[kmail2] [Bug 323168] GPG signature validation fails due to KMail modifying headers within received mails

Sandro Knauß mail at sandroknauss.de
Sun Oct 6 22:24:07 BST 2013


https://bugs.kde.org/show_bug.cgi?id=323168

Sandro Knauß <mail at sandroknauss.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|CONFIRMED                   |NEEDSINFO
         Resolution|---                         |WAITINGFORINFO

--- Comment #7 from Sandro Knauß <mail at sandroknauss.de> ---
First we have to make sure that we are talking about the same signing protocol
:)

I only tested now OpenPGP Mime:
I read the RFC 3156 "5. OpenPGP signed data" and it is totaly ok, that the
signature get broken, if the header get changed, 'cause the header is part of
the signed content. I can't generate any mail, that is shown broken, when i
generate it with mutt (without manually modifing the header). 

Please test the attached mail generated by mutt. Can you please generate&upload
an mail with broken signature ( use save from kmail)  and the original mail?

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the Kdepim-bugs mailing list