Bug 1287 - Deduction for digital signature
Summary: Deduction for digital signature
Status: RESOLVED FIXED
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: Rules (Eval Tests) (show other bugs)
Version: SVN Trunk (Latest Devel Version)
Hardware: Other other
: P2 normal
Target Milestone: ---
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2002-12-12 10:11 UTC by Robert J. Accettura
Modified: 2002-12-18 21:47 UTC (History)
0 users


Attachment Type Modified Status Actions Submitter/CLA Status
Sample email text/plain None Robert J. Accettura [NoCLA]
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Robert J. Accettura 2002-12-12 10:11:47 UTC 
SpamAssassin should deduct for a S/MIME Cryptographic Signature (Digital Signature)

Since they require a digital certificate from someone like Thawte or VeriSign,
it's a drag for a spammer to have.

I don't think bulkmailers support them anyway.
Comment 1 Justin Mason 2002-12-13 07:14:22 UTC 
Yes, good idea.  Please attach a sample mail so we know what
to look for ;)
Comment 2 Robert J. Accettura 2002-12-13 07:24:34 UTC 
Created attachment 484 [details]
Sample email
Comment 3 Robert J. Accettura 2002-12-13 07:26:56 UTC 
I'm not sure 100% what to look for, but I'm pretty sure they will all carry
something like:

application/x-pkcs7-signature; name="smime.p7s"
Comment 4 Justin Mason 2002-12-18 14:27:12 UTC 
thanks Robert, now in CVS.
Comment 5 Robert J. Accettura 2002-12-18 14:46:53 UTC 
Great!  

Not to litter this bug or anything... But when will this and other fixes make an
actual release... what I mean to say is, when is the next release?
Comment 6 Duncan Findlay 2002-12-18 20:35:25 UTC 
Subject: Re: [SAdev]  Deduction for digital signature

> actual release... what I mean to say is, when is the next release?

Should happen really soon now. (Jan 2003?)
Comment 7 Robert J. Accettura 2002-12-19 06:47:57 UTC 
I searched CVS for this bug, although I'm not to familiar with the source....
What exactly is SpamAssassin looking for?  Is it the line:

application/x-pkcs7-signature; name="smime.p7s"


?


And what is it deducting?
Comment 8 Justin Mason 2002-12-19 09:50:08 UTC 
Subject: Re: [SAdev]  Deduction for digital signature 


> I searched CVS for this bug, although I'm not to familiar with the source....
> What exactly is SpamAssassin looking for?  Is it the line:

no, it's looking for the Content-Type and the attachment type...

header __SMIME_SIGNED_HDR       Content-Type =~ /multipart\/signed;.*protocol=/i
full __SMIME_SIGNED_BODY        /\nContent-Type: application\/x-pkcs7-signature;/
meta T_SMIME_SIGNATURE          (__SMIME_SIGNED_HDR && __SMIME_SIGNED_BODY)

--j.