Re: PGP/MIME integration

On Fri, Nov 21, 2003 at 11:27:28PM -0500, Derrick 'dman' Hudson wrote:
> I also tried posting via NNTP, but I don't think the newsgroup accepts
> posts.  (seems kinda odd that I can't get newreader help via news)

if you are reffering to the tin.* hierarhcie on news.tin.org, this
are the gated mailinglists. of course read only as the groups are
closed it wouldn't make any sense to allow every one to use the group
and thus pollute the mailingliste (with spam) that way round...

> BTW, the "subscribe" link on the web site points to the wrong address.

# exim -bt [email protected]
[email protected]
  deliver to tin-users-request in domain tin.org
  director = spamcheck_director, transport = spamcheck

[email protected] is valid and working

> It looks like an older mailman address, but that only invokes a bot
> telling me to email majordomo instead.  (not the end of the world, but
> would probably be an improvement)

that is exactly what it should do: tell you how to join the
mailinglist.

> | sort of: via header signing by using tinews.pl (included in the
> | source-tarball in the tools-dir) as (built-in) inews replacement.
> 
> Ooh, I wasn't thinking of that.  If I get a properly set up inews
> program, and then front-end that with a script, then that could work.

tinews.pl is a inews replacement which also does header signing, no need to
front-end that again with a script (but if you like MIME-signing
instead, yes, you could use a script whcih does the signing and
mime-work and than invoke inews to post the article from that script).

> The "inews" program can't get input from the terminal, though, can it?

it can

> I think that would be necessary for gpg to unlock the private key ...

it's not. tinews.pl has serveral vars at the beginning which can be
set to your needs (i.e. hold the password in cleartext; of course you
should use your very own copy of tinews.pl than and make it not
readable to anyone else than you), if you don't like that if can read
the cleartext password from a file (specified in $PGPPASSFILE).
depending on the pgp version you use (pgp-2 only) it can also take
the password from the environment variable $PGPPASS. if all that is
unset you will be prompted for the password.

> (it doesn't sound like tinews.pl does what I want, but the
> architecture looks like a possible fit)

it does what you want, it automatically signs every outgoing article
using the format prefred on usenet (header signing).

urs
-- 
"Only whimps use tape backup: _real_ men just upload their important stuff
 on ftp, and let the rest of the world mirror it ;)" - Linus