From lurker-index@localhost Fri Sep 23 16:26:15 2016 Return-Path: Received: from lin16.mojsite.com (178.218.164.164:993) by g0n.xdwgrp with IMAP4-SSL; 23 Sep 2016 14:26:15 -0000 Envelope-to: miro.rovis@croatiafidelis.hr Delivery-date: Fri, 23 Sep 2016 16:25:24 +0200 Received: from shtjevan.gbnet.net ([194.70.142.36]:44979 helo=gbnet.net) by lin16.mojsite.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.87) (envelope-from ) id 1bnRPj-0005xJ-FH for miro.rovis@croatiafidelis.hr; Fri, 23 Sep 2016 16:25:19 +0200 Received: (qmail 1887 invoked by uid 611); 23 Sep 2016 14:21:43 -0000 Received: (qmail 1792 invoked from network); 23 Sep 2016 14:20:37 -0000 Received: from davin.gbnet.net (194.70.142.37) by shtjevan.gbnet.net with ESMTPS (DHE-RSA-AES256-SHA encrypted); 23 Sep 2016 14:20:37 -0000 Received: (qmail 22684 invoked from network); 23 Sep 2016 14:02:36 -0000 Received: from mail-1.fido.net (84.246.192.5) by davin.gbnet.net with ESMTPS (DHE-RSA-AES256-SHA encrypted); 23 Sep 2016 14:02:36 -0000 Received: from alt1.smtp6.plusvps.com ([89.201.164.169]) by mail-1.fido.net with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA:256) (Exim 4.86) (envelope-from ) id 1bnR3g-0005C2-TV for mutt-users@mutt.org; Fri, 23 Sep 2016 15:02:35 +0100 Received: from lin16.mojsite.com ([178.218.164.164]) by smtp6.plusvps.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.84) (envelope-from ) id 1bnR3W-0000It-S8 for mutt-users@mutt.org; Fri, 23 Sep 2016 16:02:22 +0200 Received: from 78-0-197-250.adsl.net.t-com.hr ([78.0.197.250]:58204 helo=g0n.localdomain) by lin16.mojsite.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.87) (envelope-from ) id 1bnQaQ-0003Jn-9S for mutt-users@mutt.org; Fri, 23 Sep 2016 15:32:18 +0200 Received: by g0n.localdomain (Postfix, from userid 1000) id F373B43; Fri, 23 Sep 2016 15:32:34 +0200 (CEST) Date: Fri, 23 Sep 2016 15:32:34 +0200 From: Miroslav Rovis To: mutt-users@mutt.org Subject: how to verify emails from web Message-ID: <20160923133234.GA9244@g0n.xdwgrp> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="ew6BAiZeqk4r7MaW" Content-Disposition: inline User-Agent: Mutt/1.7.0 (2016-08-17) X-PlusHosting-MailScanner: Not scanned: please contact your Internet E-Mail Service Provider for details, Found to be clean, Found to be clean X-PlusHosting-MailScanner-SpamCheck: , not spam, SpamAssassin (not cached, score=-5.549, required 5, BAYES_00 -5.00, HEADER_FROM_DIFFERENT_DOMAINS 0.00, KAM_INFOUSMEBIZ 0.75, KAM_LAZY_DOMAIN_SECURITY 1.00, RCVD_IN_DNSWL_MED -2.30) X-Spam-Status: No, No, No X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - lin16.mojsite.com X-AntiAbuse: Original Domain - mutt.