• Registered: 2009-01-23
  • Posts: 3

Topic: What's wrong with signing in Gmail?

I read some topics in this forum reporting errors in the signing process (or verification) in Gmail. I really don't understand the reason of the problems very well, but since I have some of the problems, I decided to make a few tests too. I send inline signed mails to myself and FireGPG shows me the "bad signature" message in most of them even when the editor in kgpg shows them as good signatures. Sometimes, the kgpg agree with FireGPG and both says that the signature is bad but when I remove the line breaks of the message, kgpg validates the signature. Sometimes, the removal of the line breaks in kgpg does not works. Messages signed in kgpg does not produce valid signatures for FireGPG too.

I don't know if the method I used to transfer data between Firefox and KGpg (I simply copy and paste) in some way has corrupted the messages, if there is a encoding problem, if Gmail insert line breaks that corrupt the message or anything else. Briefly, what's wrong with signing in Gmail? How can I sign/verify signatures properly? I already searched a lot in the web and in this forum for a solution, but without success.

Thank you very much for the great add-on!

  • From: Geneva
  • Registered: 2007-04-04
  • Posts: 1,040

Re: What's wrong with signing in Gmail?

Use openpgp/mime.

the_glu's Website

  • Registered: 2009-01-23
  • Posts: 3

Re: What's wrong with signing in Gmail?

I just tested openpgp/mime and the mails sent to myself were correctly signed. I tested with KMail this time and both Kmail and FireGPG works well.

The only factor that keeps me away from FireGPG now is the Content-Type of the messages signed with it. Can I use just plain text? I am in some mail lists that do not allow sending of HTML.

  • From: Geneva
  • Registered: 2007-04-04
  • Posts: 1,040

Re: What's wrong with signing in Gmail?

Ok, I will add a system who dectect the editor used and send mail in html only if the html editor is used.

the_glu's Website

  • Registered: 2009-01-23
  • Posts: 3

Re: What's wrong with signing in Gmail?

Right, this will be useful. smile

On the issue of inline signing in Gmail: do you already know what is really happening? I always used GPG for signing/encrypting files in the command line and never had problems before.

I ask just for curiosity, since the results of the tests that I made before were not conclusive at all, rather they were completely "random". Sorry if I bother you with all this questions, but the results I got yesterday definitely stimulated my curiosity. If explain what's happening steal too much time from you, just ignore this message.

Best regards

  • From: Geneva
  • Registered: 2007-04-04
  • Posts: 1,040

Re: What's wrong with signing in Gmail?

Gmail make some small modifications to inline message, like carriage returns, strange spaces and it's hard to get the original content to have a valid sign.

the_glu's Website