Topic: 99% signature verification failure in Gmail

Some of these have already been reported, but it may be useful to outline Gmail-specific problems.

(1) Signed messages sent from Gmail in plain text mode fail to verify in other mail clients and even in Gmail itself.
(2) Inline signed messages sent from other clients sometimes fail to verify in Gmail.
(3) Signed messages sent from Gmail in rich text mode verify in Gmail but not in other clients.

As previously reported, sometimes messages can be successfully verified in Gmail by using the "show original" feature and verifying that text.

If this doesn't work, you can cut and paste the "show original" text into gpg manually: under Windows, type gpg --verify, paste the text, type Ctrl-Z on a new line; in Linux, Ctrl-D instead of Ctrl-Z. Many more messages verify this way.

Finally, if gpg still fails to verify, you can paste the text into a file and manually join up any line that was wrapped. This takes care of everything else that will not verify and brings the success rate to 100%.

What I don't understand is why, sometimes, FireGPG will fail to verify a message, but if I cut and paste the text *from the regular display window* into gpg, it verifies fine.

Also, many mail clients do their wrapping before signing, but sometimes Gmail still distorts the text when displaying. I've noticed that even if nothing extra has been wrapped by Gmail during display, sometimes it will remove a leading space on a line. This causes the signature to fail.

For outgoing mail, the only way I can see to beat Gmail's wrapping is for FireGPG to wrap the text first, then sign it, then send it. Otherwise it won't verify in other mail clients. For incoming mail, is it possible to have FireGPG get the "show original" text instead of the text from the display?

Re: 99% signature verification failure in Gmail

Do you read ChangeLog and another post on this forum ? We know, we're working only on this for the moment !

Re: 99% signature verification failure in Gmail

Yes, I read the changelog and other posts. Thanks for working on it.

I felt nobody had made a thorough post with all the Gmail issues and possible solutions. E.g., sometimes you can take a message which does not verify in FireGPG, copy it *from the Gmail display* (not "show original") and verify it manually in gpg -- successfully. As far as I know, nobody has mentioned that Gmail will remove leading whitespace even if it does not change the line wrapping. Finally, again as far as I know, nobody has yet proposed the simple solution of having FireGPG wrap text itself before signing. It is a pretty simple thing to implement.

Just trying to help. Thanks again.

Re: 99% signature verification failure in Gmail

My message was not again you, I'm sorry if I was rude,  it's just that is the 2000th same question ^^ ! But that show it's important !

(But that your report was already repoted, we have a lot of document from SomeBody who seem to tested.. all big_smile)

Thanks for your help !