Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: GnuPG: devel

ID Substring Matching

 

 

GnuPG devel RSS feed   Index | Next | Previous | View Threaded


lann-gnupg at hurricanelabs

Sep 5, 2008, 11:27 AM

Post #1 of 2 (536 views)
Permalink
ID Substring Matching

I suggest that the current behavior for resolving recipients be changed:

If I specify a recipient on the command line, say:
-r friendly [at] example
gpg may select <unfriendly [at] example> as the actual recipient. Despite
being documented in the manual, this feature is potentially dangerous
for the inexperienced GnuPG user (me). Also, it is an uncommon enough
issue that one could go a long time without running into it and
realizing the correct way of specifying an exact address
(<friendly [at] example>).

I see several ways to resolve this:

1. Don't make substring matching the default (it would still be
available with the * prefix). This would be a compatibility problem, but
maybe worth it.

2. Try to match recipients with a '@' in the string as an exact e-mail
address first, falling back on sub-string matching. This isn't ideal, as
it still could behave badly if the true recipient isn't in your keyring.

3. At least warn users when a recipient is resolved with substring
matching (and the * prefix isn't used). This will give users a chance to
learn the correct syntax before making a potentially costly mistake.

-Lann Martin

_______________________________________________
Gnupg-devel mailing list
Gnupg-devel [at] gnupg
http://lists.gnupg.org/mailman/listinfo/gnupg-devel


wk at gnupg

Dec 4, 2008, 6:29 AM

Post #2 of 2 (495 views)
Permalink
Re: ID Substring Matching [In reply to]

On Fri, 5 Sep 2008 21:27, lann-gnupg [at] hurricanelabs said:

> If I specify a recipient on the command line, say:
> -r friendly [at] example
> gpg may select <unfriendly [at] example> as the actual recipient. Despite
> being documented in the manual, this feature is potentially dangerous
> for the inexperienced GnuPG user (me). Also, it is an uncommon enough

We can't change this anymore becuase it would break alsmost all
applications of gnupg. The suggested way to speicify a key is by using
its fingerprint which does not have this problem.

Good mail clients do their own matching to allow the user to select a
key if there is no unambiguous key available for example if two keys
friend [at] example are in the keyring.


Salam-Shalom,

Werner


--
Die Gedanken sind frei. Auschnahme regelt ein Bundeschgesetz.


_______________________________________________
Gnupg-devel mailing list
Gnupg-devel [at] gnupg
http://lists.gnupg.org/mailman/listinfo/gnupg-devel

GnuPG devel RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.