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - croatiafidelis.hr X-Get-Message-Sender-Via: lin16.mojsite.com: authenticated_id: miro.rovis@croatiafidelis.hr X-Authenticated-Sender: lin16.mojsite.com: miro.rovis@croatiafidelis.hr X-Filter-ID: s0sct1PQhAABKnZB5plbIR2SJy4mPedjCjbCVmstzVxwmVN+qmOsqPA4awzKV+nfEy9+6i+HVSod DWEH1Oag5P0gpBbsmKo2xFYd4cLbfj1iLS35izL9ptKuULkIwwsu0z6bhalFEM/pjPCQA+BAlhiu puYN4Qy2L1XEaWvIuJjm/fi5kVpkU5Ceh4R9F6f2uBlCLpm1Pr2bG+h1x1mo3K57NCqrty1cqlju QDasyN8qjvq73PMAhdUfp4+wkMSn6kZnf3TpIFizM2VWpQX5/OvgAXLsTT2MQ2GAZLBD8R0mF6Xr rlA8xf2XLpsHrwEi31/E3ahF5MMcDI7KdpjQKUa6LXlbC6o54S6xX5BWjHH2v+CMVzdZQq2fx/Ly 9c6buoF1YHweasy9+/Ad3i3xbnHp5g6R1aYY+wGBaPaqXko0bRdiIM9FFlfh4Bu9E5Fc/S+IhDi6 doUA+LP80CszFbp0CqbVpZvUxoRsAYHyvN0JUHYLB2G4EfN9ghPY2O2e7MDucDbUR8T3zSUCw28D SwEiRQv+PVjjwa+Z5RFCOMQjOhMNVAra/0V5sXWv+kpj4iXwjlL8lh+/xwVCxffWBA== X-Report-Abuse-To: spam@master.fido.net X-FidoGuard-Class: ham X-FidoGuard-Evidence: Combined (0.15) X-Recommended-Action: accept List-Post: List-Unsubscribe: send mail to majordomo@mutt.org, body only "unsubscribe mutt-users" Precedence: bulk Sender: owner-mutt-users@mutt.org X-PlusHosting-MailScanner-Information: Please contact the ISP for more information X-PlusHosting-MailScanner-ID: 1bnRPj-0005xJ-FH X-PlusHosting-MailScanner-From: owner-mutt-users-m24789@mutt.org X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= --ew6BAiZeqk4r7MaW Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable This is an explanation such that less advanced users can follow, if they are, like I was, eager to learn how to verify emails from web. ( Just if you see any sigs when you follow below, do the: gpg --recv-key XXXXXXXX=20 ) If you've been subscribed to Muut, you can follow this. Go to you mutt maildir. Do not open any messages. Hit '/' . You're in the command track in bottom. And now type (or paste this): =3Dh 20160921191202.GB18462 and hit Enter. The first find is the message that Claus Assmann used as example. (We only need the message where that number is part of Message-ID string, not where = it is part of In-Reply-To or References string.) Enter to open the message. It shows (to me and others) as having BAD signature. Notice how it turns to be for you. I have maildir, and if I would do the below, it would create a small maildir folder. So I first have to do: touch ClausAssmann.eml (I named it after the poster of the proof-of-concept non-verbose little tar archive at: http://marc.info/?l=3Dmutt-users&m=3D147448664132307&w=3D2 but for clarity I'll attach the same file here as ClausAssmann.tar, because= I can thank Claus (and Ian Zimmermann in this other email http://marc.info/?l=3Dmutt-users&m=3D147432705018043&w=3D2 ) that I now know myself how to verify mails from web. And I want to share it with less advanced than I am. Untar that file ClausAssmann.tar. The result must be: $ ls -l ClausAssmann.d total 8 -rw------- 1 miro miro 1422 2016-09-21 21:31 m4 -rw------- 1 miro miro 824 2016-09-21 21:31 m4.sig $ ) With the mail we just found opened in Mutt, type: C and save it to (the touched) ClausAssmann.eml . Now you can run this command: grep -A80 'Content-Type: text\/plain; charset=3Dutf-8' ClausAssmann.eml \ | head -36 > ClausAssmann.eml.1 You're