> The problem stems from PGP clear-signing a UTF-8 message. After > charset convertion to UTF-8, the BOM and text message is clear signed, > then the recepient mail client removes the BOM for screen display > (which it correct, as it should not display it). Copying this text to > clipboard & verifying this message then fails. (The BOM is no longer > there) This fails with both OE & Thunderbird.
There is very important WHAT exacty is signed. You must verify exactly same content what will be signed. For example, S/MIME signing encoded MIME part. You create and encode MIME part and you got content for signing. For verify you are veryfyong encoded MIME part as is. If signature is OK, then you can decode original content. For this case BOM not causing any problem. You can sign text or any binary content, because you are signing encoded MIME part. I not know how PGP working with signatures. I not understand how you can verify signature by clipboard. How you can have in clipboard exactly same content what will be signed? You can have in clipboard only some representation of signed datas, it can be different from signed content. For example, unicode text can be displayed in some ANSI windows control - in clipboard you have totally another binary datas then original unicode signed datas... :-O > I still think that if the Content-Type specifies a unicode charset, the > BOM is not necessary. I haven't seen any mail client so far which > includes the BOM in unicode messages... In first versions Synapse not including BOm at all. But because Outlook cannot recognize some sort of unicode content (even it have content-type!), I must add BOM. With BOM all is fine in all mail clients. Be more carefull, I see BOM i lot of unicode messages what I got. It is look like you not have problem with Synapse, but with very bad concept of PGP. I am not using PGP at all, because it have lot of technical stupidities, and this seems to be next one. :-/ If you need to verify text what you are grabbing to clipboard from screen, then you must sign content in exactly same situation - before you are encode it by Synapse to mail message.But I still not understand how PGP can verify signature by clipboard, because you can have content in any different form/encoding then signed original. :-O -- Lukas Gebauer. E-mail: [EMAIL PROTECTED] http://synapse.ararat.cz/ - Ararat Synapse - TCP/IP Lib. ------------------------------------------------------- All the advantages of Linux Managed Hosting--Without the Cost and Risk! Fully trained technicians. The highest number of Red Hat certifications in the hosting industry. Fanatical Support. Click to learn more http://sel.as-us.falkag.net/sel?cmd=lnk&kid=107521&bid=248729&dat=121642 _______________________________________________ synalist-public mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/synalist-public
