Signed e-mail with attachments

rmmcomgr has asked for the wisdom of the Perl Monks concerning the following question:

How do I digitally sign an e-mail generated in Perl if there are also attachments? I already have programs that sign e-mails and I also have programs that have attachments, but none that can sign the e-mail and have attachments. I'm using the server's PKI cert and the attachments are typically created by the program, too. They can include Excel spreadsheets or PDF files.

Appreciate any help.

Comment on Signed e-mail with attachments

Replies are listed 'Best First'.
Re: Signed e-mail with attachments by locked_user sundialsvc4 (Abbot) on Sep 14, 2010 at 00:22 UTC
If I were receiving an e-mail with attachments, I would want to be able to individually attest to the integrity of both “the message” and “each attachment.” Furthermore, I would want to be able to vouch for each attachment even after it had been detached from the message. So, there really are two separate problems here. Standard `S/MIME` techniques are fine for the message, but I think that you need to view the issue for attachments as being more long-lasting. Methinks that a digitally-signed message needs to be accompanied by (separately...) digitally-signed files as attachments, such that the authenticity of those files can be verified even weeks later, no matter what has been done to them in the meantime. That takes you out of the intended scope of `S/MIME`, AFAIK.
Re: Signed e-mail with attachments by romandas (Pilgrim) on Sep 14, 2010 at 00:27 UTC
Have you tried Mail::GPG?	[reply]
Re: Signed e-mail with attachments by Anonymous Monk on Sep 13, 2010 at 19:22 UTC
attachments aren't part of the message, so you can't do that with signatures, what you want is PGP/MIME	[reply]