Hi,

currently, when using Thunderbird to send OpenPGP/MIME signed mails to d-d-a,
the mail gets silently blackholed (#1050906). It seems like the reason is that
there is a small piece of text before the actual MIME-encoded data:

"This is an OpenPGP/MIME signed message (RFC 4880 and 3156)"

Would be nice if the tool in question could just truncate the unsigned bits
instead and accept the mail, assuming there's a valid signature.

Greetings,
Lee

severity -1 wishlist
thanks

The problem there is that we would break DKIM or oversigning of the mail
message if we stripped that out. [It also adds a whole bit of
complicated code to the signature verification tool which is likely to
be wrong.]

The real fix is for thunderbird to stop adding unsigned text before the
actual mime encoded data. It doesn't add any value whatsoever. [It's one
of the only e-mail clients which does this that I'm aware of.]

Final Notice.

You are among the beneficiaries of 2024/2025 grant for all scam victims and relatives reconfirm your email if active for more details

Thank You.

Regards
Mr. Rowland Cole
( Financial Crimes Enforcement Network)

I'm willing to come up with a patch, is this the code in question that's run on
the list servers and rejecting the thunderbird mails? [0]

If so, where is userdir_gpg sourced from? It's not packaged in Debian and not
part of the repo.

[0] https://salsa.debian.org/debian-listmasters/sigcheck/-/tree/master

Hi,

For the record, I found a trace of userdir_gpg.py at
https://github.com/Charuduth/userdir-ldap/blob/colon/userdir_gpg.py

(Looking at this again following yadd's issue with sending a
lemonldap-ng DLA.)

Cheers!
Sylvain Beucler
Debian LTS Team