bug#63157: 29.0.60; mml-sec with EPA S/MIME signencrypt messgages are not parsed by other implementations

bug#63157: 29.0.60; mml-sec with EPA S/MIME signencrypt messgages are not parsed by other implementations

[Timothy J. Miller]

[-- Attachment #1: Type: text/plain, Size: 9252 bytes --]

S/MIME signencrypt messages created with epg enabled are readable by
gnus-article-mode and other emacs modes, but not anything else.

Signed messages are fine.  Encrypted-only (e.g., by setting "smime" to
combined in mml-signencrypt-sytle-alist, which is not supported) is also
fine.

For example, the p7m attachment from an EPA enabled signencrypt message
will decrypt, but resulting multipart won't verify with Outlook or
gpgsm, but will verify with OpenSSL:

```
~/Documents/projects/scratch/smime
> gpgsm -d emacs.p7m > emacs.mime
gpgsm: encrypted to rsa2048 key 28AB1F8A641EF8784309B496484C16A6C5F741A0

~/Documents/projects/scratch/smime
> gpgsm --debug 1 --verify emacs.mime
gpgsm: reading options from '/Users/tmiller/.gnupg/gpgsm.conf'
gpgsm: reading options from '[cmdline]'
gpgsm: enabled debug flags: x509
gpgsm: enabled compatibility flags:
gpgsm: ksba_cms_parse failed: End of file
secmem usage: 0/16384 bytes in 0 blocks

~/Documents/projects/scratch/smime
> openssl smime -verify < emacs.mime
Content-Type: text/plain

lsakdjfhlaskjdhflaksdjhflkasdjhflkajsdhflkajshdflkjashd
alksdjuhflkasjdhflkasjdhflkasdjhflkasjdhflkasjdhflkasjdhf

--
-- T
Verification successful
```

If I configure S/MIME to use OpenSSL, signencrypt messages work just fine.

A sample decrypted MIME parts attached with the signing cert if you need
it. 

-- T


In GNU Emacs 29.0.60 (build 1, x86_64-apple-darwin20.6.0, NS
 appkit-2202.70 Version 11.7.2 (Build 20G1020)) of 2023-03-10 built on
 MM273467-PC
Windowing system distributor 'Apple', version 10.3.2022
System Description:  macOS 11.7.6

Configured using:
 'configure --disable-dependency-tracking --disable-silent-rules
 --enable-locallisppath=/usr/local/share/emacs/site-lisp
 --infodir=/usr/local/Cellar/emacs-plus@29/29.0.60/share/info/emacs
 --prefix=/usr/local/Cellar/emacs-plus@29/29.0.60 --with-xml2
 --with-gnutls --with-native-compilation --without-compress-install
 --without-dbus --without-imagemagick --with-modules --with-rsvg
 --with-ns --disable-ns-self-contained 'CFLAGS=-Os -w -pipe
 -march=nehalem -mmacosx-version-min=11
 -isysroot/Library/Developer/CommandLineTools/SDKs/MacOSX11.sdk
 -DFD_SETSIZE=10000 -DDARWIN_UNLIMITED_SELECT'
 'CPPFLAGS=-I/usr/local/opt/zlib/include -I/usr/local/opt/jpeg/include
 -I/usr/local/opt/icu4c/include -I/usr/local/opt/openssl@1.1/include
 -F/usr/local/Frameworks
 -isysroot/Library/Developer/CommandLineTools/SDKs/MacOSX11.sdk'
 'LDFLAGS=-L/usr/local/opt/zlib/lib -L/usr/local/opt/jpeg/lib
 -L/usr/local/opt/icu4c/lib -L/usr/local/opt/openssl@1.1/lib
 -L/usr/local/lib -F/usr/local/Frameworks
 -Wl,-headerpad_max_install_names
 -isysroot/Library/Developer/CommandLineTools/SDKs/MacOSX11.sdk''

Configured features:
ACL GIF GLIB GMP GNUTLS JPEG JSON LCMS2 LIBXML2 MODULES NATIVE_COMP
NOTIFY KQUEUE NS PDUMPER PNG RSVG SQLITE3 THREADS TIFF
TOOLKIT_SCROLL_BARS TREE_SITTER WEBP XIM ZLIB

