Missing Pubkeys: autoimport

[laclaro]

Hi,

if I am missing a public key, the function processReceived() in rc_openpgpjs.js throws the error text of signature_invalid_no_pubkey. It should better be imported and displayed as validly signed.

I fumbled a bit on this but could not achieve it.

regards,
Henning

[jseidl]

I don't think this is a good idea to be done automatically. If you trust every key that is attached on the signature, it breaks the principle of signing, as anyone can create a public key to any email.

But yes, it could have a button to import keys attached to the message.

[laclaro]

You are right, a button would be better.

Am 20.01.2014 04:47, schrieb Jan Seidl:

I don't think this is a good idea to be done automatically. If you trust every key that is attached on the signature, it breaks the principle of signing, as anyone can create a public key to any email.

But yes, it could have a button to import keys attached to the message.