From: Tomi Ollila <tomi.ollila@iki.fi>
To: Notmuch Mail <notmuch@notmuchmail.org>
Subject: Re: [PATCH] emacs: process crypto for reply only when specified
In-Reply-To: <m2wqespair.fsf@guru.guru-group.fi>
References: <1396689486-19232-1-git-send-email-jani@nikula.org>
	<1396852814-10338-1-git-send-email-jrollins@finestructure.net>
	<8761me3st5.fsf@zancas.localnet>
	<m24n1xa3yu.fsf@guru.guru-group.fi>
	<87ob05xu9g.fsf@zancas.localnet>
	<m2fvlhklng.fsf@guru.guru-group.fi>
	<87ioqcajip.fsf@servo.finestructure.net>
	<m2wqespair.fsf@guru.guru-group.fi>
User-Agent: Notmuch/0.17+200~g5c6d42d (http://notmuchmail.org) Emacs/24.3.1
	(x86_64-unknown-linux-gnu)
Date: Mon, 14 Apr 2014 15:26:15 +0300
Message-ID: <m21tx0umfs.fsf@guru.guru-group.fi>
MIME-Version: 1.0
Content-Type: text/plain
Precedence: list

On Mon, Apr 14 2014, Tomi Ollila <tomi.ollila@iki.fi> wrote:

> On Mon, Apr 14 2014, Jameson Graef Rollins <jrollins@finestructure.net> wrote:
>
>>
>> In any event, if the mml tag is present, it's no longer in notmuch's
>> hands; emacs's mail processing is handling things and calling gpg-agent
>> to sign/encrypt the message.
>>
>> Can you clarify what exactly your situation was?
>
> Exactly that -- the mml tag was present -- so case closed on that issue :D
>
> I did some experiments changing the value of notmuch-crypto-process-mime
> before pressing 'r' button: I had to quit from show mode to search mode and
> choose the thread and then message to have the change to take effect.
>
> I will keep my notmuch-crypto-process-mime set t (and I keep removing
> the mml tags in this system -- and if I forget killing those processes),
> as I want to see [ Good signature by key: 0x... ] -messages. Maybe
> I^HSomebody, Someday provides a patch that provides separate value to
> do just signature checking...

As a current (temporary!;) solution I Added

(defun mml-pgpmime-sign-buffer (cont)
  (error "Signing messages disabled"))

to the end of ~/.emacs.d/notmuch-config.el on this one system only...

I am still vulnerable to DOS attack is someone sends me email encrypted
with my public key... Have to investigate and test this before too long...

Tomi


>
>
>> Presumably people who have not set up any crypto processing should not
>> have notmuch-crypto-process-mime set t.
>>
>> jamie.
>
> Thanks,
>
> Tomi
>
> PS: pkill '(pinentry-curses|gpg)' ++ ;/ -- one step closer to implement that...