Package: Evolution
Priority: Normal
Version: 1.0.1
Synopsis: improper verification of pgp (gnupg) signature
Bugzilla-Product: Evolution
Bugzilla-Component: Mailer

Description:
I responded to a message that had an attachment.  I cc'd the response
back to myself.  The message was signed my my digital signature (using
gnupg) automatically when it was sent by evolution.  However when I
click on the "check signature" icon when the cc'd message came back to
me, it said it was a bad signature.

Could evolution be signing it wrong (remember there was a plain-text
attachment that was in the original message that is also expanded in the
reply)?  Or is it verifying the signature wrong?  I'm thinking that when
the message was signed, it only signed the main part of my message and
not the attachment, but when it came through, the attachment was part of
the body, and thus the signature broke when evolution tried to verify
the signature using the whole body of the message plus the attachment. 

Hope that made sense.



Unknown reporter: torriem@cs.byu.edu, changed to bugbuddy-import@ximian.com.