From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:8:6d80::]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id 8MekIELWcWB20gAAgWs5BA (envelope-from ) for ; Sat, 10 Apr 2021 18:45:54 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id SDmRGkLWcWDDCQAA1q6Kng (envelope-from ) for ; Sat, 10 Apr 2021 16:45:54 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id E7C3D2747E for ; Sat, 10 Apr 2021 18:45:53 +0200 (CEST) Received: from localhost ([::1]:44126 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lVGk3-0005lp-44 for larch@yhetil.org; Sat, 10 Apr 2021 12:45:51 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:33436) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lVGjH-0005hP-3s for bug-guix@gnu.org; Sat, 10 Apr 2021 12:45:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:41600) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lVGjG-0000o4-S4 for bug-guix@gnu.org; Sat, 10 Apr 2021 12:45:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1lVGjG-00056Q-QR for bug-guix@gnu.org; Sat, 10 Apr 2021 12:45:02 -0400 X-Loop: help-debbugs@gnu.org Subject: bug#47660: Add link to the ticket when someone reply Resent-From: Maxime Devos Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sat, 10 Apr 2021 16:45:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 47660 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: bo0od , Leo Famulari Received: via spool by 47660-submit@debbugs.gnu.org id=B47660.161807307619544 (code B ref 47660); Sat, 10 Apr 2021 16:45:02 +0000 Received: (at 47660) by debbugs.gnu.org; 10 Apr 2021 16:44:36 +0000 Received: from localhost ([127.0.0.1]:53141 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lVGip-000559-O7 for submit@debbugs.gnu.org; Sat, 10 Apr 2021 12:44:36 -0400 Received: from andre.telenet-ops.be ([195.130.132.53]:54454) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lVGin-00054y-An for 47660@debbugs.gnu.org; Sat, 10 Apr 2021 12:44:34 -0400 Received: from ptr-bvsjgyjmffd7q9timvx.18120a2.ip6.access.telenet.be ([IPv6:2a02:1811:8c09:9d00:aaf1:9810:a0b8:a55d]) by andre.telenet-ops.be with bizsmtp id r4kW2400N0mfAB4014kXuQ; Sat, 10 Apr 2021 18:44:31 +0200 Message-ID: From: Maxime Devos Date: Sat, 10 Apr 2021 18:44:19 +0200 In-Reply-To: <3fb53146-829a-3829-a1b3-2828f6d03e9a@riseup.net> References: <149fbff7-889c-acc2-09d1-e79edfd29ec0@riseup.net> <3fc025b1-aa56-aec6-5c0a-80f8562f0e8e@riseup.net> <3fb53146-829a-3829-a1b3-2828f6d03e9a@riseup.net> Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-Tx8I0Vl5x4I3nK2rurGY" User-Agent: Evolution 3.34.2 MIME-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telenet.be; s=r21; t=1618073071; bh=d014agkD0rg7ZxXauxqbW+Y+va0760HUcxLnkIlwlKI=; h=Subject:From:To:Cc:Date:In-Reply-To:References; b=C+YQVL9FBnaL5GB/ABOW8o/BO3O5VOLASfFb9ynM2rJpGrKiG5opZDzjROTXlYlLN a4B97SejLd8g6UEcInT5b4U9VfIocC8BCzFgS5BPZbO72qI1Y89hPLNbzhX6kXOVMG rlu0vp5Gw19sed8J+0FSQVSGo89Jz/jmu4DXsh+VI45Kmo/bKmFOuCHX1/q5FnIn4Z bJpxXwmbBTURPvvZn6nb0W2CWNDE7pDTlD6EhbaSb0U8Kn7D2t6NjbFjMlHRbQ0EFE wal/8Ir03ixlc03ReBKeQh7opYbR+l8F8QpxmYGls0ZopjQAQhu9mRhT4OJpdYF1xO s8rFtBFto9q/g== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: 47660@debbugs.gnu.org Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1618073154; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=d014agkD0rg7ZxXauxqbW+Y+va0760HUcxLnkIlwlKI=; b=Mz7rLs5aMjnm2gBe3LgNjTDwXUJPieTRVfBsPhsWVerDDc2YTR0ecovED2mTDOmSSeDaPz dQjJBLzhykAa7V1WbjqGIDrC8yE3jFdg1meNwdesHNGF2SLAVR0HuWkBAjuNiQzRSk89qN