Version: 1.5.2 (using KDE 3.1.2) Installed from: (testing/unstable) Compiler: gcc version 3.3 (Debian) OS: Linux (i686) release 2.4.20-3-k7 PGP for windows seems to sometimes put signatures or encrypted mail in a HTML email as text. KMail doesn't detect this as a PGP signed or encrypted email, so it doens't process it. Could you please change it so that it does detect this? Thanks, David
Could you attach to this bug report a message signed in HTML?
Here is an example. Thanks, Subject: Order Date: Wed, 25 Jun 2003 15:03:01 +1000 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_013E_01C33B2A.DF5F3610" X-Priority: 1 X-MSMail-Priority: High X-Mailer: Microsoft Outlook Express 6.00.2800.1158 Disposition-Notification-To: "Information Systems" <me@me> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 X-UIDL: Yi4"!4`F!!jFU!!;Qi"! Status: R X-Spam-Status: No, hits=4.2 required=5.0 tests=HTML_10_20,HTML_MESSAGE,UPPERCASE_25_50,X_PRIORITY_HIGH version=2.53 X-Spam-Level: **** X-Spam-Checker-Version: SpamAssassin 2.53 (1.174.2.15-2003-03-30-exp) X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState: This is a multi-part message in MIME format. ------=_NextPart_000_013E_01C33B2A.DF5F3610 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Foo bar -----BEGIN PGP PUBLIC KEY BLOCK----- mQGiBD7AhRERBADY0ny2uLzQedFH4guzE8E57zL+rM5V1AV0XIBRcy4yXiGqRbpL 4RO+BfFhk6zmgxUndcNQBM46+ZB/PysUGXfKd6QETu6GnnmQUr2IOoeyhmYGjLLD 0lbTffNAvN5M8euQI7/XEu6NhphqyolG/kHkRq0UTQlffhFy0q/CqDOBQwCg/0pP qm9HDKDzEGdK6T7YRTUDq8EEAMHUppVyy2ohVlQSDGh42t3WN5ZJbQGKsg7TqW8p vUbBzMbKU2JbMu/AHB2r9+XH3/ZK/zhf/vi5gayc449Wot6MzLPKvCV00yLgc7rr pih1aOK3oVKQCmeYu2VTCuLZxH71bZ81AQpbGsR8om8xeRRxRd4Hx0LbmEz+tWiv h/B1BACSjKDG6/0EBroSIZMjEEY6ZtcO2XQKphl4PMVXIm3nL+9Sto/hHbXFmilK CLzjWXghaZvU/DQYh2BnjXTPt4eKXFTTeL2ktXLo/mDaQaqnxdsj6sTWFK3OL4OE L3FciOhCF6V5LaJTHqsZXPhJfXzu4IyvCEkM89jSYe1c4rSE/rQsRHVjbyBNYWdp YyBBdXN0cmFsaWEgPGluZm9AZHVjb21hZ2ljLmNvbS5hdT6JAFcEEBECABcFAj7A hREHCwkIBwMCCgIZAQUbAwAAAAAKCRAsKdKo7g0ysnW0AJ48JkhiJhBrrTEA3mN+ shrHrBJxLACfVNMmvqysJ0praCIW7Slhid/j4/+5BA0EPsCFERAQAPkYoH5aBmF6 Q5CV3AVsh4bsYezNRR8O2OCjecbJ3HoLrOQ/40aUtjBKU9d8AhZIgLUV5SmZqZ8H dNP/46HFliBOmGW42A3uEF2rthccUdhQyiJXQym+lehWKzh4XAvb+ExN1eOqRsz7 zhfoKp0UYeOEqU/Rg4Soebbvj6dDRgjGzB13VyQ4SuLE8OiOE2eXTpITYfbb6yUO F/32mPfIfHmwch04dfv2wXPEgxEmK0Ngw+Po1gr9oSgmC66prrNlD6IAUwGgfNar oxIe+g8qzh90hE/K8xfzpEDp19J3tkItAjbBJstoXp18mAkKjX4t7eRdefXUkk+b GI78KqdLfDL2Qle3CH8IF3KiutapQvMF6PlTETlPtvFuuUs4INoBp1ajFOmPQFXz 0AfGy0OplK33TGSGSfgMg71l6RfUodNQ+PVZX9x2Uk89PY3bzpnhV5JZzf24rnRP xfx2vIPFRzBhznzJZv8V+bv9kV7HAarTW56NoKVyOtQa8L9GAFgr5fSI/VhOSdvN ILSd5JEHNmszbDgNRR0PfIizHHxbLY7288kjwEPwpVsYjY67VYy4XTjTNP18F1dD ox0YbN4zISy1Kv884bEpQBgRjXyEpwpy1obEAxnIByl6ypUM2Zafq9AKUJsCRtMI PWakXUGfnHy9iUsiGSa6q6Jew1XrPdYXAAICEADu/ItJQDZLrLADR3PmPqkit4OE 4eIGun48BH22ZBgTw3DZa6jtsCcPId8xRDYtmVDiRt/brHraws+dvdBp3ULnWGnl