GPG 1.0.3 doesn't detect modifications to files with multiple signatures

Frank Tobin ftobin@uiuc.edu
Fri, 13 Oct 2000 20:05:15 -0500 (CDT)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Werner Koch, at 18:42 +0200 on Fri, 13 Oct 2000, wrote:


> If you have more than one cleartext signature in a file (or pipe
> that to gpg), gpg does not compare each signature but flags each
> document as good or bad depending on the first document in the file.
I would like to take the moment to thank Werner for the quick analysis and professional response. - -- Frank Tobin http://www.uiuc.edu/~ftobin/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.3 (FreeBSD) Comment: pgpenvelope 2.9.0 - http://pgpenvelope.sourceforge.net/ iEYEARECAAYFAjnnsVIACgkQVv/RCiYMT6PfegCfSgUKMzP6Y/KoYxgRPKSVNQ2K Gv4An3gfk+6jFaEPyNBtJXwGtCyY/k8W =avCQ -----END PGP SIGNATURE----- -- Archive is at http://lists.gnupg.org - Unsubscribe by sending mail with a subject of "unsubscribe" to gnupg-users-request@gnupg.org