[Tickets #9225] Re: Signatures of signed && encrypted messages are ignored

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/9225
------------------------------------------------------------------------------
  Ticket             | 9225
  Updated By         | apfelmus at ungehorsam.ch
  Summary            | Signatures of signed && encrypted messages are ignored
  Queue              | IMP
  Version            | 4.3.7
  Type               | Bug
  State              | Feedback
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             | Michael Slusarz
------------------------------------------------------------------------------


apfelmus at ungehorsam.ch (2010-09-08 09:34) wrote:

> How is this supposed to work?  You don't know that a message is  
> signed until it is decrypted.

Exactly. But as soon as the message is decrypted, the signature can be  
checked -- which is obviously either not done or not displayed by IMP.  
When manually decrypting a signed message with GnuPG, by default it  
also performs a signature check as soon as the decryption is finished,  
and tells the user whether the signature matches the message content  
or not. Decrypting signed messages in IMP doesn't give any user  
feedback concering the signature.