Digital signatures

Path	csiph.com!eternal-september.org!feeder.eternal-september.org!aioe.org!bofh.it!news.nic.it!robomod
From	Teemu Likonen <tlikonen@iki.fi>
Newsgroups	linux.debian.user
Subject	Digital signatures
Date	Sun, 27 Dec 2015 09:10:01 +0100
Message-ID	<qKeyR-4lo-3@gated-at.bofh.it> (permalink)
References	<qILpf-68N-1@gated-at.bofh.it> <qIT3r-2sw-9@gated-at.bofh.it> <qITGa-2Yd-19@gated-at.bofh.it> <qJdvc-6KI-15@gated-at.bofh.it> <qJfx0-82z-15@gated-at.bofh.it> <qJg9I-8uN-5@gated-at.bofh.it>
X-Original-To	debian-user@lists.debian.org
X-Mailbox-Line	From debian-user-request@lists.debian.org Sun Dec 27 08:00:00 2015
Old-Return-Path	<tlikonen@iki.fi>
X-Amavis-Spam-Status	No, score=-4.29 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, FOURLA=0.1, PGPSIGNATURE=-5, RCVD_IN_MSPIKE_BL=0.01, RCVD_IN_MSPIKE_L3=2.6] autolearn=no autolearn_force=no
X-Policyd-Weight	DYN_NJABL=ERR(0) NOT_IN_SBL_XBL_SPAMHAUS=-1.5 BL_NJABL=ERR(-1.5) CL_IP_EQ_HELO_IP=-2 (check from: .iki. - helo: .johanna1.inet. - helo-domain: .inet.) FROM/MX_MATCHES_NOT_HELO(DOMAIN)=0; rate: -5
Razorgate-Kas	Status: not_detected
Razorgate-Kas	Rate: 0
Razorgate-Kas	Envelope from:
Razorgate-Kas	Version: 5.5.3
Razorgate-Kas	LuaCore: 80 2014-11-10_18-01-23 260f8afb9361da3c7edfd3a8e3a4ca908191ad29
Razorgate-Kas	Lua profiles 69136 [Nov 12 2014]
Razorgate-Kas	Method: none
Mail-Followup-To	debian-user@lists.debian.org, tlikonen@iki.fi
User-Agent	Gnus/5.13 (Gnus v5.13) Emacs/24.5.50 (gnu/linux)
MIME-Version	1.0
Content-Type	multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature"
X-Mailing-List	<debian-user@lists.debian.org> archive/latest/701603
List-ID	<debian-user.lists.debian.org>
List-URL	<https://lists.debian.org/debian-user/>
List-Archive	https://lists.debian.org/msgid-search/87d1ts9va8.fsf_-_@mithlond.arda
Approved	robomod@news.nic.it
Lines	67
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Date	Sun, 27 Dec 2015 09:59:27 +0200
X-Original-Message-ID	<87d1ts9va8.fsf_-_@mithlond.arda>
X-Original-References	<87vb7poe7o.fsf@gmail.com> <567AB5EA.4040005@gmail.com> <567ABD5D.1030901@fastmail.fm> <87r3icja3o.fsf@gmail.com> <567C0822.4030806@fastmail.fm> <567C1174.8060305@gmail.com>
Xref	csiph.com linux.debian.user:162126

Show key headers only | View raw

[Multipart message — attachments visible in raw view] - view raw

Anthony Mapes [2015-12-24 10:38:28-05] wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> While we're on the topic of signatures, what do you consider to be
> good and bad to include in signatures?

If we change the subject to digital signatures I think that having the
signature in a separate MIME part is the modern way. You had the PGP
signature in the body of the message (and it's fine with me and my mail
client) but separate MIME parts allow clients to display and save
different parts correctly. Raw message data looks like this:

    From: [...]
    To: [...]
    Subject: [...]
    Date: [...]
    Mime-Version: 1.0
    Content-Type: multipart/signed; boundary="=-=-=";
        micalg=pgp-sha256; protocol="application/pgp-signature"

    --=-=-=
    Content-Type: text/plain; charset=iso-8859-1
    Content-Transfer-Encoding: quoted-printable

    Here's the message body.

    --=-=-=
    Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v2

    [...]
    -----END PGP SIGNATURE-----
    --=-=-=--

-- 
/// Teemu Likonen   - .-..   <https://github.com/tlikonen> //
// PGP: 4E10 55DC 84E9 DFF6 13D7 8557 719D 69D3 2453 9450 ///

Thread

removing TexLive Docs packages Sivaram Neelakantan <nsivaram.net@gmail.com> - 2015-12-23 07:50 +0100
  Re: removing TexLive Docs packages Udyant Wig <udyantw@gmail.com> - 2015-12-23 16:00 +0100
    Re: removing TexLive Docs packages The Wanderer <wanderer@fastmail.fm> - 2015-12-23 16:40 +0100
      Re: removing TexLive Docs packages Osamu Aoki <osamu@debian.org> - 2015-12-23 17:20 +0100
      Re: removing TexLive Docs packages Osamu Aoki <osamu@debian.org> - 2015-12-23 17:20 +0100
      Re: removing TexLive Docs packages Sivaram Neelakantan <nsivaram.net@gmail.com> - 2015-12-24 13:50 +0100
        OT: signatures (was Re: removing TexLive Docs packages) The Wanderer <wanderer@fastmail.fm> - 2015-12-24 16:00 +0100
          Re: OT: signatures (was Re: removing TexLive Docs packages) Anthony Mapes <anthonym7009@gmail.com> - 2015-12-24 16:40 +0100
            Re: OT: signatures (was Re: removing TexLive Docs packages) Adam Wilson <moxalt@riseup.net> - 2015-12-26 08:40 +0100
            Re: OT: signatures (was Re: removing TexLive Docs packages) Chris Bannister <cbannister@slingshot.co.nz> - 2015-12-27 01:00 +0100
            Digital signatures Teemu Likonen <tlikonen@iki.fi> - 2015-12-27 09:10 +0100
              Re: Digital signatures Anthony Mapes <anthonym7009@gmail.com> - 2015-12-27 15:10 +0100
                Re: Digital signatures Teemu Likonen <tlikonen@iki.fi> - 2015-12-27 16:10 +0100
          Re: OT: signatures (was Re: removing TexLive Docs packages) Sivaram Neelakantan <nsivaram.net@gmail.com> - 2015-12-25 07:40 +0100
    Re: removing TexLive Docs packages Sivaram Neelakantan <nsivaram.net@gmail.com> - 2015-12-24 13:40 +0100
  Re: removing TexLive Docs packages Doug <dmcgarrett@optonline.net> - 2015-12-23 22:50 +0100
    Re: removing TexLive Docs packages The Wanderer <wanderer@fastmail.fm> - 2015-12-24 03:20 +0100
      Re: removing TexLive Docs packages Udyant Wig <udyantw@gmail.com> - 2015-12-24 05:20 +0100

csiph-web