GPGTools/GPGServices — pull request #17 by idodeclare (2012-05-19 19:35:27+00:00)
Title: Improve signed file/signature file heuristic

Thought I would get this one in which I just found but you
were fast on my last one.

Anyway, interesting (bad) behavior in the old GPGServices when
verifying a file with a detached signature.

- previously, did search for smaller filename before searching
for longer filename. I.e., searched by removing extension
first.
- now searching for an added extension first is more reliable
in case a signed-encrypted file has been decrypted in the
directory.

E.g., old behavior:
If a directory contains: out, out.gpg, and out.gpg.sig, and
the user was verifying out.gpg, the old heuristic would see
out as the signed file and out.gpg as the signature file.

New behavior:
The new heuristic will match the longer name first, so it would
correctly process out.gpg as the data and out.gpg.sig as the
signature.