Re: Procmail feature security hole?

[Billy D. <bi...@da...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, 3 Oct 2000, Frank Tobin wrote:

> Billy Donahue, at 03:18 -0400 on Tue, 3 Oct 2000, wrote:
> 
> > A line starting with, and matching above some threshold (say 80%) of,
> > a user's pgpenvelope border should be flagged with (or followed by) a
> > "WARNING:" of some kind..
> 
> This is a harder task to determine than one would think (I think).

Hmm..  It can't be _that_ hard in Perl..  I suppose you're open to patches...
 
> > It would be better to come up with a real solution to the problem.
> 
> The real solution is to do one store/show verification information
> separately from the message itself.  Graphical mailers can do this by
> popping up another window.  If $DISPLAY is set, when verification happens,
> I could pop up an X message somehow (possibly via xmessage).

Eek.. if it happens in procmail, that may get noisy on an unattended
terminal.  Even if I'm just busy I may not want to see the messages.
(I usually stay logged in while I'm asleep in the next room)..  I like
the idea of 'out of band' data, though.  Maybe the procmail verifier
can slip some pattern like:

	-----pgpenvelope-filter-verified id="${id}" -----

into the message, and then a pine filter rule can detect the inserted
pattern and run a small and QUICK filter program.. The filter program
might do a lookup of ${id} into a verification log and present a message
screen saying:

	Yes, this message was really and truly verified by pgpenvelope.
	An entry in my logs shows that id="${id}" was verified as: 
	<press any key>

or

	You may be looking at a forged message.  I don't remember
	verifying it, yet it carries pgpenvelope borders.
	<press any key>
 
I realize that much of the charm of the pgpenvelope procmail filter
is that one doesn't need a MUA filter to run on verified messages,
and that this scheme means that you need a filter again.

Anyway, this scheme does the verification offline, but keeps a record
of verifications which is looked up at display-time.

- --
"The Funk, the whole Funk, and nothing but the Funk."
Linux barcode software mirror: http://dadadada.net/cuecat
Billy Donahue <mailto:bi...@da...>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.3 (GNU/Linux)
Comment: pgpenvelope 2.9.0 - http://pgpenvelope.sourceforge.net/

iD8DBQE52ZSR+2VvpwIZdF0RAoMgAJ9XW5KuZqX0g8cCMJ7jP6uCP2nn/QCgkQfK
CUdibSlhhYYiKERHIZ9If+Y=
=CrqY
-----END PGP SIGNATURE-----