GPG PGP S/Mime vulnerability
Julia A. Case
julie@MageNet.com
Wed Aug 8 16:38:02 2001
--2oS5YaxWCcQjTEyO
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Quoting Guy Van Sanden (sienix@crosswinds.net):
> Again, you are right about that, but the currently proposed
> legistation would put responsability with the customer.
> The point is, that if the signatures would incorporate the
> message-headers, they would provide better security...
>=20
Headers change on the server too often, I even change headers where=20
delivering email on the server (as part of anti-spam handling we add=20
certian headers to indicate the likelyhood of it being spam so that an=20
email client can sort on those headers)... This doesn't seem like it=20
would work well to me.
Julia
--=20
[ Julia Anne Case ] [ Ships are safe inside the harbor, ]
[Programmer at large] [ but is that what ships are really for. ]
[ Admining Linux ] [ To thine own self be true. ]
[ Windows/WindowsNT ] [ Fair is where you take your cows to be judged. ]
--2oS5YaxWCcQjTEyO
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE7cU5U4HhEM0IT+S4RAp+8AJ9zx946vu3BF7uaboFHz5Bu9n+hXQCgodi4
YhCCJ8M39xANfEFNz0X//qQ=
=QI7T
-----END PGP SIGNATURE-----
--2oS5YaxWCcQjTEyO--