OK. Since this began I've sent several messages as well others through the entire ALE mailman process. I am receiving valid signatures on messages. During this time, nothing has changed with mailman or mailscanner. <br>
<br>What email cleaners are you using? procmail filters? thunderbird autosort filters?<br><br><div class="gmail_quote">On Sat, Nov 28, 2009 at 7:04 PM, Tim Watts <span dir="ltr"><<a href="mailto:timtw@earthlink.net">timtw@earthlink.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div><div class="im">
On Sat, 2009-11-28 at 16:06 -0500, Jeremy T. Bouse wrote:
<blockquote type="CITE">
<pre> I've been sending gpg signed messages through Thunderbird using
Enigmail without problems. Further I've sent emails to myself from Gmail
using FireGPG and the signature was come through fine. I just hadn't
sent anything to the list from my Gmail account and using FireGPG.
As I noted though FireGPG was base64 encoding the messages themselves
along with the MIME encoding so I don't know if it's that combination
that's causing a problem for the ALE mailing list software. It has been
isolated to email sent via FireGPG though it seems. Whether the fix
should be found in the mailing list software or FireGPG itself could
probably be debated in great length.
</pre>
</blockquote></div>
In this particular case it's being caused by <i>something</i> wrapping a header in the signed portion of the message body.<br>
<br>
If you use Evolution try this experiment:<br>
1. Export Jim's email with the invalid sig (File / Save Message)<br>
2. Change lines 57-58 from this<br>
<br>
Content-Type: multipart/alternative;<br>
boundary="firegpg0710eqg2kkoajgv6vsvmxiqq1"<br>
<br>
to this:<br>
<br>
Content-Type: multipart/alternative; boundary="firegpg0710eqg2kkoajgv6vsvmxiqq1"<br>
<br>
(i.e. unwrap the header and leave a single space before "boundary=")<br>
3. Import it.<br>
4. Enjoy the valid signature!<br>
<br>
(You can probably do something similar w/ Thunderbird.)<br>
<br>
Conclusion: the wrapped header caused the sig to be invalidated.<br>
<br>
Open question: Who wrapped it, Mailman, firegpg or gmail?<br>
<br>
My answer: probably mailman. On what grounds? Using a message sent to ALE via gmail/firegpg, I compared the raw message sent by mailman to the one stored in my gmail Sent folder. Firegpg sends messages by going around the gmail web interface and sending them to gmail directly via smtp. Thus the copy in my gmail Sent folder would reflect what firegpg sent whereas the one in my inbox from ALE reflects what mailman sent. The difference (apart from an additional envelope) was in that one header, which when corrected, gave a valid sig.<br>
<br>
Now what I haven't seen is the raw message as it arrives at the ALE mail server. That would be interesting because it would tell us whether mailman or gmail wrapped the header. Also looking at the message just before it leaves the server could help. Perhaps there's another layer after mailman (as Jeremy suggests below).<div class="im">
<br>
<br>
<blockquote type="CITE">
<pre> If anything running on the ALE mail server that would affect mail going
through the list could be a cause. If it's not repacking the message
back exactly as it was received this would invalidate the signature very
easily...
</pre>
</blockquote></div>
Which seems to be what's happening.<br>
<br>
<table width="100%" cellpadding="0" cellspacing="0">
<tbody><tr>
<td>
<br>
</td>
</tr>
</tbody></table>
</div>
<br>_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br>-- <br>James P. Kinney III<br>Actively in pursuit of Life, Liberty and Happiness <br><br>