Re: Cone 0.58 released.

Sam Varshavchik writes:

> Sean Rima writes:
> 
>> Sam Varshavchik writes:
>> 
>>> I just successfully decrypted an encrypted message sent to myself.
>>> 
>> 
>> Strange it doesn't here.
>> 
>> Here is the top section:
>> X-UIDL: O>F!!@=j!!8PV!!km1!!
>> Content-Type: application/pgp; format=text; x-action=encrypt
>> Lines: 291
>> 
>> -----BEGIN PGP MESSAGE-----
>> Version: Encrypted with PGP Plugin for Calypso
> 
> This is the inline pgp format which cone never implemented.
> 
> Cone always uses the MIME PGP format, like this message.

True.
 
> 
>> Would this entry in my maildrop filter file cause any problems:
>> ########## Check for correct GPG/PGP headers
>> BPGPM="-----BEGIN PGP MESSAGE-----"
>> EPGPM="-----END PGP MESSAGE-----"
>> BPGPS="-----BEGIN PGP SIGNATURE-----"
>> EPGPS="-----END PGP SIGNATURE-----"
>> 
>> if (!/^Content-Type: message/ && !/^Content-Type: multipart/ \
>>         && !/^Content-Type: application\/pgp/)
>> {
>> if (/^$BPGPM/:b && /^$EPGPM/:b)
>>         xfilter "reformail -A 'Content-Type: application/pgp; format=text; \
>>                 x-action=encrypt'"
>> 
>> if (/^$BPGPS/:b && /^$EPGPS/:b)
>>         xfilter "reformail -A 'Content-Type: application/pgp; format=text; \
>>                 x-action=sign'"
>> }
> 
> I've seen these kinds of scripts floating around.  Although I haven't really 
> delved much into any of them, the above definitely looks wrong.
> 
> The MIME-PGP format for encrypted message is:
> 
> 1. A top-level MIME content type of "multipart/pgp-encrypted".
> 
> 2. The first MIME section carrying a content type of 
> "application/pgp-encrypted", with the content being a single plaintext 
> string: "Version: 1".
> 
> 3. The second MIME section carrying a content type of 
> "application/octet-stream", with the content being ASCII-armored encrypted 
> content.  The Eudora client also needs to see a "Mime-Version: 1.0" in the 
> headers of this MIME section, although this is not strictly necessary.
> 
> I don't see the script above doing any of this.
> 

No, it was a quick fix for Mutt that has hanged on since. I disbaled it 
anyway

Sean

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: This key has an expiry date

iD8DBQBAeueoXjH8pRIKAvsRAp7QAKC73wEZLkbQnJ4udEDX922X2IMX1ACgrBjU
zbYCor5biMbRevdEZ4uvlBU=
=HVyM
-----END PGP SIGNATURE-----