Re: notmuch-emacs should correctly handle signature status on reply
authorDaniel Kahn Gillmor <dkg@fifthhorseman.net>
Wed, 3 Aug 2016 15:30:05 +0000 (11:30 +2000)
committerW. Trevor King <wking@tremily.us>
Sat, 20 Aug 2016 23:22:18 +0000 (16:22 -0700)
e1/74776d01540953b5fce7a7f6c516052c365502 [new file with mode: 0644]

diff --git a/e1/74776d01540953b5fce7a7f6c516052c365502 b/e1/74776d01540953b5fce7a7f6c516052c365502
new file mode 100644 (file)
index 0000000..741b038
--- /dev/null
@@ -0,0 +1,116 @@
+Return-Path: <dkg@fifthhorseman.net>\r
+X-Original-To: notmuch@notmuchmail.org\r
+Delivered-To: notmuch@notmuchmail.org\r
+Received: from localhost (localhost [127.0.0.1])\r
+ by arlo.cworth.org (Postfix) with ESMTP id 5585B6DE01BE\r
+ for <notmuch@notmuchmail.org>; Wed,  3 Aug 2016 08:34:52 -0700 (PDT)\r
+X-Virus-Scanned: Debian amavisd-new at cworth.org\r
+X-Spam-Flag: NO\r
+X-Spam-Score: -0.036\r
+X-Spam-Level: \r
+X-Spam-Status: No, score=-0.036 tagged_above=-999 required=5\r
+ tests=[AWL=-0.036] autolearn=disabled\r
+Received: from arlo.cworth.org ([127.0.0.1])\r
+ by localhost (arlo.cworth.org [127.0.0.1]) (amavisd-new, port 10024)\r
+ with ESMTP id nC-9cSrtUljB for <notmuch@notmuchmail.org>;\r
+ Wed,  3 Aug 2016 08:34:40 -0700 (PDT)\r
+Received: from che.mayfirst.org (che.mayfirst.org [162.247.75.118])\r
+ by arlo.cworth.org (Postfix) with ESMTP id 729AB6DE0005\r
+ for <notmuch@notmuchmail.org>; Wed,  3 Aug 2016 08:34:39 -0700 (PDT)\r
+Received: from fifthhorseman.net (unknown [38.109.115.130])\r
+ by che.mayfirst.org (Postfix) with ESMTPSA id 257D9F993;\r
+ Wed,  3 Aug 2016 11:34:37 -0400 (EDT)\r
+Received: by fifthhorseman.net (Postfix, from userid 1000)\r
+ id DCA421FF75; Wed,  3 Aug 2016 11:30:08 -0400 (EDT)\r
+From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>\r
+To: Viktor Ashirov <vashirov@redhat.com>, notmuch@notmuchmail.org\r
+Subject: Re: notmuch-emacs should correctly handle signature status on reply\r
+In-Reply-To: <87invii1t7.fsf@slowpoke.usersys.redhat.com>\r
+References: <87invii1t7.fsf@slowpoke.usersys.redhat.com>\r
+User-Agent: Notmuch/0.22+77~gaba8744 (https://notmuchmail.org) Emacs/24.5.1\r
+ (x86_64-pc-linux-gnu)\r
+Date: Wed, 03 Aug 2016 11:30:05 -0400\r
+Message-ID: <87d1lpdg5e.fsf@alice.fifthhorseman.net>\r
+MIME-Version: 1.0\r
+Content-Type: multipart/signed; boundary="=-=-=";\r
+ micalg=pgp-sha512; protocol="application/pgp-signature"\r
+X-BeenThere: notmuch@notmuchmail.org\r
+X-Mailman-Version: 2.1.20\r
+Precedence: list\r
+List-Id: "Use and development of the notmuch mail system."\r
+ <notmuch.notmuchmail.org>\r
+List-Unsubscribe: <https://notmuchmail.org/mailman/options/notmuch>,\r
+ <mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>\r
+List-Archive: <http://notmuchmail.org/pipermail/notmuch/>\r
+List-Post: <mailto:notmuch@notmuchmail.org>\r
