GPG PGP S/Mime vulnerability

Julia A. Case julie@MageNet.com
Wed Aug 8 16:38:02 2001


--2oS5YaxWCcQjTEyO
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Quoting Guy Van Sanden (sienix@crosswinds.net):

> Again, you are right about that, but the currently proposed
> legistation would put responsability with the customer.
> The point is, that if the signatures would incorporate the
> message-headers, they would provide better security...
>=20
Headers change on the server too often, I even change headers where=20 delivering email on the server (as part of anti-spam handling we add=20 certian headers to indicate the likelyhood of it being spam so that an=20 email client can sort on those headers)... This doesn't seem like it=20 would work well to me. Julia --=20 [ Julia Anne Case ] [ Ships are safe inside the harbor, ] [Programmer at large] [ but is that what ships are really for. ] [ Admining Linux ] [ To thine own self be true. ] [ Windows/WindowsNT ] [ Fair is where you take your cows to be judged. ] --2oS5YaxWCcQjTEyO Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE7cU5U4HhEM0IT+S4RAp+8AJ9zx946vu3BF7uaboFHz5Bu9n+hXQCgodi4 YhCCJ8M39xANfEFNz0X//qQ= =QI7T -----END PGP SIGNATURE----- --2oS5YaxWCcQjTEyO--