From: Viktor Ashirov <vashirov@redhat.com>
To: Daniel Kahn Gillmor <dkg@fifthhorseman.net>, notmuch@notmuchmail.org
Subject: Re: notmuch-emacs should correctly handle signature status on reply
In-Reply-To: <87d1lpdg5e.fsf@alice.fifthhorseman.net>
References: <87invii1t7.fsf@slowpoke.usersys.redhat.com>
 <87d1lpdg5e.fsf@alice.fifthhorseman.net>
User-Agent: Notmuch/0.21 (https://notmuchmail.org) Emacs/25.0.94.1
 (x86_64-redhat-linux-gnu)
Date: Wed, 03 Aug 2016 18:02:03 +0200
Message-ID: <87popp6dtw.fsf@slowpoke.usersys.redhat.com>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha256; protocol="application/pgp-signature"
Precedence: list

--=-=-=
Content-Type: text/plain

On Wed, Aug 03 2016 at 11:30:05 am, Daniel Kahn Gillmor <dkg@fifthhorseman.net> wrote:
> On Wed 2016-08-03 06:28:36 -0400, Viktor Ashirov wrote:
>
>> in notmuch-emacs, when I reply to multipart/signed email, signature
>> status gets inserted in the cited message, like this:
>>
>> ----------
>> John Doe writes:
>>> [ Unknown signature status ]
>>> Hello world!
>> ----------
>>
>> Even though signature was verified when email is viewed in notmuch-show
>> ----------
>>  [ multipart/signed ]
>>  [ Good signature by:  John Doe <jdoe@example.org> ]
>>  [ text/plain ]
>> ----------
>>
>> So I'd like to be able to
>> 1. Not include signature status in the cited message
>> 2. But when I want to include it, it should be correctly processed.
>
> fwiw, i think that the cited message should never include signature or
> decryption status, and the presence of these fields in the output of
> notmuch-reply is a bug.
>
> I see no reason to make it configurable to show them, and some good
> reasons not to: it's arguably a leak of information about your private
> view of the world to include this stuff in a reply (the user can always
> choose to write about their private view of the world manually if they
> want to).
I see your point, and I agree.
>
> notmuch-emacs already has too many options, and we should be
> parsimonious about adding new ones.
>
> i suggest dropping the signature and encryption status entirely from
> notmuch-reply.
Sounds good to me.
>
>         --dkg
--
Viktor

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=Uq/6
-----END PGP SIGNATURE-----
--=-=-=--