[Fw: [OT] Content-Disposition: inline?]

[David K. Trudgett]

--5I6of5zJg18YgZEa
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thursday 2001-09-13 at 12:27:53 -0400, Michael H. Warfield wrote:

> > I send my mail with Mutt and I always sign it with GnuPG.  That
> > results in the message going out as two (or more) parts -- the
> > message, and the signature.  Both have a 'Content-Disposition:
> > inline' header, which I take it means that the MUA is supposed to
> > display the attachment inline, since both are of type text/plain. =20
>=20
> 	That's funny...  I use Mutt (1.3.20 currently) with gpg (1.0.6
> 	with ldap patch currently) and I never have signed messages come
> 	out as multipart Mime.  I get one part and it's signed inline.
> 	Mutt sends it and recognizes it.  Do your messages go out as Mime
> 	when not signed?  (Mine do not, so that maybe why I don't see this
> 	effect).

Mine also uses PGP/MIME. I thought it was the default setting (but I
am currently using PGP 2.6.3i until I make the switch to GnuPG). I
will still be keeping 2.6.3 as a backup, though.


>=20
> 	Do you need to use Mime?  Is there any problem with using
> 	clearsign signatures on the message itself?

Clearsigned messages are deprecated and for good reasons. They are not
reliable (they often don't work). It is often not possible to verify a
clearsigned message, simply because small changes have occurred to the
message en route to destination (MUAs or MTAs often change line
breaks, for instance, so if you accidentally make one single line
longer than an MUA or an MTA's max line length, your signature will be
invalidated). There are also problems with particular types of text
files, like diffs, I believe.=20

If you can't verify a signature reliably, it is nearly a pointless
exercise to sign in the first place.


>=20
> > Anyway, I just got a mail from a user on a rather low-tech mailing
> > list complaining that all of my mail comes up blank with two
> > attachments -- the two parts mentioned above.  She's using:
>=20
> > 	X-Mailer: Microsoft Outlook Express 5.00.3018.1300
>=20
> > I'll bet my life savings on which one of us has the real problem
> > :-D Regardless, I was wondering if anyone would be able to confirm
> > for me what exactly that is? =20
>=20
> 	What happens if the message goes out as a text message with a
> 	clear-sign signature in the text itself?

Since it is a normal text message, it will be displayed as normal by
OE, of course. Or am I missing something here? :-)


David Trudgett


--5I6of5zJg18YgZEa
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia

iQCVAgUBO6FNoqQMiROUOqeNAQGNIQP/UteUYHJhGPiiLSlKX7CAJ1e+F8jkAZ4r
0xnkdByEmeqC6yGZ57j9oqA27Zc851qJO4BU3XD0NlAgqmp7JsdsMjjATRsSORPE
dto8mkoISe0cVN2oAuwSS3MEMBxgPvQ+PKtQkuQ9e+IBQDO1zym5YLGa7/+E+fSi
ZkT0AezyzVI=
=+O6I
-----END PGP SIGNATURE-----

--5I6of5zJg18YgZEa--