Re: Cone 0.58 released.

Sean Rima writes:

> Sam Varshavchik writes:
> 
>> I just successfully decrypted an encrypted message sent to myself.
>> 
> 
> Strange it doesn't here.
> 
> Here is the top section:
> X-UIDL: O>F!!@=j!!8PV!!km1!!
> Content-Type: application/pgp; format=text; x-action=encrypt
> Lines: 291
> 
> -----BEGIN PGP MESSAGE-----
> Version: Encrypted with PGP Plugin for Calypso

This is the inline pgp format which cone never implemented.

Cone always uses the MIME PGP format, like this message.


> Would this entry in my maildrop filter file cause any problems:
> ########## Check for correct GPG/PGP headers
> BPGPM="-----BEGIN PGP MESSAGE-----"
> EPGPM="-----END PGP MESSAGE-----"
> BPGPS="-----BEGIN PGP SIGNATURE-----"
> EPGPS="-----END PGP SIGNATURE-----"
> 
> if (!/^Content-Type: message/ && !/^Content-Type: multipart/ \
>         && !/^Content-Type: application\/pgp/)
> {
> if (/^$BPGPM/:b && /^$EPGPM/:b)
>         xfilter "reformail -A 'Content-Type: application/pgp; format=text; \
>                 x-action=encrypt'"
> 
> if (/^$BPGPS/:b && /^$EPGPS/:b)
>         xfilter "reformail -A 'Content-Type: application/pgp; format=text; \
>                 x-action=sign'"
> }

I've seen these kinds of scripts floating around.  Although I haven't really 
delved much into any of them, the above definitely looks wrong.

The MIME-PGP format for encrypted message is:

1. A top-level MIME content type of "multipart/pgp-encrypted".

2. The first MIME section carrying a content type of 
"application/pgp-encrypted", with the content being a single plaintext 
string: "Version: 1".

3. The second MIME section carrying a content type of 
"application/octet-stream", with the content being ASCII-armored encrypted 
content.  The Eudora client also needs to see a "Mime-Version: 1.0" in the 
headers of this MIME section, although this is not strictly necessary.

I don't see the script above doing any of this.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQBAeWztx9p3GYHlUOIRAvQcAJ0aFBKoKQBG+saOlc14IKpT989ntACfWzHb
fADTk/+LkhlV9xM4WY4oNqo=
=yZpt
-----END PGP SIGNATURE-----