- Package:
- lists.debian.org
- Source:
- lists.debian.org
- Submitter:
- Lee Garrett
- Date:
- 2025-05-20 12:57:02 UTC
- Severity:
- normal
Hi, currently, when using Thunderbird to send OpenPGP/MIME signed mails to d-d-a, the mail gets silently blackholed (#1050906). It seems like the reason is that there is a small piece of text before the actual MIME-encoded data: "This is an OpenPGP/MIME signed message (RFC 4880 and 3156)" Would be nice if the tool in question could just truncate the unsigned bits instead and accept the mail, assuming there's a valid signature. Greetings, Lee
severity -1 wishlist thanks The problem there is that we would break DKIM or oversigning of the mail message if we stripped that out. [It also adds a whole bit of complicated code to the signature verification tool which is likely to be wrong.] The real fix is for thunderbird to stop adding unsigned text before the actual mime encoded data. It doesn't add any value whatsoever. [It's one of the only e-mail clients which does this that I'm aware of.]
Final Notice. You are among the beneficiaries of 2024/2025 grant for all scam victims and relatives reconfirm your email if active for more details Thank You. Regards Mr. Rowland Cole ( Financial Crimes Enforcement Network)
I'm willing to come up with a patch, is this the code in question that's run on the list servers and rejecting the thunderbird mails? [0] If so, where is userdir_gpg sourced from? It's not packaged in Debian and not part of the repo. [0] https://salsa.debian.org/debian-listmasters/sigcheck/-/tree/master