Testing PGP on List

[Thomas Stivers]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 03/25/04  7:25 AM -0700, Steve Holmes wrote:

> have to be verified manually where Mutt automatically verifies the
> others sent from Greg Nowak, Alex Snow, myself, and a couple others.
> As far as I know, they are choosing the inline approach to make it
> onto this list.  When I receive your messages, I need to do a <esc> P
> from Mutt to do the verification.  At that point, verification is
> successful and then looks like the others.  That Mutt command "looks
> for traditional signatures".  Any way, glad the learning curve is
> through pretty much and I can begin finding practical uses for it:).

When mutt sends inline signatures it adds an "x-action=pgp-signed"
section to the content-type header. Some other mailers don't do this,
and therefore mutt doesn't know from the headers that the message is
signed. You can probably make a procmail/maildrop/whatever rule to
modify the content-type header so these messages can be automatically
verified, but I haven't tried that. I believe only 1.5.x versions of mut
support this by default though so it may not work for everybody.

As a side note I have used the display_filter setting in mutt to
eliminate some of the verbose gpg output for signed messages. I made
macros to switch the filter on and off so I can see the details for
messages that do not verify for example. 
To set this up I have in my .muttrc:

set display_filter=~/.mutt/gpgfilter.sh
macro pager <F5> <enter-command>set\ display_filter=.mutt/gpgfilter.sh<enter><exit><display-message> "strip pgp output"
macro pager <F6> <enter-command>unset\ display_filter<enter><exit><display-message> "show pgp output

And the gpgfilter.sh script looks like the following:

#!/bin/sh

sed '/^.*\[-- PGP output follows --\]$/,/\[-- End of PGP output --]/d' |\
sed '/^.*\[-- .* --\]$/d'

This script actually removes all the informational lines from the top of
messages, but it can be changed as needed.

HTH

- -- 
Clarke's Corollary:
Any technology distinguishable from magic is insufficiently advanced.
Thomas Stivers	e-mail: stivers_t at tomass.dyndns.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAYwcK5JK61UXLur0RAhpgAJ0XQpCLvwYCD+IIv8Bp5x0tKGQuQwCfRXU6
to7frJN+SUdunqk2pcK4E1s=
=PiPK
-----END PGP SIGNATURE-----