From lurker-index@localhost Fri Sep 23 15:11:56 2016 Return-Path: Received: from lin16.mojsite.com (178.218.164.164:993) by g0n.xdwgrp with IMAP4-SSL; 23 Sep 2016 13:11:56 -0000 Envelope-to: miro.rovis@croatiafidelis.hr Delivery-date: Fri, 23 Sep 2016 11:09:27 +0200 Received: from shtjevan.gbnet.net ([194.70.142.36]:33081 helo=gbnet.net) by lin16.mojsite.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.87) (envelope-from ) id 1bnMTx-0008Jf-N1 for miro.rovis@croatiafidelis.hr; Fri, 23 Sep 2016 11:09:21 +0200 Received: (qmail 28632 invoked by uid 611); 23 Sep 2016 09:06:17 -0000 Received: (qmail 28549 invoked from network); 23 Sep 2016 09:05:10 -0000 Received: from mail-1.fido.net (84.246.192.5) by shtjevan.gbnet.net with ESMTPS (DHE-RSA-AES256-SHA encrypted); 23 Sep 2016 09:05:10 -0000 Received: from seditious.adversary.org ([59.167.194.34] helo=nefarious.adversary.org) by mail-1.fido.net with esmtp (Exim 4.86) (envelope-from ) id 1bnMPs-0006F0-7i for mutt-users@mutt.org; Fri, 23 Sep 2016 10:05:10 +0100 Received: by nefarious.adversary.org (Postfix, from userid 501) id 8918C6527A14; Fri, 23 Sep 2016 19:05:04 +1000 (AEST) Date: Fri, 23 Sep 2016 19:05:04 +1000 From: Ben McGinnes To: mutt-users@mutt.org Subject: Re: [SPAM?] Re: OT: Miro's PGP signature [Was: urlview not listing the links right] Message-ID: <20160923090504.GC57075@adversary.org> References: <20160917232509.GK31239@g0n.xdwgrp> <20160918051503.GO31239@g0n.xdwgrp> <20160918061803.4077.03047CF5@matica.foolinux.mooo.com> <20160918064328.ts37vzdr6ehds6ln@lovelace.schplaf> <20160921104046.GD1147@adversary.org> <20160921213236.GD24944@dragontoe.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="ieNMXl1Fr3cevapt" Content-Disposition: inline In-Reply-To: <20160921213236.GD24944@dragontoe.org> User-Agent: Mutt/1.7.0 (2016-08-17) Received-SPF: pass (mail-1.fido.net: domain of adversary.org designates 59.167.194.34 as permitted sender) client-ip=59.167.194.34; envelope-from=ben@adversary.org; helo=nefarious.adversary.org; X-SPF-Result: mail-1.fido.net: domain of adversary.org designates 59.167.194.34 as permitted sender X-Filter-ID: s0sct1PQhAABKnZB5plbIdZIQllgAaFZah5UYvbbt+NaLI2rqoACMhULk4u6nCydNMAlA+Rmt2HG gqbkHADIyo411Ms0E5bt7/al3iJQV32H8OIuapHbdulippicZyXgHrVJfFkyKr2eCIJhDKSPnytE LhwKoSU6wmK17fLgw12micHWY+si53Ro7tHTuF287QsnEG/a/l5scf1Fs/ttQY70YXiXmuAoTAlk mpHwGIuHCph+fitvvxKi4OfXWnJ/UV8ShebT8U8Xw9HTDfreWYSQ/SLs0hfSR76a7WJtWBBGJWOt eWaoXFvbbwb3Cge72jFzs5Bu7E1Y/gY6WS7godtLi1QVVyztjxnWvpW5S+MuxQywq7iW+3N2ZKz4 kxaY9muV1lBR0blKP/p9h87jdzl0E08wSgZouacoB2x/GGSQAEErZ6BfD4/W227/VzHg+l5ZnOoq S85+o/HqXSJ34L1TzOfBFM7Er/7n1KQSkHuxOWnp1UaerA3HM1DGPLa9aseSo+eTNO7G/rUMG+AW yn7GSOGo5AhqxuJQMN+Ull1jlvMIu+sRZOzqnbOGnKMP X-Report-Abuse-To: spam@master.fido.net Authentication-Results: fido.net; spf=pass smtp.mailfrom=ben@adversary.org X-FidoGuard-Class: ham X-FidoGuard-Evidence: Combined (0.07) X-Recommended-Action: accept List-Post: List-Unsubscribe: send mail to majordomo@mutt.org, body only "unsubscribe mutt-users" Precedence: bulk Sender: owner-mutt-users@mutt.org X-PlusHosting-MailScanner-Information: Please contact the ISP for more information X-PlusHosting-MailScanner-ID: 1bnMTx-0008Jf-N1 