Kudos! Also: +1 PGP!

Kudos! Also: +1 PGP!

[Darren McGuicken]

[-- Attachment #1: Type: text/plain, Size: 1142 bytes --]

I just wanted to drop a quick mail to the list to give you all my huge
thanks for this already astonishingly useful tool!  

Like a few others, it seems, I arrived here after reading a
not-very-grumpy review in the Grumpy Editor series[1].
Everything-is-a-search combined with CLI access?!  Sold!

I've been slowly moving all my day-to-day mailing needs to notmuch over
the last month and the only thing I'm missing is native message
decryption and verification support - is this being actively worked on,
I haven't seen it mentioned in a while?  Or is it feasible to add this
as a target for an upcoming merge window?  How far away are we from
something workable - are we just(!) looking for someone to stitch the
code together or do we need to brainstorm a little more exactly what the
approach is likely to be?

In the meantime, I find myself using the snippet from Tassilo in:

    id:87zl6cl595.fsf@thinkpad.tsdh.de

Which lets me jump to the selected encrypted message in Gnus and have it
in turn auto-decrypt the text.  Works well but does need a second mail
program ;-)


[1] http://lwn.net/Articles/380073/

[-- Attachment #2: Type: application/pgp-signature, Size: 197 bytes --]

Re: Kudos! Also: +1 PGP!

[Jameson Rollins]

[-- Attachment #1: Type: text/plain, Size: 1785 bytes --]

On Sun, 25 Apr 2010 19:57:33 +0100, Darren McGuicken <mailing-notmuch@fernseed.info> wrote:
> I've been slowly moving all my day-to-day mailing needs to notmuch over
> the last month and the only thing I'm missing is native message
> decryption and verification support - is this being actively worked on,
> I haven't seen it mentioned in a while?  Or is it feasible to add this
> as a target for an upcoming merge window?  How far away are we from
> something workable - are we just(!) looking for someone to stitch the
> code together or do we need to brainstorm a little more exactly what the
> approach is likely to be?

Hey, Darren.  Some of us are very keenly interested in getting PGP/MIME
support in notmuch as well.  It has been mentioned on irc recently, and
I've been meaning to bring it up again on the list again.

It seems like a pretty tricky thing to implement, but I think some folks
have started looking at it.  I don't know how far anyone has gotten,
though.  I certainly don't have any idea how to do it.  It obviously
requires some sophisticated MIME part parsing, which has been improving
recently.  Other Emacs MUAs obviously handle it, so there's probably a
lot to be learned from them.  Your help and suggestions would definitely
be appreciated.

> In the meantime, I find myself using the snippet from Tassilo in:
> 
>     id:87zl6cl595.fsf@thinkpad.tsdh.de
>
> Which lets me jump to the selected encrypted message in Gnus and have it
> in turn auto-decrypt the text.  Works well but does need a second mail
> program ;-)

I'm interested in using this as a stop-gap, but unfortunately I'm not
finding this message in my local store.  Can you point to url in an
archive, or forward this to me or the list?

Thanks!

jamie.

[-- Attachment #2: Type: application/pgp-signature, Size: 835 bytes --]

Re: Kudos! Also: +1 PGP!

[Sebastian Spaeth]

[-- Attachment #1: Type: text/plain, Size: 1045 bytes --]


We were discussing on IRC whether decryption should be handled in
notmuch show --decrypt or in emacs and I had a quick look at what it
would take for emacs. Here is a snippet of code that outputs
"Good signature from 5585F58CC827A062 Sebastian Spaeth (Private
Communication) <Sebastian@SSpaeth.de> (trust ultimate) created at
2010-04-26T14:27:07+0200 using DSA" in the minibuffer. I guess something
based on this could be used to parse the email and try to decrypt via gpg
and mark the signature status in the summary line:

(save-excursion 
  (let ((context (epg-make-context))
        (signature "-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkvVhpsACgkQVYX1jMgnoGJx4wCfXYKGdlc6HixqGwvWL4E+9t+M
QusAnA97NGdSLBFH6LeS3F8x3tAMd8td
=2nbO
-----END PGP SIGNATURE-----")
                (signed-text "
teste
"))
    (epg-verify-string context signature signed-text)
    (let ((result (epg-context-result context)))
      (message (epg-verify-result-to-string (cdr (car result))))
      )))

[-- Attachment #2: Type: application/pgp-signature, Size: 197 bytes --]

Re: Kudos! Also: +1 PGP!