VD5oht3+CvrPVKbQ8sMpONNXtz/am+2XZWC1QTwBVTjduGSbmqTI4q9pQxA7WNWW acAVAiQnctk62e3ZqAMFkQHHWlvjF14e7zo238uoYnV7Ug/tOxu1z7HPABjpHiCO dAnHJNbsV7xZPWOf04mongGvsnv3Ye46rZZrVcw9OW89mqnERqv/wiDT0Sbb5wuD nI9M+VR6xNELq45K4Zovkay6Nc9Zvr8koXsYN82C06zAwilpkZnyvhIVeMF1EZX+ Yc2n3pmzHPNRyS9lEPWKODm7P/ETczApHQIi1gYOBzHll1scLWm3P+w/SF0PGJaV PZ2FU2z+2SoUg6LBbzzoH9g8bXxAC0mYG+p/xJX9joFHi+A8nHjLv8KvQqznMWqX 3iPutNkPzNqCPRmClkKb9D/44tISCa5BZ3BmkFc1xlqt/lNzgtCg+3qql+dd/2eK ccTRCFF5ZT4Z46fz7ci7p5342MG1RD/Rm4iGM///YI4ViuwO14Dlzh37wVBEkpAu gAWGhMftKkEV3w6pJyr8S6RZ3vZVf4AgAVFqOhmuZ1vmNhFOT0UPif1Ab0sC1i6A 0WUGlr49l1j7ZPXgq4kATAQYEQIADAUCPsCFEQUbDAAAAAAKCRAsKdKo7g0ysjgg AJ91BrvLQUoD3iKxBZGnXItdWnZxLgCgs9TMjHXgA7ZuUp1tKwEuxENeflY=3D =3D+t85 -----END PGP PUBLIC KEY BLOCK----- ------=_NextPart_000_013E_01C33B2A.DF5F3610 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> <META content=3D"MSHTML 6.00.2800.1170" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV><FONT face=3DArial size=3D2>Dave,</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Foo</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Bar</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D1>-----BEGIN PGP PUBLIC KEY = BLOCK-----</FONT></DIV> <DIV><FONT size=3D1></FONT> </DIV> <DIV><FONT face=3DArial=20 size=3D1>mQGiBD7AhRERBADY0ny2uLzQedFH4guzE8E57zL+rM5V1AV0XIBRcy4yXiGqRbpL= <BR>4RO+BfFhk6zmgxUndcNQBM46+ZB/PysUGXfKd6QETu6GnnmQUr2IOoeyhmYGjLLD<BR>0= lbTffNAvN5M8euQI7/XEu6NhphqyolG/kHkRq0UTQlffhFy0q/CqDOBQwCg/0pP<BR>qm9HDK= DzEGdK6T7YRTUDq8EEAMHUppVyy2ohVlQSDGh42t3WN5ZJbQGKsg7TqW8p<BR>vUbBzMbKU2J= bMu/AHB2r9+XH3/ZK/zhf/vi5gayc449Wot6MzLPKvCV00yLgc7rr<BR>pih1aOK3oVKQCmeY= u2VTCuLZxH71bZ81AQpbGsR8om8xeRRxRd4Hx0LbmEz+tWiv<BR>h/B1BACSjKDG6/0EBroSI= ZMjEEY6ZtcO2XQKphl4PMVXIm3nL+9Sto/hHbXFmilK<BR>CLzjWXghaZvU/DQYh2BnjXTPt4= eKXFTTeL2ktXLo/mDaQaqnxdsj6sTWFK3OL4OE<BR>L3FciOhCF6V5LaJTHqsZXPhJfXzu4Iy= vCEkM89jSYe1c4rSE/rQsRHVjbyBNYWdp<BR>YyBBdXN0cmFsaWEgPGluZm9AZHVjb21hZ2lj= LmNvbS5hdT6JAFcEEBECABcFAj7A<BR>hREHCwkIBwMCCgIZAQUbAwAAAAAKCRAsKdKo7g0ys= nW0AJ48JkhiJhBrrTEA3mN+<BR>shrHrBJxLACfVNMmvqysJ0praCIW7Slhid/j4/+5BA0EPs= CFERAQAPkYoH5aBmF6<BR>Q5CV3AVsh4bsYezNRR8O2OCjecbJ3HoLrOQ/40aUtjBKU9d8AhZ= IgLUV5SmZqZ8H<BR>dNP/46HFliBOmGW42A3uEF2rthccUdhQyiJXQym+lehWKzh4XAvb+ExN= 1eOqRsz7<BR>zhfoKp0UYeOEqU/Rg4Soebbvj6dDRgjGzB13VyQ4SuLE8OiOE2eXTpITYfbb6= yUO<BR>F/32mPfIfHmwch04dfv2wXPEgxEmK0Ngw+Po1gr9oSgmC66prrNlD6IAUwGgfNar<B= R>oxIe+g8qzh90hE/K8xfzpEDp19J3tkItAjbBJstoXp18mAkKjX4t7eRdefXUkk+b<BR>GI7= 8KqdLfDL2Qle3CH8IF3KiutapQvMF6PlTETlPtvFuuUs4INoBp1ajFOmPQFXz<BR>0AfGy0Op= lK33TGSGSfgMg71l6RfUodNQ+PVZX9x2Uk89PY3bzpnhV5JZzf24rnRP<BR>xfx2vIPFRzBhz= nzJZv8V+bv9kV7HAarTW56NoKVyOtQa8L9GAFgr5fSI/VhOSdvN<BR>ILSd5JEHNmszbDgNRR= 