Re: [PATCH] emacs: sign/encrypt replies to signed/encrypted messages

diff --git a/4d/3a05cbe68fcac59d41b67b9e06f9b3b7005bb0 b/4d/3a05cbe68fcac59d41b67b9e06f9b3b7005bb0
new file mode 100644 (file)
index 0000000..6329e8c
--- /dev/null
+++ b/4d/3a05cbe68fcac59d41b67b9e06f9b3b7005bb0
@@ -0,0 +1,72 @@
+Return-Path: <david@tethera.net>\r
+X-Original-To: notmuch@notmuchmail.org\r
+Delivered-To: notmuch@notmuchmail.org\r
+Received: from localhost (localhost [127.0.0.1])\r
+       by olra.theworths.org (Postfix) with ESMTP id 4D2AA431FBD\r
+       for <notmuch@notmuchmail.org>; Mon, 14 Apr 2014 10:17:40 -0700 (PDT)\r
+X-Virus-Scanned: Debian amavisd-new at olra.theworths.org\r
+X-Spam-Flag: NO\r
+X-Spam-Score: 0\r
+X-Spam-Level: \r
+X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[none]\r
+       autolearn=disabled\r
+Received: from olra.theworths.org ([127.0.0.1])\r
+       by localhost (olra.theworths.org [127.0.0.1]) (amavisd-new, port 10024)\r
+       with ESMTP id gcVrsY7dE69C for <notmuch@notmuchmail.org>;\r
+       Mon, 14 Apr 2014 10:17:36 -0700 (PDT)\r
+Received: from mx.xen14.node3324.gplhost.com (gitolite.debian.net\r
+       [87.98.215.224]) (using TLSv1 with cipher AES256-SHA (256/256 bits))\r
+       (No client certificate requested)\r
+       by olra.theworths.org (Postfix) with ESMTPS id EB973431FBC\r
+       for <notmuch@notmuchmail.org>; Mon, 14 Apr 2014 10:17:35 -0700 (PDT)\r
+Received: from remotemail by mx.xen14.node3324.gplhost.com with local (Exim\r
+       4.72) (envelope-from <david@tethera.net>)\r
+       id 1WZkTe-0005mS-Hy; Mon, 14 Apr 2014 17:15:26 +0000\r
+Received: (nullmailer pid 3709 invoked by uid 1000); Mon, 14 Apr 2014\r
+       17:15:13 -0000\r
+From: David Bremner <david@tethera.net>\r
+To: Jani Nikula <jani@nikula.org>, notmuch@notmuchmail.org\r
+Subject: Re: [PATCH] emacs: sign/encrypt replies to signed/encrypted messages\r
+In-Reply-To: <1396689486-19232-1-git-send-email-jani@nikula.org>\r
+References: <87a9f1c8aq.fsf@servo.finestructure.net>\r
+       <1396689486-19232-1-git-send-email-jani@nikula.org>\r
+User-Agent: Notmuch/0.17+174~g4efbc9f (http://notmuchmail.org) Emacs/24.3.1\r
+       (x86_64-pc-linux-gnu)\r
+Date: Mon, 14 Apr 2014 14:15:13 -0300\r
+Message-ID: <8738hf25pa.fsf@maritornes.cs.unb.ca>\r
+MIME-Version: 1.0\r
+Content-Type: text/plain\r
+X-BeenThere: notmuch@notmuchmail.org\r
+X-Mailman-Version: 2.1.13\r
+Precedence: list\r
+List-Id: "Use and development of the notmuch mail system."\r
+       <notmuch.notmuchmail.org>\r
+List-Unsubscribe: <http://notmuchmail.org/mailman/options/notmuch>,\r
+       <mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>\r
+List-Archive: <http://notmuchmail.org/pipermail/notmuch>\r
+List-Post: <mailto:notmuch@notmuchmail.org>\r
+List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>\r
+List-Subscribe: <http://notmuchmail.org/mailman/listinfo/notmuch>,\r
+       <mailto:notmuch-request@notmuchmail.org?subject=subscribe>\r
+X-List-Received-Date: Mon, 14 Apr 2014 17:17:40 -0000\r
+\r
+Jani Nikula <jani@nikula.org> writes:\r
+> +(defun notmuch-mua-reply-crypto (parts)\r
+> +  (loop for part in parts\r
+> +    if (notmuch-match-content-type (plist-get part :content-type) "multipart/signed")\r
+> +      do (mml-secure-message-sign)\r
+\r
+How do people feel about disabling/removing the previous two lines?\r
+\r
+It's less obvious to me that you always want to sign in reply to a\r
+signed message (probably you want to unconditionally always sign in that\r
+case).  As written this causes some inconvenience  for users that have\r
+notmuch-crypto-process-mime=t to verify inbound signatures, but don't\r
+necessarily have the ability to sign outbound mail. \r
+\r
+\r
+> +    else if (notmuch-match-content-type (plist-get part :content-type) "multipart/encrypted")\r
+> +      do (mml-secure-message-sign-encrypt)\r
+> +    else if (notmuch-match-content-type (plist-get part :content-type) "multipart/*")\r
+> +      do (notmuch-mua-reply-crypto (plist-get part :content))))\r
+> +\r