Important settings:
  value of $LANG: en_US.UTF-8
  locale-coding-system: utf-8-unix

Major mode: ELisp/l

Minor modes in effect:
  shell-dirtrack-mode: t
  mu4e-modeline-mode: t
  format-all-mode: t
  global-hl-todo-mode: t
  hl-todo-mode: t
  corfu-popupinfo-mode: t
  global-corfu-mode: t
  corfu-mode: t
  marginalia-mode: t
  vertico-mouse-mode: t
  vertico-mode: t
  override-global-mode: t
  global-display-line-numbers-mode: t
  display-line-numbers-mode: t
  electric-pair-mode: t
  tooltip-mode: t
  global-eldoc-mode: t
  eldoc-mode: t
  show-paren-mode: t
  electric-layout-mode: t
  electric-indent-mode: t
  mouse-wheel-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  blink-cursor-mode: t
  line-number-mode: t
  global-visual-line-mode: t
  visual-line-mode: t
  indent-tabs-mode: t
  transient-mark-mode: t
  auto-composition-mode: t
  auto-encryption-mode: t
  auto-compression-mode: t

Load-path shadows:
None found.

Features:
(shadow emacsbug cl-print ielm em-unix em-term term disp-table ehelp
em-script em-prompt em-ls em-hist em-pred em-glob em-extpipe em-cmpl
em-dirs esh-var em-basic em-banner em-alias em-tramp tramp
tramp-loaddefs trampver tramp-integration tramp-compat shell ls-lisp
em-rebind esh-mode eshell esh-cmd esh-ext esh-opt esh-proc esh-io
esh-arg esh-module esh-groups esh-util cus-start files-x view ace-window
avy network-stream nsm mailalias py-isort dabbrev calc calc-loaddefs
rect calc-macs mm-archive sort smiley gnus-cite mail-extr textsec
uni-scripts idna-mapping uni-confusable textsec-check qp face-remap
mu4e-icalendar gnus-icalendar org-capture icalendar diary-lib
diary-loaddefs epa-file mu4e mu4e-org ob-plantuml embark-org org-element
org-persist xdg org-id org-refile avl-tree generator org ob ob-tangle
ob-ref ob-lob ob-table ob-exp org-macro org-src ob-comint org-pcomplete
pcomplete org-list org-footnote org-faces org-entities noutline outline
ob-emacs-lisp ob-core ob-eval org-cycle org-table ol org-fold
org-fold-core org-keys oc org-loaddefs org-version org-compat org-macs
format-spec mu4e-notification notifications mu4e-main mu4e-view comint
ansi-osc ansi-color ring gnus-art mm-uu mml2015 mm-view mml-smime smime
gnutls dig gnus-sum gnus-group gnus-undo gnus-start gnus-dbus dbus
gnus-cloud nnimap nnmail mail-source utf7 nnoo parse-time iso8601
gnus-spec gnus-int gnus-range gnus-win gnus nnheader range cal-menu
calendar cal-loaddefs mu4e-headers mu4e-compose mu4e-draft mu4e-actions
smtpmail mu4e-search mu4e-lists mu4e-bookmarks mu4e-mark mu4e-message
shr pixel-fill kinsoku url-file svg xml dom flow-fill hl-line
mu4e-contacts mu4e-update mu4e-folders mu4e-context mu4e-query-items
mu4e-server mu4e-modeline mu4e-vars mu4e-helpers mu4e-config mu4e-window
ido message sendmail yank-media puny dired dired-loaddefs rfc822 mml
mml-sec epa derived epg rfc6068 epg-config gnus-util mm-decode mm-bodies
mm-encode mail-parse rfc2231 rfc2047 rfc2045 mm-util ietf-drums
mail-prsvr mailabbrev mail-utils gmm-utils mailheader mu4e-obsolete
cursor-sensor time-date tutorial comp comp-cstr warnings rx format-all
language-id inheritenv my-org my-email my-plantuml my-golang project
my-jinja-yaml my-jinja2 my-yaml my-csv my-python my-hl-todo hl-todo
my-ide my-tree-sitter treesit my-eshell my-ace-window my-helpful helpful
cc-langs cc-vars cc-defs imenu trace edebug debug backtrace info-look
