When people sign messages with gpg (or presumably with PGP) KMail tries to verify their sigs, can't find their public keys in my keyring (because I have no one's key) and reports, in a yellow frame around the text: The validity of the signature cannot be verified. Problem: OpenPGP plug-in was not specified. This is not actually correct, is it? The "problem" isn't that the OpenPGP plug-in isn't specified; the problem is that I don't have the key in my keyring. When I receive a message signed by someone with a public key in my keyring (like myself, for example) the message *is* verified properly -- and I *still* don't have any OpenPGP plug-in specified. So the error report is actually inaccurate and misleading, no? Thoughts? Should I report this as a typo/bug to the KMail people? Or am I missing something? Sorry, off topic, but...