encrypted mails fail to verify due to body-change

[datendunst]

When Thunderbird receives an OpenPGP-encrypted e-mail, it changes the displayed body, which causes a second check of the signature, which will always have a negative result.

I don't know if Thunderbird is to blame for this, but maybe the verifier could somehow stick to it's first result or the actual e-mail content instead of the re-rendered one...?

[lieser]

Strange, the function used to retrieve the content of the mail is supposed to read the un-encrypted content of the mail, at least if I understand the documentation correctly.

And in my last test (#302) from now some years ago it did work together with Thunderbird's build in OpenPGP. Is it your first time trying to use both the add-on and OpenPGP together, or was it working for you before?

After next week I will also try it out again myself.

[datendunst]

Strange, the function used to retrieve the content of the mail is supposed to read the un-encrypted content of the mail, at least if I understand the documentation correctly.

DKIM signatures are generated after the content has been encrypted, so the verification must happen before Thunderbird decrypts it. You can see the signature beeing checked twice in the debug log - before and after decryption.

And in my last test (#302) from now some years ago it did work together with Thunderbird's build in OpenPGP. Is it your first time trying to use both the add-on and OpenPGP together, or was it working for you before?

Can't say unfortunately. I think I had trusted authentication headers before.

After next week I will also try it out again myself.

Nice. :)

[SilmorSenedlen]

I can't reproduce described problem for yourself on TB 140.8.0 ESR (Win10 LTSC x64) with dkim_verifier v6.2.0 and libunbound 1.24.2

My example:

Details

Content-Type: multipart/encrypted; protocol="application/pgp-encrypted"; 

Content-Type: application/pgp-encrypted
Content-Description: PGP/MIME version identification

Content-Type: application/octet-stream; name="encrypted.asc"
Content-Description: OpenPGP encrypted message
Content-Disposition: inline; filename="encrypted.asc"