GPGMail: 1822direkt bank using old software resulting in emails with no MDC

Peter's Avatar

Peter

16 Jul, 2018 10:34 AM

I'm contacting you because of the KB article on MDC errors. Since 2018.3 I've trouble with mails from [email blocked] (C4CAEE2C) that give instant transaction information for my banking accounts. Obviously, the certificate is hopelessly outdated and lacks MDC. However, after contacting the company there seems to be no quick solution to that problem. Moreover, I'd love to also have quick and easy access to my history within Apple Mail.

Therefore, I kindly request said workaround for GPGMail.

Thanks.

Peter

Expected
Automatic decryption of said (old) mails.

macOS                   10.13.5     17F77
GPG Suite               2018.3      2223    (8d0c266)
GPGMail                 3.0b7       1319    (c2d0df0a)
GPG Keychain            1.4.4       1460    (9010342)
GPGServices             1.11.4      1013    (0b04f6c)
MacGPG                  2.2.8       916     (0ed4a99)
GPG Suite Preferences   2.1.2       997     (1a09bc7)
Libmacgpg               0.8.5       863     (0707962)
pinentry                0.9.7.1     9       (db18340)
  1. Support Staff 1 Posted by Steve on 17 Jul, 2018 09:40 AM

    Steve's Avatar

    Hi Peter,

    welcome to the GPGTools support platform. Sorry you are having problems using GPG Suite.

    We already had another user reporting this exact problem with that specific bank. We really think the ball is in the banks hands and they should update the software they are using rather sooner than later. It's interesting to hear they tell one user they are working on an update to solve the problem and now they tell another customer, that there is no near-term solution. They are currently using a deprecated software from 2005.

    So in Mail.app you should be seeing something like:

    
    -----BEGIN PGP MESSAGE-----
    Version: Cryptix OpenPGP 0.20050418
    
    hQEMA0MnFwmDuKJNAQf/fJWHk7SBDWTsXy14A759/B5HVRZVRna8XzP6U9pJV5/3
    zne/kJiPpqT4eyDHax23JkTrfstxUr9MTVSttP8b1XdNAtanLm46sz7rINaxKy67
    ...
    

    You can use GPGServices to decrypt that message, which would be preferrable to always allowing decryption of messages with no MDC which we do not recommend.

    Does the GPGServices workaround work for you?

    The following two Knowledge Base articles explain how GPGServices is used:

    • KB explaining decryption and verification

    Best,
    steve

    PS: To benefit from the latest security fixes from apple, you may want to check for pending macOS updates in the MacAppStore. General info about Apple security releases including the latest macOS release.

Reply to this discussion

Internal reply

Formatting help / Preview (switch to plain text) No formatting (switch to Markdown)

Attaching KB article:

»

Attached Files

You can attach files up to 10MB

If you don't have an account yet, we need to confirm you're human and not a machine trying to post spam.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac