|
very good question to my thinking: if the message is not signed then we do not show any ENIGMAIL information, i.e. ENIGMAIL status information is not presented. if the message is signed then I'm concerned with, first of all did the signature verify, and secondly -- was the signature made by someone I know? the white or the green depends on whether or not I have previously authenticated ("vetted") the senders key. after that I might want to check the trust level I have assigned to that user; perhaps that should be a click-up dialog ( Robert did not like my multi color stack,... and -- that's OK: we are brain-storming here: all ideas need to get onto the table and get discussed so that we can work out what we think will be the best language and display format . I love contributing -- and I don't mind getting stomped on ) On 09/20/2015 01:00 PM, Phil Stracchino
wrote:
On 09/20/15 08:00, Mike Acker wrote:I'm not sure you need 3 greens though,-- a message for which the signature verifies becomes "authenticated",-- i.e. we are3 assured the message is from the person we think it is from --the key is when the signature authenticates you, perforce, have also verified integrity ( the accuracy of the document content ) the option of course is PRIVACY, aka encryption I think two greens are enough, then:With no integrity indicator, how do you distinguish between an unsigned message, and one which has been signed but the content of the message has been altered post-signature? -- /Mike |
signature.asc
Description: OpenPGP digital signature
_______________________________________________ enigmail-users mailing list enigmail-users@enigmail.net To unsubscribe or make changes to your subscription click here: https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