0PfIizHHxbLY7288kjwEPwpVsYjY67VYy4XTjTNP18F1dD<BR>ox0YbN4zISy1Kv884bEpQBg= RjXyEpwpy1obEAxnIByl6ypUM2Zafq9AKUJsCRtMI<BR>PWakXUGfnHy9iUsiGSa6q6Jew1Xr= PdYXAAICEADu/ItJQDZLrLADR3PmPqkit4OE<BR>4eIGun48BH22ZBgTw3DZa6jtsCcPId8xR= DYtmVDiRt/brHraws+dvdBp3ULnWGnl<BR>VD5oht3+CvrPVKbQ8sMpONNXtz/am+2XZWC1QT= wBVTjduGSbmqTI4q9pQxA7WNWW<BR>acAVAiQnctk62e3ZqAMFkQHHWlvjF14e7zo238uoYnV= 7Ug/tOxu1z7HPABjpHiCO<BR>dAnHJNbsV7xZPWOf04mongGvsnv3Ye46rZZrVcw9OW89mqnE= Rqv/wiDT0Sbb5wuD<BR>nI9M+VR6xNELq45K4Zovkay6Nc9Zvr8koXsYN82C06zAwilpkZnyv= hIVeMF1EZX+<BR>Yc2n3pmzHPNRyS9lEPWKODm7P/ETczApHQIi1gYOBzHll1scLWm3P+w/SF= 0PGJaV<BR>PZ2FU2z+2SoUg6LBbzzoH9g8bXxAC0mYG+p/xJX9joFHi+A8nHjLv8KvQqznMWq= X<BR>3iPutNkPzNqCPRmClkKb9D/44tISCa5BZ3BmkFc1xlqt/lNzgtCg+3qql+dd/2eK<BR>= ccTRCFF5ZT4Z46fz7ci7p5342MG1RD/Rm4iGM///YI4ViuwO14Dlzh37wVBEkpAu<BR>gAWGh= MftKkEV3w6pJyr8S6RZ3vZVf4AgAVFqOhmuZ1vmNhFOT0UPif1Ab0sC1i6A<BR>0WUGlr49l1= j7ZPXgq4kATAQYEQIADAUCPsCFEQUbDAAAAAAKCRAsKdKo7g0ysjgg<BR>AJ91BrvLQUoD3iK= xBZGnXItdWnZxLgCgs9TMjHXgA7ZuUp1tKwEuxENeflY=3D<BR>=3D+t85<BR>-----END=20 PGP PUBLIC KEY BLOCK-----<BR></FONT></DIV></BODY></HTML> ------=_NextPart_000_013E_01C33B2A.DF5F3610--
That's not a valid signature. It's not supposed to work. You need S/MIME to sign such messages. KMail supports it already.
Sorry, but making KMail detect clearsigned text blocks which have been obscured with HTML tags is out of question (too complicated, too slow). Clearsigning was only invented as workaround for signing plain text (!) with non-MIME-capable email clients. MIME-capable email clients should use detached signatures for plain text and must use detached signatures for everything else (including HTML text). If you switch off HTML rendering then such messages (which also have a plain/text message part) will be correctly verified. But not the message you provided because this message isn't a clearsigned message. It's an unsigned message with a public key block. Maybe that's the real problem here.
Subject: Re: pgp signatures in html mail don't work > ------- Additional Comments From kloecker@kde.org 2003-06-30 15:03 ------- > Sorry, but making KMail detect clearsigned text blocks which have been > obscured with HTML tags is out of question (too complicated, too slow). > Clearsigning was only invented as workaround for signing plain text (!) > with non-MIME-capable email clients. MIME-capable email clients should use > detached signatures for plain text and must use detached signatures for > everything else (including HTML text). > > If you switch off HTML rendering then such messages (which also have a > plain/text message part) will be correctly verified. But not the message > you provided because this message isn't a clearsigned message. It's an > unsigned message with a public key block. Maybe that's the real problem > here. Okay thanks. May I just go on the record in saying that I think personally that if there is data a program should try and fix it if at all possible. But that's just my view. Thanks for the great work! David