Re: [Enigmail] Unverified signatures

2014-12-08 Thread Philip Jackson
On 08/12/14 18:28, Patrick Brunschwig wrote:
> On 08.12.14 18:15, Philip Jackson wrote:
>> Using linux, Thunderbird 31.3.0, enigmail 1.8a1pre (of 2014-12-08)
> 
>> I'm getting increasing numbers of emails where an enigmail alert
>> warns that there is an "Unverified signature, Untrusted good
>> signature from "  - no mention of the key id.
> 
>> When I check in the Key Manager, I find that I have one or more
>> public keys for that person/email address.  A closer look at each
>> key shows they have subkeys of algorithm  keyAlgorithm_18 and/or
>> keyAlgorithm_22.   These I take it, are ECC types and require gnupg
>> 2.1
> 
>> One email with "Unverifed signature, Untrusted good signature",
>> signed and not encrypted,  which I have at hand right now, has a
>> subkey keyAlgorithm_18 for encryption, and a DSA 2048 for signing.
>> Shouldn't enigmail be able to verify a signature made with a DSA
>> 2048 sub-key?
> 
>> Is now the time to upgrade from gnupg2 2.0.26 to 2.1 ?
> 
> Not necessarily. Can you send me a debug log file? I'd like to see the
> status messages generated by GnuPG.
> 
> -Patrick

Sent to you at enigmail.net

Philip



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Unverified signatures

2014-12-08 Thread Patrick Brunschwig
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 08.12.14 18:15, Philip Jackson wrote:
> Using linux, Thunderbird 31.3.0, enigmail 1.8a1pre (of 2014-12-08)
> 
> I'm getting increasing numbers of emails where an enigmail alert
> warns that there is an "Unverified signature, Untrusted good
> signature from "  - no mention of the key id.
> 
> When I check in the Key Manager, I find that I have one or more
> public keys for that person/email address.  A closer look at each
> key shows they have subkeys of algorithm  keyAlgorithm_18 and/or
> keyAlgorithm_22.   These I take it, are ECC types and require gnupg
> 2.1
> 
> One email with "Unverifed signature, Untrusted good signature",
> signed and not encrypted,  which I have at hand right now, has a
> subkey keyAlgorithm_18 for encryption, and a DSA 2048 for signing.
> Shouldn't enigmail be able to verify a signature made with a DSA
> 2048 sub-key?
> 
> Is now the time to upgrade from gnupg2 2.0.26 to 2.1 ?

Not necessarily. Can you send me a debug log file? I'd like to see the
status messages generated by GnuPG.

- -Patrick

-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJUhd/WAAoJEMk25cDiHiw+7mwIAI9X+izoey6l/vAIlewmGoZM
CZpF2/v+/UctwC0wKKdeaW6Vrdw26XcMuN7BIfYMtFhlwd6aTn+E3lM0ieQGksmY
awg7i4nCjHvq1TrHh+jDWg17MLQoRXWuXiipMzpJZmVUvOxQvg9JOxsyj6PGYGer
VWUm/KchHnTtM22n0pjBTowkO2LMY3MHfajzs6PNskQmkbuNXR8hCZ5xH+67cESj
fc/2wnRA73jO8b2LWfgJvsBtumX3K8hqKbZfN7uFOsBckfrEn3LCV/uDdb5Uzwi0
2DKy9JEPJ+2hokqnWZ9cskHLordpM98b4++rp8idP2RMNC9jReNm3IKD7Qy1KXc=
=KS+J
-END PGP SIGNATURE-

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


[Enigmail] Unverified signatures

2014-12-08 Thread Philip Jackson
Using linux, Thunderbird 31.3.0, enigmail 1.8a1pre (of 2014-12-08)

I'm getting increasing numbers of emails where an enigmail alert warns that
there is an "Unverified signature, Untrusted good signature from "  - no mention of the key id.

When I check in the Key Manager, I find that I have one or more public keys for
that person/email address.  A closer look at each key shows they have subkeys of
algorithm  keyAlgorithm_18 and/or keyAlgorithm_22.   These I take it, are ECC
types and require gnupg 2.1

One email with "Unverifed signature, Untrusted good signature", signed and not
encrypted,  which I have at hand right now, has a subkey keyAlgorithm_18 for
encryption, and a DSA 2048 for signing.  Shouldn't enigmail be able to verify a
signature made with a DSA 2048 sub-key?