+List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>\r
+List-Subscribe: <https://notmuchmail.org/mailman/listinfo/notmuch>,\r
+ <mailto:notmuch-request@notmuchmail.org?subject=subscribe>\r
+X-List-Received-Date: Wed, 03 Aug 2016 15:34:52 -0000\r
+\r
+--=-=-=\r
+Content-Type: text/plain\r
+\r
+On Wed 2016-08-03 06:28:36 -0400, Viktor Ashirov wrote:\r
+\r
+> in notmuch-emacs, when I reply to multipart/signed email, signature\r
+> status gets inserted in the cited message, like this:\r
+>\r
+> ----------\r
+> John Doe writes:\r
+>> [ Unknown signature status ]\r
+>> Hello world!\r
+> ----------\r
+>\r
+> Even though signature was verified when email is viewed in notmuch-show\r
+> ----------\r
+>  [ multipart/signed ]\r
+>  [ Good signature by:  John Doe <jdoe@example.org> ]\r
+>  [ text/plain ]\r
+> ----------\r
+>\r
+> So I'd like to be able to\r
+> 1. Not include signature status in the cited message\r
+> 2. But when I want to include it, it should be correctly processed.\r
+\r
+fwiw, i think that the cited message should never include signature or\r
+decryption status, and the presence of these fields in the output of\r
+notmuch-reply is a bug.\r
+\r
+I see no reason to make it configurable to show them, and some good\r
+reasons not to: it's arguably a leak of information about your private\r
+view of the world to include this stuff in a reply (the user can always\r
+choose to write about their private view of the world manually if they\r
+want to).\r
+\r
+notmuch-emacs already has too many options, and we should be\r
+parsimonious about adding new ones.\r
+\r
+i suggest dropping the signature and encryption status entirely from\r
+notmuch-reply.\r
+\r
+        --dkg\r
+\r
+--=-=-=\r
+Content-Type: application/pgp-signature; name="signature.asc"\r
+\r
+-----BEGIN PGP SIGNATURE-----\r
+Version: GnuPG v2\r
+\r
+iQJ8BAEBCgBmBQJXog3+XxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w\r
+ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRFREIyRTc0RjU2RkNGMkI2NzI5N0I3MzUy\r
+NEVDRkY1QUZGNjgzNzBBAAoJECTs/1r/aDcKb/gP/A/FWlup2enJcVK3FxIKo61s\r
+sgJIC5BE9mDXZtqg+klGdfAcobdgjWGppE9WoI82VxA/VnjEy7i/RdM65usRUNwp\r
+jWPHb/14R0UKawsQg0XAC294a3MbtptjJzKGPphMhnKlN3cw2BwI77NNWSvDxJvp\r
+Cu7kN4BcXFKCsTFNvoERdXRAb2bTaNi/JAXiCuXQMGQXYs3rsAAxJuixLrOS9FrF\r
+ObgZK1BjfrxjuZAxC+UyT9HdM/nWUODo2BWSQVZfyEIP+hCbWb0Z19d3AvkIJ9WT\r
+CVwyCTGl004fyIqdnw2qmOu2TafJ9obJV6X3/HJg4UyZWXrjz2TIdfIaeUcxUq1P\r
+enm3XrwQzbdhi7/n/sljzHedufDUyfByLmDrnGlS29B6iLtcoI20J5UZhm5l0Qeq\r
+MkGaYC/mNraahmuqUEnE5GpYrZ99rE+WfqRMRUYxM97xxFEu0tqLs9Quvh/ecai0\r
+rEwrPHYPPyFlSbT+UQ9lQdfE+ghOp7s6gWJJJYKf/uo75YazeeRuxsqt1lGQFUYB\r
+gFskSzUYnBzvR5cNe0cLm4LumWnbxk+vUUjR06R3zlEBYoM/LzFdm8S1RdL5fgwD\r
+2U82rNiqWsvSBLwEAHPD1jfb7G7H+IJZnvffdbC/qpDOjpgGsJo5ETD2XoRJ9qzv\r
+3LT60bwkdx/hKdO1oR1Y\r
+=bCUo\r
+-----END PGP SIGNATURE-----\r
+--=-=-=--\r