FZ1dPhN3ZjfEsJSYzBDbwuHd3oynL2JH/OTyb+MeCicQDTPUmCr2wCFjCzVYlE4btI4o7q m3QKLDvH6F7TcaWmjYKjqQuvtoVGyohNWXUOeaENmh0sVnQj4JKnmtA1nfaQGnqs+0duYB BdvQ7WF8FLe73v8R4J91G7F5ceEdVB5gARSSsId8aUtRmoctHFqc5WzcX7O6Hg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1618073154; a=rsa-sha256; cv=none; b=P4fCj7zSEjZmCp3pOghDjxqyow1b5DfL/4a9QSJCI6Xy+BkNzv8GCr37ybYHx+NNTQsMHW nRH27jS/mvhnImcCjLtl6CldTcu4i4Mhnhij67scVtT3t2+Z6kEnhUyYyjATxIxncpkWK9 OoV97ZV5CRiHtiqr406g3JO66OAJ5DKY7dBp8l9mxFwtG6hDrhIoiv4MCajlftRQtwXgVj /QLwGypNREvsEb9fPMGjt1VIsmchDsZeAa5YTE43s9gJitz6HxXczJtVy6xAzi/Ee5GKBE a9nADfDJs1L7OsmXR5C7sRVuUsI9LNwbqgf3dcnqMIfNPFuJmlUqZkGOnkQirQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=telenet.be header.s=r21 header.b=C+YQVL9F; dmarc=fail reason="SPF not aligned (relaxed)" header.from=telenet.be (policy=none); spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Spam-Score: -3.44 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=telenet.be header.s=r21 header.b=C+YQVL9F; dmarc=fail reason="SPF not aligned (relaxed)" header.from=telenet.be (policy=none); spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Queue-Id: E7C3D2747E X-Spam-Score: -3.44 X-Migadu-Scanner: scn0.migadu.com X-TUID: S8u4ppRspo7r --=-Tx8I0Vl5x4I3nK2rurGY Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Sat, 2021-04-10 at 14:20 +0000, bo0od wrote: > what are you talking about? who uses PGP/GPG for a public ticket=20 > tracking system?... I do, Chris Marusich does, L=C3=A9o Le Bouter does, Efraim Flashner does. I probably could find some more examples in my mail archive somewhere. Why shouldn't they use PGP? Signing e-mails with PGP allows the recipient to verify the e-mails actually came from the supposed sender. Remember, general discussion is done via e-mails on guix-devel@gnu.org, bug reports are done via e-mails on bug-guix@gnu.org and NNN@debbugs.gnu.or= g and patches are done via e-mails on guix-patches@gnu.org and NNN@debbugs.gn= u.org. Practical use case: * I want to test (and, if I were a committer, perhaps merge) one of the gno= me patch series (bug#47643, by Raghav Gururajan and revised by Leo Prikler). * I look over the source code changes, and don't see any obvious nefariousi= ty, but perhaps I missed something ... * I trust Leo Prikler not to introduce non-obvious nefariousity. However, e-mail is an unreliable medium, so this patch series might be mo= dified by an attacker on-route to my system (and the systems of other people) an= d the attacker might have introduced non-obious nefariousity. * I know Leo Prikler signs patch series. The attacker cannot, however, so = the attacker sends the (forged) patch series unsigned. * /me asks Leo Prikler why the patch series is unsigned. * The attacker's evil plan is foiled! Actually, IIRC, Leo Prikler does not sign patch series. It's just an examp= le! Also, regardless of whether PGP is used, the mangling messes up some header= s (DKIM, IIRC), leading to e-mails being marked as spam. IIUC, debbugs or th= e mailing list software used to mangle messages, but that is now disabled for (at least) that reason. Greetings, Maxime. --=-Tx8I0Vl5x4I3nK2rurGY Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iI0EABYKADUWIQTB8z7iDFKP233XAR9J4+4iGRcl7gUCYHHV5BccbWF4aW1lZGV2 b3NAdGVsZW5ldC5iZQAKCRBJ4+4iGRcl7icUAP0RZIMk731BNW3fkQxHxbdnADjt LGkC2AwCSRf13b5uzAD8DOhm9iSsIXsIGFd+992N/mVzfYi0DmAgYln535LP5QU= =re8d -----END PGP SIGNATURE----- --=-Tx8I0Vl5x4I3nK2rurGY--