Page MenuHome GnuPG

[GPGOL] PGP Partioned Format Violation, dont use detached signature for PGPExch.htm.asc
Closed, ResolvedPublic

Description

GPGOL tries to be compatible with PGP Desktop. It uses the PGPExch.htm file,
that the PGP Desktop Client knows, to show the formated content from this
attachment.

However, GPGOL makes 2 mistakes - making it unable to work:

GPGOL created a detached signature for this format i.e. it creates

PGPExch.htm
PGPExch.htm.asc (the detached signature)

PGP Desktop and other applications cannot cope with this, they only expect one
file - PGPExch.htm.asc. What happends is, for example in PGP 8.0 - that a dialog
popups with an internal error because it does not expect a detached signature.

This error alone would not cause the issue, there is another issue - you are
using *.asc extension for a DETACHED signature. All clients only use *.sig
binary encoded detached signatures, never armored ascii detached signatures.

Please review how to implement the pgp partioned format correctly here:

http://www.imc.org/ietf-openpgp/mail-archive/msg09389.html

Event Timeline

gpgol does not use the partioned format - it implements PGP/MIME. If you are
talking about the old 0.9 versions - they are not any longer maintained. Sorry.

BTW, HTML mails evil.

werner claimed this task.
werner added a project: Not A Bug.

talking about the old 0.9 versions - they are not any longer maintained. Sorry.

thats cool, but doesnt help the fact that these versions are out, violating the rfcs

BTW, HTML mails evil.

yes, im just reporting a bug

btw: violating rfcs is even more evil

There is no RFC. Hal merely posted a notice how PGP implements an Outlook
kludge. OTOH, PGP/MIME is a logn standing standard (rfc3156).