NNTP -> Web problem

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi, anyone know why Seamonkey mail add an extra - to my signature
when it post on the forum?

I don’t see it from seamonkey, only on the web forum


VampirD

Microsoft Windows is like air conditioning
Stops working when you open a window.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.15 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/

iEYEARECAAYFAkzAjYQACgkQJQ+0ABWtaVkT1QCcDEFEXKj07RZZJOk9jAerb8j/
1qsAoKTeLjBVr7Ya6XObiOMVO48/lua2
=2etH
-----END PGP SIGNATURE-----

VampirD wrote:
> Hi, anyone know why Seamonkey mail add an extra - to my signature
> when it post on the forum?
>
> I don’t see it from seamonkey, only on the web forum

it is common for nntp clients to mark the beginning of the sig line with:
–[space]


DenverD
When it comes to chocolate, resistance is futile.
CAVEAT: http://is.gd/bpoMD [posted via NNTP w/openSUSE 10.3]

Hi
I wonder if it your pgp signature that’s adding the extra -[space]
before --[space]?


Cheers Malcolm °¿° (Linux Counter #276890)
SUSE Linux Enterprise Desktop 11 (x86_64) Kernel 2.6.32.23-0.3-default
up 6:45, 2 users, load average: 0.01, 0.04, 0.02
GPU GeForce 8600 GTS Silent - Driver Version: 260.19.12

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

malcolmlewis wrote:
> - –
> VampirD
>
> Microsoft Windows is like air conditioning
> Stops working when you open a window.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.15 (GNU/Linux)
> Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkzAjYQACgkQJQ+0ABWtaVkT1QCcDEFEXKj07RZZJOk9jAerb8j/
> 1qsAoKTeLjBVr7Ya6XObiOMVO48/lua2
> =2etH
> -----END PGP SIGNATURE-----
> [/QUOTE]
> Hi
> I wonder if it your pgp signature that’s adding the extra -[space]
> before --[space]?

AH

see, Malcom you on the spot, with exactly right again…

i say because, i didn’t see "- – " because my thunderbird saw the
crypto sig and did some magic and only showed me "-- "

but, i could see what you saw, in your quoted passage…

i think i’ll try to sign this and see if i also get the extra!


DenverD
When it comes to chocolate, resistance is futile.
CAVEAT: http://is.gd/bpoMD [posted via NNTP w/openSUSE 10.3]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4-svn0 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/

iD8DBQFMwKShxdrMpCMIGa4RAq/HAJ9A1SCtUCfSYfOQGIcIF8EfAc6mnwCbBhYY
iMafTgIWEZoa6eNlhTx+LOM=
=VbNi
-----END PGP SIGNATURE-----

> Hi
> I wonder if it your pgp signature that’s adding the extra -[space]
> before --[space]?

AH

see, Malcom you on the spot, with exactly right again…

i say because, i didn’t see "- – " because my thunderbird saw the
crypto sig and did some magic and only showed me "-- "

but, i could see what you saw, in your quoted passage…

i think i’ll try to sign this and see if i also get the extra!


DenverD
When it comes to chocolate, resistance is futile.
CAVEAT: http://is.gd/bpoMD [posted via NNTP w/openSUSE 10.3]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4-svn0 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/

iD8DBQFMwKShxdrMpCMIGa4RAq/HAJ9A1SCtUCfSYfOQGIcIF8EfAc6mnwCbBhYY
iMafTgIWEZoa6eNlhTx+LOM=
=VbNi
-----END PGP SIGNATURE-----
[/QUOTE]
Hi DD
Yes, looks like pgp doing it…


Cheers Malcolm °¿° (Linux Counter #276890)
SUSE Linux Enterprise Desktop 11 (x86_64) Kernel 2.6.32.23-0.3-default
up 7:18, 2 users, load average: 0.10, 0.09, 0.02
GPU GeForce 8600 GTS Silent - Driver Version: 260.19.12

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

mmm… so do you know any way to correct this without disable gpg?