close to verifing that email. But not there yet, as I purposefully l= eft the incriminating header (culprit my_hdr of Mutt being buggy as Claus Assma= nn stated in this mail: http://marc.info/?l=3Dmutt-users&m=3D147458978829311&w=3D2 ) If you now view the diff of the two files with, they're entirely different. But if you view them with vimdiff there's only the X-Clacks-Overhead line t= he difference... Rerun the slightly modified command: grep -A80 'Content-Type: text\/plain; charset=3Dutf-8' ClausAssmann.eml \ | grep -v 'X-Clacks-Overhead' \ | head -35 > ClausAssmann.eml.2 Now still entirely different with diff, and completely same with vimdiff. Because it's the end of line is the difference! Solely! I can convert, the one that I saved, with Vim: vi ClausAssmann.eml.2 :se ff=3Ddos :wq Now I can verify that email, either way, because both the incomplete parts = of the raw email (the part that PGP verifies) are exactly the same: $ ls -l ClausAssmann.eml.2 ClausAssmann.d/m4 -rw------- 1 miro miro 1422 2016-09-21 21:31 ClausAssmann.d/m4 -rw-r--r-- 1 miro miro 1422 2016-09-23 15:00 ClausAssmann.eml.2 $ sha256sum ClausAssmann.eml.2 ClausAssmann.d/m4 f86f0c710b7b7feaaca11511e66c1335b35bb7c8e18c47208702fb603c393c02 ClausAssm= ann.eml.2 f86f0c710b7b7feaaca11511e66c1335b35bb7c8e18c47208702fb603c393c02 ClausAssm= ann.d/m4 $ Any of these two verify correctly: gpg --verify ClausAssmann.d/m4.sig ClausAssmann.eml.2 gpg --verify ClausAssmann.d/m4.sig ClausAssmann.d/m4 with signature good. --- Anyway, folks, it really would be time for Lurker (if only I didn't work at turtle speed... Worse, I have been sick now for almost two days, still recovering.)... Whatever the interface of marc.info, it is pretty poorly creating and following the threads. The emails that I needed to post the addresses of, would be a few seconds and not minutes to find (like I spent searhing to find the links for this email), if the Mutt archive was deployed with Lurker... Only saying. And wishing.=20 Allow errata after I post this. Regards! --=20 Miroslav Rovis Zagreb, Croatia http://www.CroatiaFidelis.hr --ew6BAiZeqk4r7MaW Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJX5S7yAAoJEOqYhIhPuvCuujEQAJSlucdGHuSMeK1Wmp+KeMYf 9RMRChzO9XAUOVAgPDpbwdcmrFUR2r+SlTVyemOQS/mg5MTUCHr6/vB7R/axiKr/ pAS2Zi6u0o5Qya3hlJXJhL5fzCsf1B7tCDOWqfzMNj8M0viS8G8pEo/i11Acaw4E o7aG1413Yx3eJm8tJLzzp/xIg7zbWrR1PD8s71RHAO/o05coolfMrn8zgnm+bRqk rNFurA2stU7ZNaP+RRrXU7QQPqfO0TWFN49nyvyx+/8V44nCRcb5Tk3A7V4/V390 /YK2Vq0XpOixnG2DMO/rpzzG8D1ZKGG26CT53Esgg2nDhjFWQq2mv1VLjfiNEomX E2DdSeWLYAvmmdaUKWRsk6wXyoxgWY0/Vy93hIYOJsp6H6ygBc4S6T4RTWoD7PW7 selltR6vLwKfLP/ioGNxJGFwGlJDzxyha153SBoeCGZepe5rx/g2ORcEYYupUB96 gEiRl6A5BtePyWuPt6ZtVuzOCCWudMzbrZa9e7XeImGSFv02lXrNGwHtGTPCMjmd hG2yKR8krlAzov7H4j8NuCoQqgr74Ym5uGIxk9/6K8mTisG7K51I8gt23yA/wBdf 4U6+tPvUgSj71X2oh5cNZDDNl6pCRbL5ziIcMOdU1vLyQjmDWGVGRmc7KJwU7TUE 246aYqTJ2XrkuGT7XmDA =xJxh -----END PGP SIGNATURE----- --ew6BAiZeqk4r7MaW--