[Evolution] Bug#508479: Bug#508479: evolution shows a SMIME signed messages as ok even if modified

[Yves-Alexis Perez]

On sam, 2008-12-13 at 23:47 +0000, Joachim Breitner wrote:
> Hi,
> 
> this is the modified one, forwareded using evolution’s
> Forward-as-attachement feature. I hope this works.

Thanks, it worked, and yes, openssl shows the signature as not valid,
while evolution shows it as valid.

I don't know enough evo so I'll forward it upstream.

Can this be exploited? I mean, is it possible to change any (valid)
signed mail and bounce it to somebody else where it'll appear correctly
signed?

Cheers,
-- 
Yves-Alexis
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
Url : http://lists.alioth.debian.org/pipermail/pkg-evolution-maintainers/attachments/20081214/9a3aee42/attachment-0001.pgp