X-PlusHosting-MailScanner: Found to be clean X-PlusHosting-MailScanner-SpamCheck: not spam, SpamAssassin (not cached, score=-6.299, required 5, autolearn=not spam, BAYES_00 -5.00, HEADER_FROM_DIFFERENT_DOMAINS 0.00, KAM_LAZY_DOMAIN_SECURITY 1.00, RCVD_IN_DNSWL_MED -2.30) X-PlusHosting-MailScanner-From: owner-mutt-users-m24786@mutt.org X-Spam-Status: No X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= --ieNMXl1Fr3cevapt Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Sep 21, 2016 at 04:32:36PM -0500, Derek Martin wrote: >=20 > FWIW, for me, every message in this thread that carried a signature > verified correctly. I'm currently running mutt-1.5.21 with > gpg-1.4.5. I should really update those... =3D8^) Yes, especially GPG. There's nothing wrong with stiking with classic (except for when people use elliptic curve keys), but there have been a lot of improvements since 1.4.5, including a bunch of security fixes. The most recent update was to address a vulnerability quite recently, but just compiling 1.4.21 should be enough to keep everything nice and safe. Though I don't use it by default, I do always keep a copy of 1.4 active as a fallback (and for dealing with old archives when necessary). Then I just moved the default directory for that to a version specific directory, made a second one for 2.x and wrote a couple of shell wrappers to call the different versions correctly (with ~/.gnupg sym linked to ~/.gnupg2). This is fine on any Linux, BSD, OS X or other POSIX system ... I'm going to assume Windows users are less likely to be using Mutt and if that's wrong then they already know how to "translate" this into their world. bash-4.3$ gpg1 --version gpg (GnuPG) 1.4.21 Copyright (C) 2015 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Home: /Users/ben/.gnupg1 Supported algorithms: Pubkey: RSA, RSA-E, RSA-S, ELG-E, DSA Cipher: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH, CAMELLIA128, CAMELLIA192, CAMELLIA256 Hash: MD5, SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224 Compression: Uncompressed, ZIP, ZLIB, BZIP2 bash-4.3$ gpg2 --version gpg (GnuPG) 2.1.15 libgcrypt 1.7.3 Copyright (C) 2016 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Home: /Users/ben/.gnupg2 Supported algorithms: Pubkey: RSA, ELG, DSA, ECDH, ECDSA, EDDSA Cipher: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH, CAMELLIA128, CAMELLIA192, CAMELLIA256 Hash: SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224 Compression: Uncompressed, ZIP, ZLIB, BZIP2 bash-4.3$=20 Regards, Ben --ieNMXl1Fr3cevapt Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQGcBAABCgAGBQJX5PBAAAoJEH/y03E1x1U8MKMMAI6bNf2zKSLJCH63ydC7KP6X 8D4fdC9RT7nLAukRIVVWJnC1GoV4gSSyC6BMzI/+XXFNTuAh/DShhZPo2xBds6Zd eOQnWUN+8nnq+ibbrxljq5nh+Upl6CbnlINc/L+Cv8O+kmlD6N2nbs2sZRT26AZo 6LZx5sFP2XmTcbPPGSy16a1D5f9GMXEVF68VKZtyB04VLkE+E+31L/rOJJJx3diA hZJOicaoIbYj9PKHcCz/jA8l8LeeUMrAriX/wbMgVIE/+wbkVkovrmOw7yoo07ql LfrxNlq/rLLqe9RDROcgdVFq2hqMlX711rti25Pnpt4Za5PMWvKglwMeD4MxuUqu P+X9bJIia+9CcTmVp5ElVSWF2NX9lJqVAcbRE5GmpU9fAcsTqNST0319VOuxv1P7 CWHbH5Im8Vk7RTKUGsQ15rk4ZEllOzg8r1DY/LCJ9GcZ/sQ6FZ+cVgaj0ZrBUqQw tAunsV+uVmfPxzVyEjPJI47grlncgH3+q9OfIBLwhw== =UUIF -----END PGP SIGNATURE----- --ieNMXl1Fr3cevapt--