From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from localhost (localhost [127.0.0.1]) by olra.theworths.org (Postfix) with ESMTP id 81982431FB6 for ; Mon, 20 Dec 2010 10:22:30 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at olra.theworths.org X-Spam-Flag: NO X-Spam-Score: -2.29 X-Spam-Level: X-Spam-Status: No, score=-2.29 tagged_above=-999 required=5 tests=[RCVD_IN_DNSWL_MED=-2.3, T_MIME_NO_TEXT=0.01] autolearn=disabled Received: from olra.theworths.org ([127.0.0.1]) by localhost (olra.theworths.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ETosvHdxrTlK for ; Mon, 20 Dec 2010 10:22:29 -0800 (PST) Received: from brinza.cc.columbia.edu (brinza.cc.columbia.edu [128.59.29.8]) by olra.theworths.org (Postfix) with ESMTP id 9AABD431FB5 for ; Mon, 20 Dec 2010 10:22:29 -0800 (PST) Received: from servo.finestructure.net (cpe-74-66-82-137.nyc.res.rr.com [74.66.82.137]) (user=jgr2110 author=jrollins@finestructure.net mech=PLAIN bits=0) by brinza.cc.columbia.edu (8.14.4/8.14.3) with ESMTP id oBKIMB3R009561 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NOT); Mon, 20 Dec 2010 13:22:27 -0500 (EST) Received: from jrollins by servo.finestructure.net with local (Exim 4.72) (envelope-from ) id 1PUkN9-0002Md-1n; Mon, 20 Dec 2010 13:22:11 -0500 From: Jameson Rollins To: Daniel Kahn Gillmor , notmuch Subject: Re: PGP/MIME signature verification In-Reply-To: <4CF15D67.1070904@fifthhorseman.net> References: <4CF15D67.1070904@fifthhorseman.net> User-Agent: Notmuch/0.5 (http://notmuchmail.org) Emacs/23.2.1 (i486-pc-linux-gnu) Date: Mon, 20 Dec 2010 13:22:07 -0500 Message-ID: <87aak08fu8.fsf@servo.finestructure.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.68 on 128.59.29.8 X-BeenThere: notmuch@notmuchmail.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: "Use and development of the notmuch mail system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Dec 2010 18:22:30 -0000 --=-=-= Content-Transfer-Encoding: quoted-printable On Sat, 27 Nov 2010 14:35:03 -0500, Daniel Kahn Gillmor wrote: > the signature-verification branch on my git repo [0] contains functional > PGP/MIME signature verification if you supply the --verify argument to >=20 > notmuch show --format=3Djson >=20 > It relies on gpg being in the path, and on the user having the signer's > key in their gnupg keyring. I was able to merge dkg's signature-verification branch on top of cworth's current master head (b3caef1f) with only a tiny easily-resolvable conflict. It seems to work exactly as advertised, and I wholeheartedly approve and endorse this patch set for inclusion upstream: Approved-and-Tested-By: Jameson Rollins I have pushed a merged "signature-verification" branch to my repo, along with a single commit to fix an errant newline in the json --verify output: git://finestructure.net/notmuch Carl: can you give an indication of whether or not you intend to ultimately accept this patch set? If so, I would like to start work on representing signature verification information in the emacs UI. I want to make sure that we're good with this effort first, though. We should probably also start a conversation about how best to represent the signature verification info. I'll bring that up in a separate thread, though. dkg: again, great work on this! Thanks! Next up: decrypting! jamie. --=-=-= Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAEBCAAGBQJND57QAAoJEO00zqvie6q8B+EP/3OkJIhqCozdbkoQLmntUC+W tuDCh6NNV7D3JuNSmptRqJEX6mpooOMzFHwE7rt4yBdl8K+w03Vvit44HkxjS/XB 6CuHgYe2AHreWV2aLUUd9zFwQNnbXi378MgoyhXsuo7bmeTyn+NhhoKNVWrtXAqx 8lhLViJxFtOPqzq3ugdYJXLxwN9Pgx6b7+A9lqLXxv0EEg2s/7xyILzTx25Einxl 6X0kK9A14giJN6H9DD5RyOXfdR0xNpLj1WwURXy3gnb4X434rZclxfWq6AAld2c9 k7q/V6PsoHKismv7qgAwnR/B4LOmBZEue2Bn2y9m9NkDXf/0mfsxtaWyr6AlFDuW 4X611/NForpsY8IBa/s063gAvRERgQFZ4PhFYKr04XipVAtroofg76rcdX/8zunN 5t2NRDdVpw6NXK7emkx+m7byxpscuImH/FhIxXoePKD6lvoSJRqprNYXb5jPXwTz wQ3RP736iowKf0f2XS5SMGfnhjfIWaVUWRsidveJUtxxebVPxgnvu3qHhoj2Y6XX KVvkb6YqAqbLkWExF42ZWpbe3UvlXYbVe6aIFd8/H/qv7W+8uTlU3sjJ0w0PiEwH 3pS9qgbk6hsfK84cUdBdg9xsqTcNC4UenlUNV2hbGUU911lZltU+FCzfODy6Jco1 vhJy3AQ26iYTWCOmO3iL =OT6k -----END PGP SIGNATURE----- --=-=-=--