VampirD

Microsoft Windows is like air conditioning
Stops working when you open a window.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.15 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/

iEYEARECAAYFAkzFoswACgkQJQ+0ABWtaVk/3QCgtWGkqNaQxi+mQ/k/rP9ELzzo
dUkAnR+c+UR4BBf0jTg18/RN3h8Rh/Ml
=iZyZ
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

VampirD wrote:
> mmm… so do you know any way to correct this without disable gpg?

my guess is there is a bug in one of these:

    • the forum’s software
    • the http<->nntp gateway software

i say that because i don’t see a problem when i look at it in nntp
(without it going through the http<>nntp sweeper)


DenverD
When it comes to chocolate, resistance is futile.
CAVEAT: http://is.gd/bpoMD [posted via NNTP w/openSUSE 10.3]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4-svn0 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/

iD8DBQFMxbIPxdrMpCMIGa4RArF/AJ0cfPUG75vdGUVnqP+yA+096/okcgCcCbGR
mAjWfqeFDE/mgWQeDmaywec=
=fsRl
-----END PGP SIGNATURE-----

Hi DD
Can you do a post in alt.test?


Cheers Malcolm °¿° (Linux Counter #276890)
SUSE Linux Enterprise Desktop 11 (x86_64) Kernel 2.6.32.23-0.3-default
up 13:01, 2 users, load average: 0.32, 0.14, 0.06
GPU GeForce 8600 GTS Silent - Driver Version: 260.19.12

malcolmlewis wrote:
> Hi DD
> Can you do a post in alt.test?

its there…look for subj: testing Thunderbird pgp signed


DenverD
When it comes to chocolate, resistance is futile.
CAVEAT: http://is.gd/bpoMD [posted via NNTP w/openSUSE 10.3]

Hi
Saw it, and the - – is there, so it must be the TB code


Cheers Malcolm °¿° (Linux Counter #276890)
SUSE Linux Enterprise Desktop 11 (x86_64) Kernel 2.6.32.23-0.3-default
up 14:27, 2 users, load average: 0.09, 0.08, 0.08
GPU GeForce 8600 GTS Silent - Driver Version: 260.19.12

malcolmlewis wrote:
> Saw it, and the - – is there, so it must be the TB code

wow, probably is…
@VampirD you wanna log the bug against SeaMonkey and i’ll add to it
from TBird…or?

hmmm…you know, it could be in the Enigmail add-on (to manage
OpenPGP) @VampirD are you using that also?


DenverD
When it comes to chocolate, resistance is futile.
CAVEAT: http://is.gd/bpoMD [posted via NNTP w/openSUSE 10.3]

Hi
I think it’s pgp because I got it to do the same with claws-mail
replying to your test.


Cheers Malcolm °¿° (Linux Counter #276890)
SUSE Linux Enterprise Desktop 11 (x86_64) Kernel 2.6.32.23-0.3-default
up 17:29, 3 users, load average: 0.18, 0.10, 0.05
GPU GeForce 8600 GTS Silent - Driver Version: 260.19.12

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> hmmm…you know, it could be in the Enigmail add-on (to manage
> OpenPGP) @VampirD are you using that also?
Yes, I’m using enigmail 1.0.1-3.3.1 | x86_64


VampirD
No in elenath hîlar nan hâd gîn
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.15 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/

iEYEARECAAYFAkzGA+0ACgkQJQ+0ABWtaVn8zQCfQA5PC0balptxwS1FVbjSgP4v
l+MAni4nYUqrTgoaCdN9dxVWBbnylZyC
=V2lU
-----END PGP SIGNATURE-----

malcolmlewis wrote:
> I think it’s pgp because I got it to do the same with claws-mail
> replying to your test.

stands to reason…i wonder if it is PGP or OpenPGP, i’ll see if i can
figure out how to reach out to the open folks and see what they
say…who knows, maybe it is supposed to be like that ??


DenverD
When it comes to chocolate, resistance is futile.
CAVEAT: http://is.gd/bpoMD [posted via NNTP w/openSUSE 10.3]

On 2010-10-25 18:36, DenverD wrote:
> VampirD wrote:
>> mmm… so do you know any way to correct this without disable gpg?
>
> my guess is there is a bug in one of these:

I don’t think it is a bug, it is a known thing. For a reason I have forgotten, when a mail is pgp
signed the normal signature separator has to get that extra dash space. For software that does not
do pgp checking, it means that the signature separator is not recognized.

If it is a bug, it has been known for ages.

The problem that I see in thunderbird is that if I have not imported the public pgp sig of somebody,
those posts will show all the pgp inline “rubish”, instead of a clean post with “sig not checked”.


