From lurker-index@localhost Fri Sep 23 15:11:56 2016 Return-Path: Received: from lin16.mojsite.com (178.218.164.164:993) by g0n.xdwgrp with IMAP4-SSL; 23 Sep 2016 13:11:56 -0000 Envelope-to: miro.rovis@croatiafidelis.hr Delivery-date: Fri, 23 Sep 2016 13:04:59 +0200 Received: from shtjevan.gbnet.net ([194.70.142.36]:39296 helo=gbnet.net) by lin16.mojsite.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.87) (envelope-from ) id 1bnOHj-0002Tx-RJ for miro.rovis@croatiafidelis.hr; Fri, 23 Sep 2016 13:04:51 +0200 Received: (qmail 19634 invoked by uid 611); 23 Sep 2016 11:01:47 -0000 Received: (qmail 19585 invoked from network); 23 Sep 2016 11:00:52 -0000 Received: from mail-1.fido.net (84.246.192.5) by shtjevan.gbnet.net with ESMTPS (DHE-RSA-AES256-SHA encrypted); 23 Sep 2016 11:00:52 -0000 Received: from seditious.adversary.org ([59.167.194.34] helo=nefarious.adversary.org) by mail-1.fido.net with esmtp (Exim 4.86) (envelope-from ) id 1bnODg-0007d6-8R for mutt-users@mutt.org; Fri, 23 Sep 2016 12:00:51 +0100 Received: by nefarious.adversary.org (Postfix, from userid 501) id 0C08765280EA; Fri, 23 Sep 2016 21:00:33 +1000 (AEST) Date: Fri, 23 Sep 2016 21:00:33 +1000 From: Ben McGinnes To: mutt-users@mutt.org Subject: Re: [SPAM?] Re: PGP sigs fail verification Message-ID: <20160923110033.GD57075@adversary.org> References: <20160917232509.GK31239@g0n.xdwgrp> <20160918051503.GO31239@g0n.xdwgrp> <20160918061803.4077.03047CF5@matica.foolinux.mooo.com> <20160918064328.ts37vzdr6ehds6ln@lovelace.schplaf> <20160921104046.GD1147@adversary.org> <20160921213236.GD24944@dragontoe.org> <20160922211841.GA2162@dragontoe.org> <20160923071402.GE8526@minitel.priv.enst-bretagne.fr> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="RpqchZ26BWispMcB" Content-Disposition: inline In-Reply-To: <20160923071402.GE8526@minitel.priv.enst-bretagne.fr> User-Agent: Mutt/1.7.0 (2016-08-17) Received-SPF: pass (mail-1.fido.net: domain of adversary.org designates 59.167.194.34 as permitted sender) client-ip=59.167.194.34; envelope-from=ben@adversary.org; helo=nefarious.adversary.org; X-SPF-Result: mail-1.fido.net: domain of adversary.org designates 59.167.194.34 as permitted sender X-Filter-ID: s0sct1PQhAABKnZB5plbIdZIQllgAaFZah5UYvbbt+NaLI2rqoACMhULk4u6nCydNMAlA+Rmt2HG gqbkHADIyo411Ms0E5bt7/al3iJQV32H8OIuapHbdulippicZyXgHrVJfFkyKr2eCIJhDKSPnytE LhwKoSU6wmK17fLgw12micHWY+si53Ro7tHTuF287QsnEG/a/l5scf1Fs/ttQS8kMbIbbqGLI4Hq fAnCWZO7X6wgzOMhrqYSCb6MxgSzUV8ShebT8U8Xw9HTDfreWYSQ/SLs0hfSR76a7WJtWBBGJWOt eWaoXFvbbwb3Cge72jFzs5Bu7E1Y/gY6WS7godtLi1QVVyztjxnWvpW5S+MuxQywq7iW+3N2ZKz4 kxaY9muV1lBR0blKP/p9h87jdzl0E08wSgZouacoB2x/GGSQAEErZ6BfD4/W227/VzHg+l5ZnOoq S85+o/HqXSJ34L1TzOfBFM7Er/7n1KQSkHuxOWnp1UaerA3HM1DGPLa9aseSo+eTNO7G/rUMG+AW yn7GSOGo5AhqxuJQMN+Ull1jlvMIu+sRZOzqnbOGnKMP X-Report-Abuse-To: spam@master.fido.net Authentication-Results: fido.net; spf=pass smtp.mailfrom=ben@adversary.org