[Enigmail] official protocol for external helper program

[Andrzej Filip]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Patrick Brunschwig wrote:
> Andrzej Filip wrote:
>> Patrick Brunschwig wrote:
>>> Andrzej Filip wrote:
>>>> Patrick Brunschwig wrote:
>>>>> Andrzej Filip wrote:
>>>>>> Is there any chance for enigmail to support some official protocol for
>>>>>> messages signing/encrypting and verification of message signature?
>>>>>> I have asked for support of "X-PGP-Sig:" but I will be happy to use more
>>>>>> general solution.
>>>>>> [e.g. execute external program, feed it XML via its stdin, read XML it
>>>>>> produces via stdout and error/report via stderr.
>>>>> There are a few add-ons for Mozilla available that deal in general with
>>>>> reading/writing complete messages (i.e. incl. headers), however AFAIK
>>>>> there is none that would offer a generic interface to just feed data to
>>>>> stdout and read something from stdin. The main problem is that this is a
>>>>> particularly difficult task to do in Thunderbird, and only very few
>>>>> people know how to do it at all.
>>>>> -Patrick
>>>> Is there another "communication protocol/method" better fitted to
>>>> Thunderbird architecture/limitations?
>>> No, there isn't. There is no limitation of Thunderbird in this area, the
>>> problem is just that creating an extension for tasks like the one you
>>> would like to accomplish is difficult, and thus so far only a few people
>>> dared to make the effort.
>>> -Patrick
>> So you have asked for one more final (re)try. :-)
> 
>> On my installation I can filter/rewrite messages before Thunderbird has
>> a chance to see them. Is there any "after rewriting format" that can
>> make Thunderbird capable to display x-pgp-sig "verified OK"/"broken
>> signature"?
> 
>> [ x-pgp-sig sign  signs message body (usually text/plain) and a few
>> chosen headers.
> 
> If you can do it completely externally, you could inject a header
> telling the status of the signature verification. Then you could display
> the additional header by adding your new header to the preference
> "mailnews.headers.extraExpandedHeaders" (with about:config).

Yet another try:
How hard would it be for enigmail to use "external script" for X-PGP-Sig
verification treating it as "body only" signature?

As I understand marking signed *headers* would require a lot of changes.

- --
[pl>en: Andrew] Andrzej Adam Filip : anfi at priv.onet.pl : anfi at xl.wp.pl
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHe+u4qmxEvGofXN0RAh2LAJ9IM9olFnQnfvWpLv37FHsOnUaobgCfX/h4
2UPwWYnzHOcWQcHjq6CM8js=
=wswQ
-----END PGP SIGNATURE-----