Re: [Evolution] Recipients using Outlook see PGP as attachments

[Jeffrey Stedfast <fejj ximian com>]

No, inline PGP is a broken method of sending encrypted/signed messages.

1. You can ONLY sign/encrypt plain text safely (and even still you
should really QP encode but most mailers don't which means that it
stands a chance of being broken when it gets to the recipient)

2. It has a number of security issues. (as a rough idea: what type of
data is encrypted? is it a jpeg? is it plain text? is it an executable?
how do I display it?)

Jeff

On Mon, 2001-09-10 at 23:25, Michael J Schulz wrote:
> Since Evolution sends PGP encrypted text MIME encoded as 'multipart/
> encrypted; protocol="application/pgp-encrypted"' Outlook gives it
> filename and displays it as an attachment.  An Outlook user has to save
> the attachment, decode it (or jsut cut and past the PGP part), then
> decrypt it.  
>
> Are you planning on having an option to send encrypted mail so that
> Outlook will get it in an inline format instead of encoded?
>
>
> Evolution does it like this.
>
> --=-CBLr0rt5j6ACEWZAUyOd
> Content-Transfer-Encoding: 7bit
> Content-Type: application/pgp-encrypted
>
> Version: 1
> --=-CBLr0rt5j6ACEWZAUyOd
> Content-Type: application/octet-stream
> Content-Transfer-Encoding: 7bit
>
> -----BEGIN PGP MESSAGE-----
> Version: PGP 6.5.8
>
>    Encrypted text is here.
>
> -----END PGP MESSAGE-----
>
> --=-CBLr0rt5j6ACEWZAUyOd--
>
> Whereas Outlook sends the file as text, and it looks like this:
>
> -----BEGIN PGP MESSAGE-----
> Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>
>
>    Encrypted text is here.
>
> -----END PGP MESSAGE-----
>
>
>
> _______________________________________________
> evolution maillist  -  evolution ximian com
> http://lists.ximian.com/mailman/listinfo/evolution