[OSGeo-Discuss] Broken GPG signatures (was: Change in mailing list configuration)

[Sandro Santilli]

Check the headers if you want to compare. Which headers are DKIM signed ? By whom ? What address is in the From header ?

The GPG issue is related to how the MUA searches for a public key associated with the From address, which is always an @osgeo.org address for messages coming to this mailing list.



On January 31, 2024 11:09:53 PM GMT+01:00, Javier Jimenez Shaw via Discuss <discuss at lists.osgeo.org> wrote:
>Thanks Sandro for caring about this.
>
>I understand that some people get annoyed if the prefix is removed (not me
>personally). That made me compare with google groups:
>I am in a google groups mailing list, and the emails "pass" for SPF and
>DKIM. This group has a "prefix" added by the mailing list automatically.
>What are they doing differently that we cannot?
>
>About the GPG signature, I do not know. Nobody in my google group uses it.
>Maybe Jorge Sanz has some experience.
>
>Cheers,
>Javier
>
>On Wed, 31 Jan 2024 at 18:33, Sandro Santilli via Discuss <
>discuss at lists.osgeo.org> wrote:
>
>> I thought I'd mention that the GPG signatures in emails sent to this
>> list are currently unverifiable due to the email address of the sender
>> NOT being in the From field. Example:
>>
>>   From: Jorge Sanz via Discuss <discuss at lists.osgeo.org>
>>   To: discuss at lists.osgeo.org
>>   Subject: Re: [OSGeo-Discuss] Mailing lists to discourse migration
>>   Message-ID: <4edbc588-9e29-4c51-9b25-520c0112ad36 at osgeo.org>
>>
>>   [-- Begin signature information --]
>>   Problem signature from: KeyID 91EB9EC08EC1CAD46631BC5893A8CE9CA5942A46
>>                  created: Tue 30 Jan 2024 11:08:19 AM CET
>>   Can't verify due to a missing key or certificate
>>   [-- End signature information --]
>>
>> I'm adding mailing list owners as I think they should have the last
>> word on what the configuration of the list should be.
>>
>> I for one still think we should re-apply the change that I applied
>> on Jan 11th [1] after nobody had anything to say about my proposal
>> of Jan 4th [2]
>>
>>
>> [1] https://lists.osgeo.org/pipermail/discuss/2024-January/040058.html
>> [2] https://lists.osgeo.org/pipermail/discuss/2024-January/040048.html
>>
>> --strk;
>> _______________________________________________
>> Discuss mailing list
>> Discuss at lists.osgeo.org
>> https://lists.osgeo.org/mailman/listinfo/discuss
>>

-- 
Sent from hand-held device with K-9 Mail. Please excuse my brevity.