#1050915 truncate unsigned parts of signed mails to d-d-a

#1050915#5
Date:
2023-08-31 11:34:26 UTC
From:
To:
Hi,

currently, when using Thunderbird to send OpenPGP/MIME signed mails to d-d-a,
the mail gets silently blackholed (#1050906). It seems like the reason is that
there is a small piece of text before the actual MIME-encoded data:

"This is an OpenPGP/MIME signed message (RFC 4880 and 3156)"

Would be nice if the tool in question could just truncate the unsigned bits
instead and accept the mail, assuming there's a valid signature.

Greetings,
Lee

#1050915#8
Date:
2023-09-03 20:25:54 UTC
From:
To:
severity -1 wishlist
thanks

The problem there is that we would break DKIM or oversigning of the mail
message if we stripped that out. [It also adds a whole bit of
complicated code to the signature verification tool which is likely to
be wrong.]

The real fix is for thunderbird to stop adding unsigned text before the
actual mime encoded data. It doesn't add any value whatsoever. [It's one
of the only e-mail clients which does this that I'm aware of.]

#1050915#13
Date:
2025-02-08 04:49:23 UTC
From:
To:
Final Notice.

You are among the beneficiaries of 2024/2025 grant for all scam victims and relatives reconfirm your email if active for more details

Thank You.

Regards
Mr. Rowland Cole
( Financial Crimes Enforcement Network)

#1050915#18
Date:
2025-05-20 12:46:43 UTC
From:
To:
I'm willing to come up with a patch, is this the code in question that's run on
the list servers and rejecting the thunderbird mails? [0]

If so, where is userdir_gpg sourced from? It's not packaged in Debian and not
part of the repo.

[0] https://salsa.debian.org/debian-listmasters/sigcheck/-/tree/master