Re: Stripping attachments [DNS Protection]
Re: Stripping attachments [DNS Protection]
- Subject: Re: Stripping attachments [DNS Protection]
- From: email@hidden (David E. Gelhar)
- Date: 09 Dec 2008 08:00:38 -0500
--- email@hidden wrote:
, there's something wrong with your mail client
That's not it
or the listserv.)
That's it !
--- end of quote ---
I think you'll find the results depend on the client you use to read the message.
Signed messages sent to macnetworkprog arrive looking like:
Content-Type: multipart/mixed
Content-Type: multipart/signed; micalg=sha1; protocol="application/pkcs7-signature"
[ ... actual content & signature ... ]
Content-Type: text/plain
Do not post admin requests to the list. They will be ignored.
[...etc...]
In other words, the signature is applied not to the entire message, but to a single
MIME part corresponding to the content as submitted. The listserv footer is outside
the signature, as it of course has to be.
When I view a message like this in Mail.app, it shows the message as "signed",
but Thunderbird just displays the .p7s file as an attachment.
It's a non-trivial question as to how a mail client should handle a multi-part
message that's only partially signed. What Mail is doing is (for the most part)
helpful, but I do worry that there's no clear differentiation in the user interface
between the parts of the message that are signed and the parts that are not: I
can take that signed message from Jens, put whatever text I want in place of the
listserv footer, and it will still show up as "Signed by Jens Alfke" according
to Mail.
I don't see what else the listserv could do to handle this better, short of discarding
the signature altogether, which seems like a Bad Idea.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden