On Wed 2017-11-29 23:20:35 -0500, Daniel Kahn Gillmor wrote: > When i'm trying to understand a message signature, i care that i know > who it came from (the "validity" of the identity associated with the > key), *not* whether i'm willing to accept the keyholder's other > identity assertions (the "trust" associated with the certificate). > > We've been reporting User ID information based on the "trust" > associated with the certificate, because GMime didn't clearly expose > the validity of the User IDs. > > This change relies on fixes made in GMime 3.0.3 and later which > include https://github.com/jstedfast/gmime/pull/18. Without this patch, the notmuch test suite currently fails when built against gmime 3 on debian testing, because gmime 3 on debian testing now correctly returns key IDs for _get_key_id(). This patch corrects the misbehavior of previous versions of notmuch, and restores the ability to display correct validity of the keys in question. I welcome review for it! --dkg