X-FidoGuard-Class: ham X-FidoGuard-Evidence: Combined (0.15) X-Recommended-Action: accept List-Post: List-Unsubscribe: send mail to majordomo@mutt.org, body only "unsubscribe mutt-users" Precedence: bulk Sender: owner-mutt-users@mutt.org X-PlusHosting-MailScanner-Information: Please contact the ISP for more information X-PlusHosting-MailScanner-ID: 1bnOHj-0002Tx-RJ X-PlusHosting-MailScanner: Found to be clean X-PlusHosting-MailScanner-SpamCheck: not spam, SpamAssassin (not cached, score=-6.299, required 5, autolearn=not spam, BAYES_00 -5.00, HEADER_FROM_DIFFERENT_DOMAINS 0.00, KAM_LAZY_DOMAIN_SECURITY 1.00, RCVD_IN_DNSWL_MED -2.30) X-PlusHosting-MailScanner-From: owner-mutt-users-m24788@mutt.org X-Spam-Status: No X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= --RpqchZ26BWispMcB Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Sep 23, 2016 at 09:14:02AM +0200, Jean-Christophe Bach wrote: > Hello, >=20 > > OK, I lied. All of the signatures were good except for two messages > > from Jean-Christophe: =20 > >=20 > > 20160921191202.GB18462@lovelace.schplaf > > 20160921195336.GD18462@lovelace.schplaf > >=20 > > Both of those were bad. The first of his was good: > >=20 > > 20160921060257.GB29391@minitel.priv.enst-bretagne.fr >=20 > Exactly, the main difference is the fact I did not use the same computer > to send the emails. In both cases, I have custom headers (for instance > this email should also have custom headers). I did tests with my > different addresses, different keys and different computers. Only my > personal computer "generates" the error. Have you tried changing your X-PGP-Key custom header to just use either the long key ID or the fingerprint (or both so people can choose what to copy and paste)? Mainly because message headers are always going to change and thus are never included in signing or encrypting, so it's odd that those headers would be the cause and I wonder if there's anything in the content of your headers that are interfering with other things with mutt. If that's the case then I'd be looking at certain characters in the the SKS URL (hence advising to lose it just leave the key ID) or the apostrophes/single quotes in the Cthulhu one. Regards, Ben --RpqchZ26BWispMcB Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQGcBAABCgAGBQJX5QtIAAoJEH/y03E1x1U8vTUL/RKlSSQTiPuRRopVLblDcO5G O5ncWyeCGjth9vzBZhisGZwdMvOomu3Ph5hCbgLJAow+3pWkf7+lYRZn4N+M/GO3 sIT54uRSyDtZiekt3Zy39QVUynAf9nsVPFCXkKjaCArJEPPi2lJLFCLUuwOvCrMi m95g0brJ6W8ZHb6GTG/Nq/+I0cBuBf6TT8QH7ij4DfFoDqFySTwWa9BhswPUWE9B x/vgeAoX4oAnGkk56fGH/5JV3T4KRhZWflp/3EDvOsrYbRczwn6sCYBstA/eMy/M A6IIumRkkvbBdw3ruv0bnFPFpD7WwXzvvlhjPVG8EtcuZfRslJPDaJ7s+c4bf8Rv Gpjxp9JKsINCDYDbB/p4F62foVf0X+nhMkXc82bEOiinIqkZa1K0wlr7IY0ae823 wwwdOSrgOaNZJsAVk0Kg3pCv9LwpQNQ4rWhZD8rCENd0aK95ERHnFUxE1XjUn3KF VZux+mV5TxANfOGg/ggtpvueiyoBduI4MIA/oTWaDQ== =8JLa -----END PGP SIGNATURE----- --RpqchZ26BWispMcB--