OT: Bad signatures (was: Re: kfilemetainfo.cpp)

[Ingo Klöcker]

On Sunday 23 March 2003 18:05, Ingo Klöcker wrote:
> Hi Marco!
>
> On Sunday 23 March 2003 10:55, Marco Wegner wrote:
> > Hi,
> >
> > found this little bug in kfilemetainfo.cpp
> >
> > Marco
>
> Your message has a bad signature for me. If the received message also
> has a bad signature for you while the message you sent (in your
> sent-mail folder) has a good signature then please make a diff of the
> sent and the received message and send it to me.

Marco sent my the diff. The bad signature is caused by a removed empty 
line before the first message part of the signed multipart/mixed 
message part (which holds the message text and the attachments). 
Apparently some mail server or mailing list program removed this empty 
line. Ironically I specifically made KMail add this empty line because 
some other mail servers added an empty line (cf. Bug 55629) if it 
wasn't present.

This means either way (To add or not to add an empty line. That's the 
question.) we will end up with broken signatures for some people 
because of broken mail server or mailing list software.

Unfortunately, there's more. Thiago (Thanks!) also sent me a diff 
between a sent and a received message where the received message had a 
bad signature. In his case some mail server or mailing list software 
(Yahoogroups) changed "=2D-=20" to "--=20". We escape leading dashes in 
order to prevent mime boundaries from appearing somewhere in the middle 
of a message part. IIRC the MIME specs recommend escaping leading 
dashes. So there's not much we can do about this.

Regards,
Ingo

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: signature
URL: <http://mail.kde.org/pipermail/kde-core-devel/attachments/20030323/f222de38/attachment.sig>