#165 OpenPGP: Verify should be able to understand if a message was encrypted and signed - GPGServices

Type	To find
responsible:me	tickets assigned to you
tagged:"@high"	tickets tagged @high
milestone:next	tickets in the upcoming milestone
state:invalid	tickets with the state invalid
created:"last week"	tickets created last week
sort:number, importance, updated	tickets sorted by #, importance or updated
Combine keywords for powerful searching.
Use advanced searching »

#165 new

OpenPGP: Verify should be able to understand if a message was encrypted and signed

Reported by Luke Le | August 15th, 2013 @ 08:54 PM

In some cases, a message is encrypted and signed, using the sign feature
of OpenPGP: Encrypt. Some users expect OpenPGP: Verify to handle that case correctly.
It indeed should.

Comments and changes to this ticket

Support August 15th, 2013 @ 08:55 PM
Assigned to Tender discussion #10594.
steve August 15th, 2013 @ 09:03 PM
- Milestone cleared.
also see https://gpgtools.lighthouseapp.com/projects/67607/tickets/140-make-...
steve March 26th, 2014 @ 02:40 PM
from duplicate "Better error msg: GPGServices shows misleading verify results if encrypted and signed files are verified"

Repro:
```
encrypt + sign a file
right click encrypted file and select Services > OpenPGP: Verify signature of file
```
Verification FAILED. No signatures found. That is a little misleading. (screenshot attached)

Not sure about the best solution. We could try to decrypt the file first in such case (but need to make sure user understands what happens, because if they click "verify" and end up with encrypted files, that could be misleading as well and a potential security problem).

Else we could at least show some more info, e.g. that the file first needs to be decrypted to do the verification. decrypt now? after decryption proceed with verification.
- verify-error.png 43.2 KB

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.