org
Subject: Re: Signature in Attachment
* Don Ferguson <Don.Ferguson at mitchell.com> [041207 17:43]:
> Many of the messages going to this mailing list also have digital
> signatures. I have no problem verifying the signatures that are clear
> signed; however, those messages with an attached signature always fail
> the verification. Can someone tell me the procedure to verify a
> signature for an email message when it is in an attachment?
You need to get a real email program. Ditch the Microsoft and get
something that recognises PGP/MIME.
Basically signatures in the attachments are generated by emailers that
are able to use RFC 2015 (I think - Google for "pgp signature rfc")
which effectively specifies that the (Open)PGP signature of an email
should be an attachment. The old style signatures are frowned upon
(in some circles) and the argument is that "application/pgp is not
really suited to a world with MIME, non-textual body parts and similar
things" (from the mutt web page). Translation - MIME good.
As for verifying the messages... Um, can you save both the text of
the email and the attached signature and then gpg --verify them? I
don't really know, mutt (my mail program) does it all automatically
for me! :-) As another alternative try one of the many other
programs (thunderbird, ...) that will be suggested by the other
replies I expect you will receive.
More information about the Gnupg-users