verifying inline signatures

Steve Holmes steve at holmesgrown.com
Thu Feb 2 15:31:35 EST 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Yes, it would have to be the list software.  I also get this behavior
with Yahoogroups.  I haven't changed mutt in nearly a year now.  I can
use the <ESC> P combination to manually verify sigs.  I get spoiled with
mutt's transparent handling of pgp and how well it does it.

I'm thinking about implementing procmail to do my mail filtering instead
of exim's built-in filtering support.  Procmail supports regular
expressions where exim doesn't seem to.

On Wed, Jan 25, 2006 at 08:00:23PM -0500, Igor Gueths wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
> 
> Yeah I remember an exploit a while back that allowed one to traverse the directory tree.
> On Wed, Jan 25, 2006 at 05:39:44PM -0500, Garrett Klein wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA512
> > 
> > I just had one of those major epiphany, "Ah-ha!" moments. I'm thinking that there was some sort of mailman upgrade/patch, most likely for some really critical exploit, that everyone upgraded their version too. That would explain inline signatures not verifying on other lists, as well as why messages not going through any mailing lists verify just fine.
> > 
> > Garrett
> > 
> > On Wed, Jan 25, 2006 at 01:39:36PM -0500, Charles Hallenbeck wrote:
> > > Hi people,
> > > 
> > > I have experienced the same failure to verify inline signatures on signed messages on the list as others have 
> > > experienced. Neither my Mutt nor my gnupg have changed to account for this. Nor my exim4 either, for that matter.
> > > 
> > > I have just implemented encryption on my outgoing mail, and it works, as you can see. except that verifying the 
> > > signatures on received mail still fails.
> > > 
> > > HOWEVER -- When I send myself mail to an alternative email address I have available, not going through any list, the 
> > > verification of my signed messages works fine, just as it used to on the list. 
> > > 
> > > So what does that mean? Has the list software changed? Has anyone solved this problem?
> > > -- 
> > > The Moon is Waning Crescent (19% of Full)
> > > But you can still get downloads from http://www.mhcable.com/~chuckh
> > > 
> > > _______________________________________________
> > > Speakup mailing list
> > > Speakup at braille.uwo.ca
> > > http://speech.braille.uwo.ca/mailman/listinfo/speakup
> > > 
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.4.1 (GNU/Linux)
> > 
> > iQIVAwUBQ9f+L/Q3GgYHRr/HAQqG7Q//S9cd1Hfyo7otPbnPMjwPa1JM6WGfI5w0
> > hcmJxzNTzp+xPEWJULardQxD0IHtIYce1CcBuzcDwFP0vofCGchYsrILy4EThrZo
> > eaAWtffJtffHV3J8AuZpqTVLfuviPf8nU+A+x57MXaEXZRWSNQyJusmR5W8d3nJ5
> > dXgoX1Agxm2U/OBPvOwY5XBuSzEm8vtrrE4ofAJJOKtyLwF4mOhG0Qso8W/RGKvn
> > 9O/EqscV0j2nLOYdXDjAF45fsR53gu4XqEnInUqVnG666vAAjEkHLq95MLHqbwFU
> > UjXYCWkgdlfqSL2MN43QaDqIe1gWPvlz9P5V4LX0ejt8AYE5HgWM2kxDRFnen7mG
> > 8QSl4RUSK6sFdn/FDmATHOhEvcAhPDgWhrNBHWz0cUa9rXsB99e1ObM88bS0IZe4
> > eGCljlfcJSWgSq8wxUk+3uLTXnY1Ey2ki8owAB20E2r9jgxco67Oa33alkIoCBHW
> > 40IDeH2PUuWKVDosXNuk5NHwNRX+9v7eZ+IrZ6Gkgvh6aSK6rkLc33Q8tOzEFviX
> > oqHdEYGdcbo5ZsLYaw7kXRiAR3vspWOuiXDmo/TDH33JAX/xCCK4fYr/Xxuc77SN
> > uWJFTbh7oOSxNQCUufvNT1wXzn1mqu5Nsd6DkjO3/WWsT+9e2MNXFcOlV/BDcdpH
> > zDxVsO24+KE=
> > =3deJ
> > -----END PGP SIGNATURE-----
> > 
> > _______________________________________________
> > Speakup mailing list
> > Speakup at braille.uwo.ca
> > http://speech.braille.uwo.ca/mailman/listinfo/speakup
> 
> - -- 
> Any society that would give up a little liberty to gain a little
>    security will deserve neither and lose both.
> - -- Benjamin Franklin
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.0 (GNU/Linux)
> 
> iQIVAwUBQ9gfJ6e2pgKIdGq4AQoAFRAAtix3N0ayk5JSaMQc3GXd9wBJqjT2ITRu
> Pk2x1TKV1SAG84SVbX13iA+y3mVi1/B2UjiskCWvJsOen8wJjq9Z7ot8629Ns1D5
> 2mTmrXfH36EHMKnhaTaN5J8bz+CCg2tfnPQqd4Qs4tXjqhie4D76K5Sq6qjk5VV7
> mfEU1MJOyE9i87/wkIwFTMxANzzJvA2w1Jtn9yBurDyC8I/P0x23M3lIQ/3ykoyz
> W69Gk6FxJDEvD2g51nfWVbmY4uzLrQSTfyzSYqlKFNMtrOcrIWa7RqYxjLB3P7+J
> Kufl8VbQ5spEKTBQjF5gk9eGYHDAiAWDNu9GuhWuyYB/oxULOApcHsZd9eTJuHYq
> 9dG84GA3qvHrPs/Mccu4i6eARSdqbRXXA2vyJaN0H2yY3uNdpzGqazcHP/AWH7xG
> wAQn6i4MzZZtlR1ZMrV2HafWPAfh4YuJP78SdNGc10YW78fh+RIFGo3FEyM4aj09
> gMqsWXaRdbvPPHGi3CHSHDGPkGLv1uyXvyq/gjRTpUyO5g6xAQL6dKJqQwDPy6Jl
> 0XjGm6B2uu0u0XcqMMmsm+YaEQihGwEqB8OL0HO2Mbo524MtcYNZ0JesWE/EMUlw
> wzVsSCe1H3VICSRaocbZW5mXhCBAXNAJZAIG7/kfGaCwE7spn032UFZD+xmdkngJ
> 9CKvhLVFvMQ=
> =rO2H
> -----END PGP SIGNATURE-----
> 
> _______________________________________________
> Speakup mailing list
> Speakup at braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
> 
> 

- -- 
HolmesGrown Solutions
The best solutions for the best price!
http://ld.net/?holmesgrown
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.7 (GNU/Linux)

iD8DBQFD4mwmWSjv55S0LfERA4RbAJ9V5DmFi71/e0ulCK4BPyuc8+wgxwCgiTNN
GzUTA9WOEXMSBOplauE1v3Q=
=zBij
-----END PGP SIGNATURE-----




More information about the Speakup mailing list