I recently adquired a proton email and I have a question about gpg. When a message is signed, if I have the public key I can verify if the email has been signed by the owner. But the question is: What is signed? Only the body? The body + headers? I want to perform this operation manually by doing:
gpg --verify signature.asc message.txt
pg: Signature made Tue 13 Sep 2022 04:04:23 PM CEST gpg: using RSA key 27EFAA0BA712CD43 gpg: BAD signature from myemail@protonmail.com
If I do the same with pgp email client it works. So I guess that message.txt is not ok. Anybody can help me, please?
thank you