emersion/go-pgpmail

Fix openpgp.MessageDetails footguns

emersion opened this issue · 1 comments

Either populate SignatureError with an error before verification is complete, or switch to our own type.

Another footgun: when the signature issuer is unknown, SignatureError is nil but nothing has been verified. The only way to know is to check that SignedBy isn't nil.