Is now the time to upgrade from gnupg2 2.0.26 to 2.1 ?

Can enigmail handle ECC keys if gnupg 2.1 is installed ?

Philip




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


[Enigmail] Fwd: enigmail-users Digest, Vol 29, Issue 1

2014-12-08 Thread Bruce Jala
When I received this email, I received the following notification on my email 
client  “ATTENTION: The Signature of this message is Invalid”.  Are you aware 
of this, or know of a reason why I am receiving this notification?

Begin forwarded message:

> From: enigmail-users-requ...@enigmail.net
> Subject: enigmail-users Digest, Vol 29, Issue 1
> Date: December 7, 2014 at 3:36:06 PM EST
> To: enigmail-users@enigmail.net
> Reply-To: enigmail-users@enigmail.net
> 
> 
> End of enigmail-users Digest, Vol 29, Issue 1
> *

"Those who would sacrifice freedom for security deserve neither"   Benjamin 
Franklin



signature.asc
Description: Message signed with OpenPGP using GPGMail
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


[Enigmail] Fwd: enigmail-users Digest, Vol 29, Issue 1

2014-12-08 Thread Bruce Jala
When I received this email, I received the following notification on my email 
client  “ATTENTION: The Signature of this message is Invalid”.  Are you aware 
of this, or know of a reason why I am receiving this notification?

Begin forwarded message:

> From: enigmail-users-requ...@enigmail.net
> Subject: enigmail-users Digest, Vol 29, Issue 1
> Date: December 7, 2014 at 3:36:06 PM EST
> To: enigmail-users@enigmail.net
> Reply-To: enigmail-users@enigmail.net
> 
> 
> End of enigmail-users Digest, Vol 29, Issue 1
> *

"Those who would sacrifice freedom for security deserve neither"   Benjamin 
Franklin



signature.asc
Description: Message signed with OpenPGP using GPGMail
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] combining per-user AND per-recipient rules ?

2014-12-08 Thread Patrick Brunschwig
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 05.12.14 23:27, terrygal...@mailbolt.com wrote:
> Hi,
> 
> I have two mail accounts in Thunderbird.
> 
> Enigmail is installed and working.
> 
> I can set up DEFAULTs in Enigmail that ALL accounts will use for
> each sender.

I'd say you can set up default rules in Enigmail for each sender that
apply to all recipients.


> I can set up RULES for a given recipient that will override ALL the
> default rules for all mail from any sender TO that recipient.
> 
> Can I do both?
> 
> In other words I want to have
> 
> Enigmail defaults set for sender account 1. different Enigmail
> defaults set for sender account 2.
> 
> a rule that says IF sender = account2, AND recipient =
> someb...@somedomain.com then (for example) don't encrypt & do sign
> 
> Can that be done?

The generic requirement is not possible as the per-recipient rules are
global. However, I'd assume that if you select your defaults cleverly
enough you can probably achieve what you need.

- -Patrick
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJUhXT9AAoJEMk25cDiHiw+iSIIALpt99aYW+HlU5r5a/TU/LIM
VUg1aK8iJuctIJ7W/cP5DCYSmxjfxbtZKbe1fk7JZ2jz+JSb1FYRv2LT8lvfVi+N
a1P/WlvnaeI1lbtSWBB0UPz9V/1Zla0aO0JcVrCSfaCLhymN2aELZzzinWgHAssE
I/j8tXrU36OxKlubr9ZX31y5sQZSdOKoIdGpjT6CM8avNUqJLUrLVqgshOQqgiEK
cbRxbGJ7iifzXwVQ/AHMCQ86dZJS5aTKpcdZqaborCZhM3GtTSdfcH5giV/vzHca
13FSEL7SaHoj6mfOm7MGvYBGC5IsgU3JzKcpTK9n7PI5BT5NTjXKphvci9VJoSo=
=ppON
-END PGP SIGNATURE-

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net