I received an email in cleartext from someone with a signature.asc attached. Looking at the raw source for the email, it was sent with Apple Mail + GPGMail. Reading the message in Thunderbird + Enigmail successfully shows up as a GOOD signature
in the Enigmail details when opening the message. The text is not ASCII armored.
However, attempting to verify the message with gpg
results in BAD signature
. Using the attached (detached) signature file, I tried the following input files with no success:
- Full raw email with all headers (this of course should not work because the mail servers add headers after the sender has finished composing and signing the message)
- Raw email file without email headers (email starts at the
From:
header) - munpacked mime parts individually (the ascii part and the html part as message inputs)