find-func f f-shortdoc help-fns radix-tree elisp-refs s dash
my-combobulate my-cape cape my-corfu corfu-popupinfo corfu my-embark
embark-consult consult bookmark text-property-search embark ffap
thingatpt my-orderless orderless my-marginalia marginalia my-vertico
cus-edit pp cus-load icons wid-edit vertico-mouse vertico-directory
vertico compat my-consult edmacro kmacro cl-extra help-mode
use-package-bind-key bind-key easy-mmode use-package-ensure
use-package-core modus-operandi-theme modus-themes pcase
display-line-numbers elec-pair exec-path-from-shell finder-inf my-auth
auth-source-pass py-isort-autoloads gotest-autoloads
marginalia-autoloads pyvenv-autoloads cape-autoloads go-mode-autoloads
orderless-autoloads csv-mode-autoloads go-gen-test-autoloads
consult-eglot-autoloads embark-consult-autoloads embark-autoloads
vertico-autoloads ace-window-autoloads avy-autoloads
format-all-autoloads language-id-autoloads combobulate-autoloads
inheritenv-autoloads hl-todo-autoloads consult-autoloads
corfu-terminal-autoloads popon-autoloads corfu-autoloads
compat-autoloads vc-use-package-autoloads poly-ansible-autoloads
yaml-mode-autoloads jinja2-mode-autoloads ansible-autoloads
helpful-autoloads elisp-refs-autoloads f-autoloads s-autoloads
polymode-autoloads ansible-doc-autoloads exec-path-from-shell-autoloads
plantuml-mode-autoloads info dash-autoloads package browse-url url
url-proxy url-privacy url-expand url-methods url-history url-cookie
generate-lisp-file url-domsuf url-util mailcap url-handlers url-parse
auth-source cl-seq eieio eieio-core cl-macs password-cache json subr-x
map byte-opt bytecomp byte-compile url-vars cl-loaddefs cl-lib chemacs
gv rmc iso-transl tooltip cconv eldoc paren electric uniquify ediff-hook
vc-hooks lisp-float-type elisp-mode mwheel term/ns-win ns-win
ucs-normalize mule-util term/common-win tool-bar dnd fontset image
regexp-opt fringe tabulated-list replace newcomment text-mode lisp-mode
prog-mode register page tab-bar menu-bar rfn-eshadow isearch easymenu
timer select scroll-bar mouse jit-lock font-lock syntax font-core
term/tty-colors frame minibuffer nadvice seq simple cl-generic
indonesian philippine cham georgian utf-8-lang misc-lang vietnamese
tibetan thai tai-viet lao korean japanese eucjp-ms cp51932 hebrew greek
romanian slovak czech european ethiopic indian cyrillic chinese
composite emoji-zwj charscript charprop case-table epa-hook
jka-cmpr-hook help abbrev obarray oclosure cl-preloaded button loaddefs
theme-loaddefs faces cus-face macroexp files window text-properties
overlay sha1 md5 base64 format env code-pages mule custom widget keymap
hashtable-print-readable backquote threads kqueue cocoa ns lcms2
multi-tty make-network-process native-compile emacs)

Memory information:
((conses 16 712600 56314)
 (symbols 48 63261 3)
 (strings 32 262495 34299)
 (string-bytes 1 7453545)
 (vectors 16 72471)
 (vector-slots 8 1796940 116594)
 (floats 8 566 287)
 (intervals 56 16609 656)
 (buffers 984 33))
 

[-- Attachment #2: emacs.mime --]
[-- Type: application/octet-stream, Size: 5033 bytes --]

Content-Type: multipart/signed; boundary="=-=-=";
	micalg=sha256;   protocol="application/pkcs7-signature"

--=-=-=
Content-Type: text/plain

lsakdjfhlaskjdhflaksdjhflkasdjhflkajsdhflkajshdflkjashd
alksdjuhflkasjdhflkasjdhflkasdjhflkasjdhflkasjdhflkasjdhf

