-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Saturday 22 March 2003 7:10 am, Ian David Laws wrote:
I do not understand this thread. I am using kmail and his signature is not a 1000 lines long I receive "message was signed with unknown key xxxxx. The validity of the signature can't be verified.
That is what you and I see because kmail detects the signature, strips it from the message, decodes the data in it and "validates" that it is accurate, and checks your keyring to see if you "know" the sender [directly or by proxy]. Having done all that, kmail simply displays a two-line header to the message (and color codes the background to red/yellow/green depending on what it finds) People using other MUA's that aren't configured to check end up displaying the message "as is", meaning the "---begin pgp message---", "---begin pgp signature---", the "signature" itself, and "---end pgp....---" lines are there in all their ugly glory [with this message selected, press the "v" key and you'll see it after the headers] The "complaint" centers around the fact that the "most common" method of signing messages results in about a 4 or 5 line "signature" block; the alternate method that Mitch was using produced a 16 line block -- it is the addition of that dozen lines or so that got people upset, not 1000 lines [though I'd be somewhat annoyed at 1000 lines myself if my client didn't "hide" it from me -- however I'd realize that is "part of the protocol" and simply accept that fact, I wouldn't go looking to shoot the messenger...]
I was going to start using pgp to sign my e-mails but now I am not sure as certain MUA seem to have a problem. :-( I do not want to be flamed.
It is a fact of "internet life" that somewhere, sometime, someone WILL flame you for the most trivial of reasons (often they are "trolling" for a response, and "flames" seem to be the most effective "bait") Don't worry about others. A tag line I've seen recently sums it up nicely: "fix your own problems before fixing others" -- by this I don't mean "use a better/different MUA", but rather realize that "someone else" has a problem they haven't attended to, and generally it "isn't your fault", they've just taken their frustration out on you. - -- Yet another Blog: http://osnut.homelinux.net -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) Comment: http://osnut.homelinux.net/TomEmerson.asc iD8DBQE+fLUYV/YHUqq2SwsRAkdCAJ9pICh1QYdlvG7VYB1Ieb1CJZk1ZQCgxphQ 60r4eFloyF7wajorwIQdoTY= =GLGZ -----END PGP SIGNATURE-----