signing web pages (simple way?)
Mon Jun 18 22:06:02 2001
-----BEGIN PGP SIGNED MESSAGE-----
On Monday, June 18, 2001, at 12:30:36 PM PDT, email@example.com wrote:
kpc> is there any simple (cut-and-paste) way to sign a web page with GnuPG
kpc> *without* having the "----begin &c.----" etc. flags showing up in the
kpc> beginning and at the end?
kpc> In other words, the sigining should occur inside the html code
kpc> itself, invisible to the normal onlooker, but the page can be checked
kpc> by anyone who downloads it and opens it in an editor.
The "cleanest" way I've seen this done is to have the raw HTML text
signed. Then, as you mention - one only needs to view the source and
verify it. The "-----Begin, etc.-----" will still be visible when one
views the raw text, but that's not really a problem, as it won't show up
when viewing the page in a browser.
Just be sure to sign the entire text (including the "<HTML>" and "</HTML>"
tags at beginning and end - not just what's within them).
PGP public keys:
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (MingW32) - GnuPGshell v1.77
Comment: I'm out of my mind, but feel free to leave a message.
-----END PGP SIGNATURE-----