--
-- T

--=-=-=
Content-Type: application/pkcs7-signature; name=smime.p7s
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename=smime.p7s

MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCCuEw
ggVnMIIDT6ADAgECAgp1JV4nAAEAAAALMA0GCSqGSIb3DQEBCwUAMCkxJzAlBgNVBAMTHk1JVFJF
IENvcnBvcmF0aW9uIFBFIFJvb3QgQ0EtMTAeFw0xOTExMDYxNTU5MTdaFw0yODExMDExNDQ5NDda
MFAxEzARBgoJkiaJk/IsZAEZFgNPUkcxFTATBgoJkiaJk/IsZAEZFgVNSVRSRTEiMCAGA1UEAxMZ
TUlUUkUgQ29ycG9yYXRpb24gUEUgQ0EtMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AJCwfdfNxVXZ6/JpLeCsWV8VvVPRAiI4uemN3Cyn81gK/0uC0KJRX/WJ1XHmfzeLesyF46yxCgd0
fe6mtaDfFQNWfngzMVaiHHT7nNyRcOo5TE+ZmzDe7i4Cp+Sd7ySSyaj5WTLVylv6PmFxtKYm/2tI
44tELhGRDsw/J7rhwi0/9jEujxjXpL64l72bcrEaDj8pSFg1LNPLFEe4S2jI9yxc5k0ZKQJtqGhB
VPtOGSiZgI8axrVkdnjr1Dwr0M1UT7Qmexp+r0WvMK16877VaApOGn0560eKtLgBYb8j72B7KUwF
GFMtuM7ZdCCHYbiwLVnauOFbPK6qxhK/1fQBhZ0CAwEAAaOCAWgwggFkMBIGCSsGAQQBgjcVAQQF
AgMBAAIwIwYJKwYBBAGCNxUCBBYEFEvlj+3gO4BF4epjx0SiFptBvg3BMB0GA1UdDgQWBBQMxmvu
Aka12Y/bo8zsvD7hBb2lJzAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYw
DwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRbh32f/my+Aunz4Ck6ilQlLJ84LzBQBgNVHR8E
STBHMEWgQ6BBhj9odHRwOi8vcGtpLm1pdHJlLm9yZy9NSVRSRSUyMENvcnBvcmF0aW9uJTIwUEUl
MjBSb290JTIwQ0EtMS5jcmwwXgYIKwYBBQUHAQEEUjBQME4GCCsGAQUFBzAChkJodHRwOi8vcGtp
Lm1pdHJlLm9yZy9NSVRSRSUyMENvcnBvcmF0aW9uJTIwUEUlMjBSb290JTIwQ0EtMSgxKS5jcnQw
DQYJKoZIhvcNAQELBQADggIBAAYFRpWzceaMTKLw/+/1UTLfSCFSKyAOr3kB9GKTUpfpYv9XogBs
HfWBEPaBVcqVSdEV8nDLxnyWK0rNNn5Wokgxu1JZMDHuswEN57QlBKtgyvxCKtfjS4i3tRl1W9au
11a6r5Y8Gyt5QKvdDs5aPHGNep7pv47/rUPxSaRtpjwUSdZhYCs7WPTtBpKrGpzkxTnCHeWuuOJl
sLi1OfmSTcuCIpkxH4SlE7ILbdfg1P5AyY0vkLpMH7sXU7RCTxe9unl7n1drxU/hd673iFfaf/sI
Vs5U2guEAvLrRFnuqU/blpGlGZJ6sxrXq2etIGnmVzKz2VqXI+6IZsqPGrgZyf/TKMMS8kpwzRkF
1WSm/OH2JJFolriA2al9lNKZ5m61dnPeYyF2CX45k93/WMXC3paMWv7p9PGGHo3gDkFXbeDICyOE
MbGUXUte4dKl/LJVj/sE1B+c+hPFIRrh64eEd3iZJFmpUkY1EcWmYG7hC0F/Fu9G+RT1wpCsQgqQ
XF5k0Vhgh2duWd2BSIWaOmHExUFXGy21l3x0IjF1mekN+NscEFGTLbvrB3EVYGpUVa4kq/mDrWAZ
DP0GH2hmkZIKYSl2yIGyZvGK79PwTm3s+ZhdC8Vn42Ch1o9E4hlTxYroNSNBgazJy++2bMYfT6Wy
IO4oPBjfGbEfq9IMTcQqP9QxMIIFcjCCBFqgAwIBAgIKFDmh4AACAADdGjANBgkqhkiG9w0BAQsF
ADBQMRMwEQYKCZImiZPyLGQBGRYDT1JHMRUwEwYKCZImiZPyLGQBGRYFTUlUUkUxIjAgBgNVBAMT
GU1JVFJFIENvcnBvcmF0aW9uIFBFIENBLTIwHhcNMjAwODI0MTcyMjAxWhcNMjMwODI0MTcyMjAx
WjCBgjETMBEGCgmSJomT8ixkARkWA09SRzEVMBMGCgmSJomT8ixkARkWBU1JVFJFMRIwEAYDVQQL
