notmuch-emacs should correctly handle signature status on reply

notmuch-emacs should correctly handle signature status on reply

[Viktor Ashirov]

[-- Attachment #1: Type: text/plain, Size: 567 bytes --]

Hi,

in notmuch-emacs, when I reply to multipart/signed email, signature
status gets inserted in the cited message, like this:

----------
John Doe writes:
> [ Unknown signature status ]
> Hello world!
----------

Even though signature was verified when email is viewed in notmuch-show
----------
 [ multipart/signed ]
 [ Good signature by:  John Doe <jdoe@example.org> ]
 [ text/plain ]
----------

So I'd like to be able to
1. Not include signature status in the cited message
2. But when I want to include it, it should be correctly processed.

Thanks!

--
Viktor

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 818 bytes --]

Re: notmuch-emacs should correctly handle signature status on reply

[Daniel Kahn Gillmor]

[-- Attachment #1: Type: text/plain, Size: 1288 bytes --]

On Wed 2016-08-03 06:28:36 -0400, Viktor Ashirov wrote:

> in notmuch-emacs, when I reply to multipart/signed email, signature
> status gets inserted in the cited message, like this:
>
> ----------
> John Doe writes:
>> [ Unknown signature status ]
>> Hello world!
> ----------
>
> Even though signature was verified when email is viewed in notmuch-show
> ----------
>  [ multipart/signed ]
>  [ Good signature by:  John Doe <jdoe@example.org> ]
>  [ text/plain ]
> ----------
>
> So I'd like to be able to
> 1. Not include signature status in the cited message
> 2. But when I want to include it, it should be correctly processed.

fwiw, i think that the cited message should never include signature or
decryption status, and the presence of these fields in the output of
notmuch-reply is a bug.

I see no reason to make it configurable to show them, and some good
reasons not to: it's arguably a leak of information about your private
view of the world to include this stuff in a reply (the user can always
choose to write about their private view of the world manually if they
want to).

notmuch-emacs already has too many options, and we should be
parsimonious about adding new ones.

i suggest dropping the signature and encryption status entirely from
notmuch-reply.

        --dkg

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 948 bytes --]

Re: notmuch-emacs should correctly handle signature status on reply

[Viktor Ashirov]

[-- Attachment #1: Type: text/plain, Size: 1488 bytes --]

On Wed, Aug 03 2016 at 11:30:05 am, Daniel Kahn Gillmor <dkg@fifthhorseman.net> wrote:
> On Wed 2016-08-03 06:28:36 -0400, Viktor Ashirov wrote:
>
>> in notmuch-emacs, when I reply to multipart/signed email, signature
>> status gets inserted in the cited message, like this:
>>
>> ----------
>> John Doe writes:
>>> [ Unknown signature status ]
>>> Hello world!
>> ----------
>>
>> Even though signature was verified when email is viewed in notmuch-show
>> ----------
>>  [ multipart/signed ]
>>  [ Good signature by:  John Doe <jdoe@example.org> ]
>>  [ text/plain ]
>> ----------
>>
>> So I'd like to be able to
>> 1. Not include signature status in the cited message
>> 2. But when I want to include it, it should be correctly processed.
>
> fwiw, i think that the cited message should never include signature or
> decryption status, and the presence of these fields in the output of
> notmuch-reply is a bug.
>
> I see no reason to make it configurable to show them, and some good
> reasons not to: it's arguably a leak of information about your private
> view of the world to include this stuff in a reply (the user can always
> choose to write about their private view of the world manually if they
> want to).
I see your point, and I agree.
>
> notmuch-emacs already has too many options, and we should be
> parsimonious about adding new ones.
>
> i suggest dropping the signature and encryption status entirely from
> notmuch-reply.
Sounds good to me.
>
>         --dkg
--
Viktor

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 818 bytes --]