Fix openpgp.MessageDetails footguns
emersion opened this issue · 1 comments
emersion commented
Either populate SignatureError
with an error before verification is complete, or switch to our own type.
emersion commented
Another footgun: when the signature issuer is unknown, SignatureError
is nil but nothing has been verified. The only way to know is to check that SignedBy
isn't nil.