Signature in Attachment

[Don Ferguson]

Thanks for the response.  Unfortunately ditching MS Outlook isn't an
option for me.  I will look at the possibility of routing a message
received by Outlook into another application, but I am looking for an
Outlook/ Windows solution if one exists.

When I save the body of the message into a text file and use the
gpg --verify option, the signature still fails.  Perhaps it has
something to do with the way Windows handles line breaks as opposed to
Unix.

-----Original Message-----
From: gnupg-users-bounces at gnupg.org
[mailto:gnupg-users-bounces at gnupg.org] On Behalf Of Stewart V. Wright
Sent: Tuesday, December 07, 2004 3:59 PM
To: gnupg-users at gnupg.org
Subject: Re: Signature in Attachment

G'day Don,

* Don Ferguson <Don.Ferguson at mitchell.com> [041207 17:43]:
> Many of the messages going to this mailing list also have digital
> signatures.  I have no problem verifying the signatures that are clear
> signed; however, those messages with an attached signature always fail
> the verification.  Can someone tell me the procedure to verify a
> signature for an email message when it is in an attachment?

<initial thought>
  You need to get a real email program.  Ditch the Microsoft and get
  something that recognises PGP/MIME.
</initial thought>


Basically signatures in the attachments are generated by emailers that
are able to use RFC 2015 (I think - Google for "pgp signature rfc")
which effectively specifies that the (Open)PGP signature of an email
should be an attachment.  The old style signatures are frowned upon
(in some circles) and the argument is that "application/pgp is not
really suited to a world with MIME, non-textual body parts and similar
things"  (from the mutt web page).  Translation - MIME good.


As for verifying the messages...  Um, can you save both the text of
the email and the attached signature and then gpg --verify them?  I
don't really know, mutt (my mail program) does it all automatically
for me!  :-)  As another alternative try one of the many other
programs (thunderbird, ...) that will be suggested by the other
replies I expect you will receive.



Cheers,

S.