Date: Thu, 26 Nov 2009 13:31:05 -0500
From: Jameson Graef Rollins <jrollins@finestructure.net>
To: notmuch@notmuchmail.org
Message-ID: <20091126183105.GA8745@finestructure.net>
References: <20091123130009.GA31695@finestructure.net>
	<20091126060132.GA5875@finestructure.net>
	<87iqcxkbla.fsf@linux.vnet.ibm.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
	protocol="application/pgp-signature"; boundary="pWyiEgJYm5f9v55/"
Content-Disposition: inline
In-Reply-To: <87iqcxkbla.fsf@linux.vnet.ibm.com>
User-Agent: Mutt/1.5.20 (2009-06-14)
Subject: Re: [notmuch] OpenPGP support
Precedence: list


--pWyiEgJYm5f9v55/
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

On Thu, Nov 26, 2009 at 12:38:01PM +0530, Aneesh Kumar K. V wrote:
> message-mode can sign the message using C-c RET C-s
> which is mml-secure-message-sign

Thanks so much, Aneesh!  That's great.  I was not aware of those
abilities in mml mode.  I just noticed that epa-mail-{sign,encrypt}
can do this as well, but much less cleanly.  So the mml commands are
exactly what I was looking for.  Well, at least exactly *half* of what
I was looking for...

So the issue now is verifying/decrypting signed/encrypted received
mail.  Playing around with it a bit more, I've found a couple of
interesting things.  If I'm viewing an encrypted message with
notmuch-show, and if I type 'v' (notmuch-show-view-all-mime-parts), I
get the full message view, and then a prompt to:

Decrypt (PGP) part? (y or n)

Typing 'y', I see that there is some communication with my gpg agent
(I get a gpg agent password prompt), but then once the password is
entered, nothing happens, ie. I don't see the decrypted part.  I'm
trying to figure out where the problem is here.  Presumably something
is failing to capture the output of the gpg decryption.  I'm not clear
either about what mode is trying to do this decryption.  Is this epa?

Unfortunately nothing at all happens when I hit 'v' when viewing a
message that has OpenPGP signature attachment.

I also just discovered that there are some
epa-mail-{sign,verify,{de,en}crypt} commands that work similar to (but
not as cleanly as) the mml commands.  Unfortunately none of this is
very coherent.  And some sort of integration with notmuch-show would
be sweet.

jamie.

--pWyiEgJYm5f9v55/
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: attachment

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
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=GWQ0
-----END PGP SIGNATURE-----

--pWyiEgJYm5f9v55/--