Cheers / Saludos,

Carlos E. R.
(from 11.2 x86_64 “Emerald” at Telcontar)

On 2010-10-26 12:41, Carlos E. R. wrote:
> On 2010-10-25 18:36, DenverD wrote:
>> VampirD wrote:
>>> mmm… so do you know any way to correct this without disable gpg?
>>
>> my guess is there is a bug in one of these:
>
> I don’t think it is a bug, it is a known thing. For a reason I have forgotten, when a mail is pgp
> signed the normal signature separator has to get that extra dash space. For software that does not
> do pgp checking, it means that the signature separator is not recognized.

I found the reference.

I found the reference to this, by Patrick 3 years ago (opensuse mail list), who got it from the
mutt mail list:

<http://lists.opensuse.org/opensuse/2007-06/msg00841.html>

+++···········

> > > Why is the <dash><dash><space> signature indicator not display
> > > properly in inline gpg signed posts, ie:
> > > <dash><space><dash><dash><space>.
> >
> > This is so that no software deletes the mail’s signature including the
> > gpg signature even by accident. I don’t know if it’s the official
> > reason but at least it makes sense… :slight_smile:
>
> It’s required by RFC2440 (the OpenPGP standard). See section 7.1
> therein.
············+±

And here it is an official reference:

<http://www.ietf.org/rfc/rfc2440.txt>

+++···········

RFC 2440 OpenPGP Message Format November 1998

7.1. Dash-Escaped Text

The cleartext content of the message must also be dash-escaped.

Dash escaped cleartext is the ordinary cleartext where every line
starting with a dash ‘-’ (0x2D) is prefixed by the sequence dash ‘-’
(0x2D) and space ’ ’ (0x20). This prevents the parser from
recognizing armor headers of the cleartext itself. The message digest
is computed using the cleartext itself, not the dash escaped form.

As with binary signatures on text documents, a cleartext signature is
calculated on the text using canonical <CR><LF> line endings. The
line ending (i.e. the <CR><LF>) before the ‘-----BEGIN PGP
SIGNATURE-----’ line that terminates the signed text is not
considered part of the signed text.

Also, any trailing whitespace (spaces, and tabs, 0x09) at the end of
any line is ignored when the cleartext signature is calculated.

············+±


Cheers / Saludos,

Carlos E. R.
(from 11.2 x86_64 “Emerald” at Telcontar)

Do you need gpg when posting to a forum anyway? Frankly, it’s pretty annoying for us regular users to read gpg-keys over and over again. Why don’t you just switch it off?

On 2010-10-28 06:36, gropiuskalle wrote:
>
> “VampireD” Wrote:
>> mmm… so do you know any way to correct this without disable gpg?
>
> Do you need gpg when posting to a forum anyway? Frankly, it’s pretty
> annoying for us regular users to read gpg-keys over and over again. Why
> don’t you just switch it off?

Probably the gateway should remove the key part when sending it to the web-forum. Otherwise, it
would be the forum software which would have to learn how to process pgp (ie, display: correct /
modified signed msg).

Failing that, yes, we NNTP users should not use PGP when posting, as a courtesy to those accessing
via web.


Cheers / Saludos,

Carlos E. R.
(from 11.2 x86_64 “Emerald” at Telcontar)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

You don’t have to read the gpg key, you can stop reading when you reach
the “-----BEGIN PGP SIGNATURE-----” line ¬¬


VampirD

Microsoft Windows is like air conditioning
Stops working when you open a window.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.15 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/

iEYEARECAAYFAkzK+3IACgkQJQ+0ABWtaVkwGQCgyuERBv0e/EoJiuKL6Hapbcsa
O5UAnirOgRWUwnzDarLcITnsnJPjGqEZ
=PZhA
-----END PGP SIGNATURE-----

Hi
That’s not the only issue, for nntp readers when you hit reply the
–[space] tells the news reader to ignore the text after the --[space]
with the pgp signature it adds it’s bit so your signature gets left
when an nntp user replies.

Notice if you reply to me my signature will not be in the reply…


Cheers Malcolm °¿° (Linux Counter #276890)
openSUSE 11.3 (x86_64) Kernel 2.6.34.7-0.5-default
up 1 day 22:01, 3 users, load average: 0.08, 0.07, 0.07
GPU GeForce 8600 GTS Silent - Driver Version: 260.19.12