Package: emacs22-el
Version: 22.1+1-2
Severity: normal

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


When i use mml-secure-message-sign-pgpmime (C-c C-m s p), in an
up-to-date lenny emacs22 installation, it invokes mml2015-pgg-sign to
sign the active message.

The resulting internal message part (the part that is signed, not the
signature) does not have a Content-Type: header, however.  You can see
an example of one such message here:

  http://marc.info/?l=openssh-unix-dev&m=119212056224122&q=raw

Note the lack of a Content-Type: header after the first --=-=-=
separator.  RFC 2045 seems to suggest that a Content-Type: header
should be present for every MIME message, in every part, though it
grants that a default assumption of text/plain is reasonable.  Why not
explicitly declare a Content-Type header before signing?

I noticed this particular issue because pipermail (mailman's archiving
tool) seems to ignore mime parts without an explicit Content-Type.
The message linked above shows up in its original mailman archive
without the message body:

  http://lists.mindrot.org/pipermail/openssh-unix-dev/2007-October/025812.html

While this blank message presentation is probably a bug in pipermail
(i'm following up with them about it [0]), it would be nice for
pgg-signed messages to include an explicit Content-Type (maybe just
text/plain?) for the body of the messages, to be a little more
"conservative in what you emit".

I've also heard (but not verified) a report from a friend that his
blackberry displays a blank message body when he looks at signed mails
from me.

I realize that the worst bugs here are most likely in other tools, but
it would be good if pgg could play nicer with them as well.

Thanks so much for maintaining these packages in debian!

       --dkg

[0] 
https://sourceforge.net/tracker/index.php?func=detail&aid=759841&group_id=103&atid=100103


- -- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing'), (200, 'unstable'), (101, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.22-2-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages emacs22-el depends on:
ii  emacs22-common                22.1+1-2   The GNU Emacs editor's shared, arc

emacs22-el recommends no packages.

- -- no debconf information

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
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=1MOR
-----END PGP SIGNATURE-----



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to