[David Edmondson]

[-- Attachment #1: Type: text/plain, Size: 1050 bytes --]

On Mon, 26 Apr 2010 15:52:37 +0200, "Sebastian Spaeth" <Sebastian@SSpaeth.de> wrote:
> We were discussing on IRC whether decryption should be handled in
> notmuch show --decrypt or in emacs and I had a quick look at what it
> would take for emacs. Here is a snippet of code that outputs
> "Good signature from 5585F58CC827A062 Sebastian Spaeth (Private
> Communication) <Sebastian@SSpaeth.de> (trust ultimate) created at
> 2010-04-26T14:27:07+0200 using DSA" in the minibuffer. I guess something
> based on this could be used to parse the email and try to decrypt via gpg
> and mark the signature status in the summary line:

Inline PGP could be handled by the text/plain washing functions. I had a
quick go at this and bremner tested, but there were some wrinkles and I
didn't finish it.

multipart/signed really needs the re-worked JSON output so that the UI
can know what is going on. It might be possible to kludge something
together with the current output, but it will be awkward.

dme.
-- 
David Edmondson, http://dme.org

[-- Attachment #2: Type: application/pgp-signature, Size: 197 bytes --]

Re: Kudos! Also: +1 PGP!

[Jameson Rollins]

[-- Attachment #1: Type: text/plain, Size: 402 bytes --]

On Mon, 26 Apr 2010 17:11:33 +0100, David Edmondson <dme@dme.org> wrote:
> multipart/signed really needs the re-worked JSON output so that the UI
> can know what is going on. It might be possible to kludge something
> together with the current output, but it will be awkward.

Actually the emacs UI is current using the JSON output, since the
bremner's reworking got merged a couple weeks ago.

jamie.

[-- Attachment #2: Type: application/pgp-signature, Size: 835 bytes --]

Re: Kudos! Also: +1 PGP!

[David Edmondson]

[-- Attachment #1: Type: text/plain, Size: 675 bytes --]

On Mon, 26 Apr 2010 12:19:26 -0400, Jameson Rollins <jrollins@finestructure.net> wrote:
> On Mon, 26 Apr 2010 17:11:33 +0100, David Edmondson <dme@dme.org> wrote:
> > multipart/signed really needs the re-worked JSON output so that the UI
> > can know what is going on. It might be possible to kludge something
> > together with the current output, but it will be awkward.
> 
> Actually the emacs UI is current using the JSON output, since the
> bremner's reworking got merged a couple weeks ago.

Unfortunately we still need more. notmuch doesn't include the details of
how parts are related in a multipart/* message.

dme.
-- 
David Edmondson, http://dme.org

[-- Attachment #2: Type: application/pgp-signature, Size: 197 bytes --]

Re: Kudos! Also: +1 PGP!

[Darren McGuicken]

[-- Attachment #1: Type: text/plain, Size: 774 bytes --]

On Mon, 26 Apr 2010 07:16:16 -0400, Jameson Rollins <jrollins@finestructure.net> wrote:
> > In the meantime, I find myself using the snippet from Tassilo in:
> >     id:87zl6cl595.fsf@thinkpad.tsdh.de
> 
> I'm interested in using this as a stop-gap, but unfortunately I'm not
> finding this message in my local store.  Can you point to url in an
> archive, or forward this to me or the list?

Absolutely, you can find the thread on gmane here:

     http://thread.gmane.org/gmane.mail.notmuch.general/778/focus=78

One other thing I'd recommend is downloading the complete archive from
the link on notmuchmail.org:

     http://notmuchmail.org/archives/notmuch.mbox

It's incredibly handy being able to search for notmuch information with
notmuch itself!

[-- Attachment #2: Type: application/pgp-signature, Size: 197 bytes --]