From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id 2IKJKq3STl8dQgAA0tVLHw (envelope-from ) for ; Tue, 01 Sep 2020 23:01:01 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id YNBEJq3STl+TfAAAB5/wlQ (envelope-from ) for ; Tue, 01 Sep 2020 23:01:01 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 2869A94066A for ; Tue, 1 Sep 2020 23:01:00 +0000 (UTC) Received: from localhost ([::1]:43952 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kDFGt-0000ra-Q3 for larch@yhetil.org; Tue, 01 Sep 2020 19:00:59 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:47542) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kDFGl-0000rS-7X for guix-devel@gnu.org; Tue, 01 Sep 2020 19:00:51 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:60702) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kDFGk-0005FG-FQ; Tue, 01 Sep 2020 19:00:50 -0400 Received: from [2607:fea8:3fdf:f688::8] (port=40884 helo=localhost) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1kDFGj-00078O-Mh; Tue, 01 Sep 2020 19:00:50 -0400 From: Amin Bandali To: Pierre Neidhardt Subject: Re: Signing emails with mu4e (was Re: Hello, new committer here!) Organization: GNU References: <87zh6993s9.fsf@gmx.com> <874kohbssg.fsf@gmx.com> <87lfht8ytb.fsf@gmx.com> <87ft81pqkl.fsf@ambrevar.xyz> Mail-Followup-To: Pierre Neidhardt , Pierre Langlois , guix-devel@gnu.org Date: Tue, 01 Sep 2020 19:00:48 -0400 In-Reply-To: <87ft81pqkl.fsf@ambrevar.xyz> Message-ID: <87tuwhyue7.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: guix-devel@gnu.org Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Scanner: scn0 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Spam-Score: -3.11 X-TUID: NkGL8K0howDN --=-=-= Content-Type: text/plain Pierre Neidhardt writes: > This is what I do to sign all my messages: > > (add-hook 'message-setup-hook 'mml-secure-sign-pgpmime) > [...] A word of caution: at least with Gnus, doing something like this might "downgrade" the security of a message, by changing it to only sign the message you're composing when normally it would have been both signed and encrypted. It typically happens when replying to an encrypted message. For that reason, I set the message to be signed only when it's not being signed+encrypted: (add-hook 'gnus-message-setup-hook (lambda () (unless (mml-secure-is-encrypted-p) (mml-secure-message-sign)))) For non-Gnus users, I'd imagine replacing `gnus-message-setup-hook' with `message-setup-hook' would work. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEEObM8jZRIDS3cwqSYi0Sgzce5VvIFAl9O0qAQHGJhbmRhbGlA Z251Lm9yZwAKCRCLRKDNx7lW8pIwD/9AQziJhYTYsGCAK/1GPBZrjV41sVtB+PtW 7XX+N2i3sL3FDkGLMrfATHs8wqNeOQDXLxYjQWj5OVM9htqkK1O0pre5Erb1TmuG 3M1OA/6W7Sx84Wn3h8pSPZs+fvLUWflg64UovS5GxpiXpMz2WehGyxaP/jNoMgex dVDU6LE8hStvBaoR5uWrlj+7MiWWLH+Rfrue7SFEa98qdBQzQTMUIfVANpIAoEFN lSFuJbqXUUJ20GC8Z533ksRvjzkA3qknCQQxHsHvcUTm9qf+Yjc+RVLJhNLIXn4b /Cs35NxbaTj1pQ4zaUjLRa5FZQRj1Gh5RZVg2iGTxKxFqAH0JIllyypthaxu5Ktv I1T0yXYKABmnaMrDWgp1KsaVqquJI1KgIJEwRHJ9OOP8xZSLS84pdGUNEp8CPM9b NVuH8K8aZWGxFV39N8EFJ1cli75iyWMl8j3fB6rRDxbSTr+wO5hLclVMTvF8GZ98 hNLStvSGUjocPQOD0pieKzC9GTQAKZhsO+TKnXPIB+VnzDNTLo8k3ZU1grO88/UA jEvFhHRBGuclZ7cyLi2A0ozXKkVEEdifXAudkoFZ2MhKX5ttvVDY3Jo8Hpp+xVyg zzAVD1DDD1T0Feo8DSVlJ9jVKj3iItzxsXyTk3GM2t+TaOjF1/OQbUQ/D+sUjEP4 jAnRNqvaig== =v5ZE -----END PGP SIGNATURE----- --=-=-=--