Feature request: PGP verification for email signatures
- Dominant language
- JavaScript
- Stars
- 35.8k
- Forks
- 4.1k
- Avg merge
- 2d 26m
- Merged PRs (30d)
- 33
Description
**Is your feature request related to a problem? Please describe.**
Wanted to verify some PGP mail signatures, but couldn't get it working.
I just exported the mail from Thunderbird and copy pasted the content into the input field, but then it either says: _Couldn't verify message: Error: Cannot verify detached signature without data input_ or if I manually trim it down to the OpenPGP section and add _-----BEGIN PGP SIGNED MESSAGE-----_, it tells me _Couldn't verify message: Error: Sig verify error: missing ASN header for MD5_.
**Describe the solution you'd like**
Would be nice if one could copy paste a PGP signed mail directly into the input field without converting or something.
**Describe alternatives you've considered**
I have tried to verify the signature with Kleopatra and Gpg4win CLI, but also without success. Seems like I am missing something here.
Contributor guide
Research direction
Start by reproducing the reported input-field behavior with a PGP-signed email exported from Thunderbird, including the full message and the OpenPGP section. Trace the handling of detached signatures and the reported ASN-header error; done means a directly pasted signed email can be verified without manual conversion.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- cryptography, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 32/100