Home → Stable →

invalid signature when signed message contains another signed message embedded within (GPG Mail #1139)

• Edit

gpg_dude

05 Feb, 2026 06:40 AM

I'm not sure if this is expected, but I recently noticed that GPGMail reports invalid signature for signed messages that contain another signed message embedded in. For example:

• send yourself a message with subject test1
• compose a new message to yourself with subject test2
• embed first message into the second message by dragging and dropping it into the body
• send the second message to yourself
• open the message (in your inbox or your sent folder) and note the invalid signature reported

I've attached redacted screenshots showing this behavior in action. I could reproduce it in GPGMail stable 2023.2 on Ventura as well as the latest nightly 2024.1 (3592n) on Sequoia. I also noticed in the latest nightly on Sequoia the invalid signature icon & message are not displayed in the security line like they were in the stable version on Ventura.

• test1.png 50.3 KB
• test2-with-test1-embedded.png 90.5 KB
• invalid-signature-not-shown-in-security-line-on-sequoia.png 64.9 KB

1. Support Staff 1 Posted by Steve on 09 Jul, 2026 02:20 PM

   

   Hi gpg_dude,

   thanks for taking the time to report this problem.

   What you are reporting sadly is a known issue where Mail app sends out emails with invalid signature when sending out a signed email with attachment.

   We are tracking this problem as GPG Mail #1139. I connected this discussion with the existing ticket. That means, should this discussion get closed, it will be re-opened as soon as the ticket is closed. That way you stay in the loop and will receive info as soon as we have news. Feel free to open a new discussion should you run into further problems or need assistance.

   Best,
   Steve

   • Edit