Discussion:
Check PGP sigs only when I need to
Ian Zimmerman
2018-09-26 17:14:59 UTC
Permalink
Hello mutt lovers,

I still have not found a good way to check PGP signatures. The root
problem is that many (probably more than half) signatures on mailing
list messages, including this one, are broken. I have given up on
addressing that root problem, but I would still like to check signatures
on private messages on occasion. I know about the variable
crypt_verify_sig, but it's not a real solution in itself (ie. when set
to ask-no) because I still waste time responding to the prompt. I could
set it in a folder hook to yes or no depending on the folder, but I am
also trying to avoid folder hooks as much as possible, with their
complexity and opacity [1].

The ideal solution I dream about is a specific command/keystroke to
check the signature of a message, when already viewing that message.
Strange as it is this natural command doesn't seem to exist - or am I
wrong about this? And if I'm right would it make sense to add such a
command?

[1]
How many people really know the exact rules by which the pattern in a
folder hook matches?
--
Please don't Cc: me privately on mailing lists and Usenet,
if you also post the followup to the list or newsgroup.
To reply privately _only_ on Usenet and on broken lists
which rewrite From, fetch the TXT record for no-use.mooo.com.
David Woodfall
2018-09-26 20:12:53 UTC
Permalink
On Wednesday 26 September 2018 10:14,
Post by Ian Zimmerman
Hello mutt lovers,
I still have not found a good way to check PGP signatures. The root
problem is that many (probably more than half) signatures on mailing
list messages, including this one, are broken. I have given up on
addressing that root problem, but I would still like to check signatures
on private messages on occasion. I know about the variable
crypt_verify_sig, but it's not a real solution in itself (ie. when set
to ask-no) because I still waste time responding to the prompt. I could
set it in a folder hook to yes or no depending on the folder, but I am
also trying to avoid folder hooks as much as possible, with their
complexity and opacity [1].
The ideal solution I dream about is a specific command/keystroke to
check the signature of a message, when already viewing that message.
Strange as it is this natural command doesn't seem to exist - or am I
wrong about this? And if I'm right would it make sense to add such a
command?
[1]
How many people really know the exact rules by which the pattern in a
folder hook matches?
--
Please don't Cc: me privately on mailing lists and Usenet,
if you also post the followup to the list or newsgroup.
To reply privately _only_ on Usenet and on broken lists
which rewrite From, fetch the TXT record for no-use.mooo.com.
You can make a key bind/macro to do pretty much everything, including
changing settings like that.

--
Dave

"... being a Linux user is sort of like living in a house inhabited
by a large family of carpenters and architects. Every morning when
you wake up, the house is a little different. Maybe there is a new
turret, or some walls have moved. Or perhaps someone has temporarily
removed the floor under your bed." - Unix for Dummies, 2nd Edition
-- found in the .sig of Rob Riggs, ***@tesser.com

.--. oo
(____)//
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~'
Ian Zimmerman
2018-09-26 22:51:45 UTC
Permalink
Post by David Woodfall
Post by Ian Zimmerman
The ideal solution I dream about is a specific command/keystroke to
check the signature of a message, when already viewing that message.
Strange as it is this natural command doesn't seem to exist - or am I
wrong about this? And if I'm right would it make sense to add such a
command?
You can make a key bind/macro to do pretty much everything, including
changing settings like that.
Well I thought about that. But I really want to check the sig _when I
am already on the message_. How do I make mutt re-read the message and
check the sig in my macro?
--
Please don't Cc: me privately on mailing lists and Usenet,
if you also post the followup to the list or newsgroup.
To reply privately _only_ on Usenet and on broken lists
which rewrite From, fetch the TXT record for no-use.mooo.com.
Kevin J. McCarthy
2018-09-26 23:23:07 UTC
Permalink
Post by Ian Zimmerman
Well I thought about that. But I really want to check the sig _when I
am already on the message_. How do I make mutt re-read the message and
check the sig in my macro?
set crypt_verify_sig=no
macro pager ,cs \
"<enter-command>set crypt_verify_sig=yes<enter><exit><display-message>\
<enter-command>set crypt_verify_sig=no<enter>" "manual-check-signature"
--
Kevin J. McCarthy
GPG Fingerprint: 8975 A9B3 3AA3 7910 385C 5308 ADEF 7684 8031 6BDA
Ian Zimmerman
2018-09-27 15:33:46 UTC
Permalink
Post by Kevin J. McCarthy
Post by Ian Zimmerman
Well I thought about that. But I really want to check the sig _when I
am already on the message_. How do I make mutt re-read the message and
check the sig in my macro?
set crypt_verify_sig=no
macro pager ,cs \
"<enter-command>set crypt_verify_sig=yes<enter><exit><display-message>\
<enter-command>set crypt_verify_sig=no<enter>" "manual-check-signature"
And this seems to work, thanks.
--
Please don't Cc: me privately on mailing lists and Usenet,
if you also post the followup to the list or newsgroup.
To reply privately _only_ on Usenet and on broken lists
which rewrite From, fetch the TXT record for no-use.mooo.com.
Continue reading on narkive:
Search results for 'Check PGP sigs only when I need to' (Questions and Answers)
28
replies
Did you know ,?
started 2006-08-14 05:52:36 UTC
law enforcement & police
Loading...