From: Jameson Rollins <jrollins@finestructure.net>
To: Daniel Kahn Gillmor <dkg@fifthhorseman.net>,
	notmuch <notmuch@notmuchmail.org>
Subject: Re: PGP/MIME signature verification
In-Reply-To: <4CF15D67.1070904@fifthhorseman.net>
References: <4CF15D67.1070904@fifthhorseman.net>
User-Agent: Notmuch/0.5 (http://notmuchmail.org) Emacs/23.2.1
	(i486-pc-linux-gnu)
Date: Mon, 20 Dec 2010 13:22:07 -0500
Message-ID: <87aak08fu8.fsf@servo.finestructure.net>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
	micalg=pgp-sha256; protocol="application/pgp-signature"
Precedence: list

--=-=-=
Content-Transfer-Encoding: quoted-printable

On Sat, 27 Nov 2010 14:35:03 -0500, Daniel Kahn Gillmor <dkg@fifthhorseman.=
net> wrote:
> the signature-verification branch on my git repo [0] contains functional
> PGP/MIME signature verification if you supply the --verify argument to
>=20
>  notmuch show --format=3Djson
>=20
> It relies on gpg being in the path, and on the user having the signer's
> key in their gnupg keyring.

I was able to merge dkg's signature-verification branch on top of
cworth's current master head (b3caef1f) with only a tiny
easily-resolvable conflict.  It seems to work exactly as advertised, and
I wholeheartedly approve and endorse this patch set for inclusion
upstream:

Approved-and-Tested-By: Jameson Rollins <jrollins@finestructure.net>

I have pushed a merged "signature-verification" branch to my repo, along
with a single commit to fix an errant newline in the json --verify
output:

git://finestructure.net/notmuch

Carl: can you give an indication of whether or not you intend to
ultimately accept this patch set?  If so, I would like to start work on
representing signature verification information in the emacs UI.  I want
to make sure that we're good with this effort first, though.

We should probably also start a conversation about how best to represent
the signature verification info.  I'll bring that up in a separate
thread, though.

dkg: again, great work on this!  Thanks!

Next up: decrypting!

jamie.

--=-=-=
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
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=OT6k
-----END PGP SIGNATURE-----
--=-=-=--