EwlMb2NhdGlvbnMxCzAJBgNVBAsTAlNOMQ4wDAYDVQQLEwVVU0VSUzEjMCEGA1UEAxMaVGltb3Ro
eSBKIE1pbGxlciAoVE1JTExFUikwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZSGs+
FALviN7RdZeFcNIN8uQArc9T0qfOCsZyBUQMRaF69oKJwW+vmH5fGItDGGi3HmGQK2ZCZ92kCVF7
pKW+lLNcqgTm+/PBUrVozo6NAWeudsraNJ98pAVLmZHTuuGzUmi8GLF+XMe7V6ZnE8StuDXlbcIu
Dmb+Wiuq8MVUIKgVCe2c0az7wu47R9NYoFygHB87TflPdCYWZ1yBdFdJ8YMY+kpqAxdhUy6JnHg2
oqAs0vS1bDsok+unUyycAj3HnfuEnKEBCAoEgxBYCgRZC7Jxt3DwY52Dl1aFIJIbW/UFMcPfb0tc
PRZGiYUdYFVjsWcsiCajVTjVsuETsOBVAgMBAAGjggIZMIICFTA+BgkrBgEEAYI3FQcEMTAvBicr
BgEEAYI3FQiDrqwjho6WV4GNiT2CpKsShb6uAYE2hozHCIXgwAkCAWQCAQowEwYDVR0lBAwwCgYI
KwYBBQUHAwQwCwYDVR0PBAQDAgXgMBsGCSsGAQQBgjcVCgQOMAwwCgYIKwYBBQUHAwQwRAYJKoZI
hvcNAQkPBDcwNTAOBggqhkiG9w0DAgICAIAwDgYIKoZIhvcNAwQCAgCAMAcGBSsOAwIHMAoGCCqG
SIb3DQMHMB0GA1UdDgQWBBTrz9U4np+l8F2T2Lq26Agjipou2zAfBgNVHSMEGDAWgBQMxmvuAka1
2Y/bo8zsvD7hBb2lJzBMBgNVHR8ERTBDMEGgP6A9hjtodHRwOi8vcGtpLm1pdHJlLm9yZy9NSVRS
RSUyMENvcnBvcmF0aW9uJTIwUEUlMjBDQS0yKDEpLmNybDB/BggrBgEFBQcBAQRzMHEwRwYIKwYB
BQUHMAKGO2h0dHA6Ly9wa2kubWl0cmUub3JnL01JVFJFJTIwQ29ycG9yYXRpb24lMjBQRSUyMENB
LTIoMikuY3J0MCYGCCsGAQUFBzABhhpodHRwOi8vb2NzcC5taXRyZS5vcmcvb2NzcDA/BgNVHREE
ODA2oCEGCisGAQQBgjcUAgOgEwwRVE1JTExFUkBNSVRSRS5PUkeBEXRtaWxsZXJAbWl0cmUub3Jn
MA0GCSqGSIb3DQEBCwUAA4IBAQCIBn+ZPiWc+qqSIZfid0C87DQPIm7zmWXm0xRbEeUheDNcSV5+
2/iDgHD6YUKk++bCenRQRD/l+C5KZBsn5Fk9kGNhevMtY3On9RhYooNBnxL6HdwHum98MI16p9AL
steDmkOofpFpmWq10VDqWn7dTkrOZ3vJiNB1A2onTzGhHxb5eedNgGuqvZUywCMne9JdBmm3oPfK
kk7n9474ul3RXRd8WO/L6MPnBqTv0g2LtO3WzYSWaVr0OsQ9hpUUH3o98SmaLCfl+Sb9+7vEXSpd
FbBeKTuyxs2TCOtDNIqgS8vPc7LJEwRF/zzpop/WdvNyEnIXAWFyJHNtLa3w4wdhMYICLDCCAigC
AQEwXjBQMRMwEQYKCZImiZPyLGQBGRYDT1JHMRUwEwYKCZImiZPyLGQBGRYFTUlUUkUxIjAgBgNV
BAMTGU1JVFJFIENvcnBvcmF0aW9uIFBFIENBLTICChQ5oeAAAgAA3RowDQYJYIZIAWUDBAIBBQCg
gaAwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjMwNDI4MTcxMzQ1
WjAvBgkqhkiG9w0BCQQxIgQgIjomxasO6F2rEmZ9Otbk59M+46AG6LWI9sBK1JZWOPAwNQYJKoZI
hvcNAQkPMSgwJjALBglghkgBZQMEASowCwYJYIZIAWUDBAECMAoGCCqGSIb3DQMHMA0GCSqGSIb3
DQEBAQUABIIBAG6jZ0GEURWxrF3Vq+/1ZWCn21wQNBN4JvOvMGVQQgpE4dOAvxJXawtkgs9PnOcq
lX6ymmgXNA4+/kzKQNaDtpz9K7FVaLDqBFLdMNy3Ch1mI9WZcUAuP9+VELqWZiHc7ZSGIc+ASGO7
rBIUH5c47AuuHpd4AjzAbtvYBjis8sHYjGqty6L2C0hLnATcVx/SCtu27sFDvBUrgnoh5/bgjpbn
Vfuim0b2nXZ256utQ4tkm4ojFpkj8HADrJhXer5b6DoReofIL9XcrJiqhEgCq3WlFjW5kv+H1l4y
L/kAz/LrGiRkbzv7jDFEokRTFrWcj/Y76REQj5tK+rsQ3uX0fWgAAAAAAAA=
--=-=-=--

