codema.in
Fri 7 Mar 2025 9:39AM

We now have an email alias/mailing list

PP Pirate Praveen Public Seen by 4

I have created board@prav.app with private archives - you can see archives at https://lists.fsci.in/hyperkitty/ if you are logged in. We can use this for voting via gpg signed emails. Please maintain a GPG key for digital signatures (Thunderbird makes creation and using gpg very easy - you can do all of this from account settings -> end to end encryption graphically).

For people not using Thunderbird (it s also available in Android), you can try mailvelope web browser extension.

PP

Pirate Praveen Fri 7 Mar 2025 9:48AM

Please confirm if you got the welcome mail and the follow up mail I sent.

RD

Ravi Dwivedi Fri 7 Mar 2025 10:17AM

@Pirate Praveen I got a welcome email.

PP

Pirate Praveen Fri 7 Mar 2025 10:06AM

My default configuration for dmarc mitigation is replace from with list address, but this will break digital signature. Thunderbird says uncertain digital signature. Now trying the option to wrap message in an envelope.

RD

Ravi Dwivedi Fri 7 Mar 2025 10:18AM

@Pirate Praveen So, if you send a message to the list, it will show `board@prav.app` in the `From` field, instead of your own email address?

PP

Pirate Praveen Fri 7 Mar 2025 10:25AM

@Ravi Dwivedi that was the previous setting, but I changed and replied. Now thunderbird seems to be not able to show if the signature is valid - it says part of the message is signed, but then clicking on the button don't show anything.

PP

Pirate Praveen Fri 7 Mar 2025 10:37AM

I have turned off DMARC mitigations, but mails with strict DMARC policy will be rejected. Not sure what is the best way out here.

PP

Pirate Praveen Fri 7 Mar 2025 10:45AM

Though my test mail came through, not sure about disroot.org. @Abhijith PA @Kannan V M can you send test mail from disroot to board@prav.app ? Ideally with gpg signature.

PP

Pirate Praveen Fri 7 Mar 2025 10:53AM

May be we need to sign a file manually and attach it.

PP

Pirate Praveen Fri 7 Mar 2025 11:01AM

So at present, you need to create a text file, sign it, attach the .gpg file. 

gpg --sign board-vote-test.txt

Then people receiving it should save the attachment and verify it. This is more painful, but we can live with it until we figure out an easier method I think. Manually copying (cc) everyone instead of the alias would work.

gpg --decrypt board-vote-test.txt.gpg
This is a test message for board voting and OpenPGP.
gpg: Signature made Fri Mar  7 16:24:35 2025 IST
gpg:                using RSA key D30863E26020E543F4719A838F53E0193B294B75
gpg: Good signature from "Praveen Arimbrathodiyil (Pirate) <praveen.arimbrathodiyil@puri.sm>" [ultimate]
gpg:                 aka "Praveen Arimbrathodiyil (Pirate) <praveen@onenetbeyond.org>" [ultimate]
gpg:                 aka "Praveen Arimbrathodiyil (Pirate) <praveen@debian.org>" [ultimate]
Load More