[-- Attachment #3: cert.pem --]
[-- Type: application/octet-stream, Size: 2128 bytes --]

Bag Attributes
    localKeyID: 01 00 00 00 
subject=/DC=ORG/DC=MITRE/OU=Locations/OU=SN/OU=USERS/CN=Timothy J Miller (TMILLER)
issuer=/DC=ORG/DC=MITRE/CN=MITRE Corporation PE CA-2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

bug#63157: [EXT] bug#63157: Acknowledgement (29.0.60; mml-sec with EPA S/MIME signencrypt messgages are not parsed by other implementations)

[Timothy J. Miller]

OK, my bad re: gpgsm; I didn't grok the limits of that tool.  So strike
the "anything else" and replace it with "Outlook".  From my mucking
about:

- Clients:
  - gnus-article-mode and descendents
  - TBird
  - Outlook
  - OpenSSL smime
  - gpgsm [with p7s/p7m mime-part properly extracted]

- Signed only messages validate with all clients

- Encrypted only messages decrypt with all clients

- Sign+encrypt messages fail with Outlook.


Outlook is completely unhelpful here; with debug enabled via `defaults
write com.microsoft.Outlook LogForTroubleshooting -bool TRUE` on macOS,
this is about all I can find that's relevant:

```
05/01/2023 07:52:14.812 OUTLOOK (0x118c) 0xc6a8000 Microsoft Outlook outlook.olxhx 9tals Unexpected Actor API loadSMIMEContent succeeded but failed to unpack message
05/01/2023 07:52:14.812 OUTLOOK (0x118c) 0xc6a8000 Microsoft Outlook outlook.mail 4y8j3 Medium PreviewPane loadSMIMEContent - STOP {"DecodingIsSuccessful": false}
```

Outlookin
--
-- T