Can't check pgp-6.5.8 signatura
Owen Blacker
owen@flirble.org
Tue Oct 16 23:57:01 2001
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Andreas Hasenack wrote (2001-10-16 T 18:39 -0200):
>
> From: Andreas Hasenack <andreas@conectiva.com.br>
> To: gnupg-users@gnupg.org
> Subject: Can't check pgp-6.5.8 signatura
> Message-ID: <20011016183959.U1614@conectiva.com.br>
> Mime-Version: 1.0
> Content-Type: application/pgp; x-action=sign; format=text
> Content-Disposition: inline; filename="msg.pgp"
> User-Agent: Mutt/1.3.23i
> Date: Tue, 16 Oct 2001 18:39:59 -0200
>
>
> [NON-Text Body part not included]
I've deleted some of the headers (obv). Was this message actually
OpenPGP compliant, as pine gives me no way of accessing its content
whatsoever.
Whilst I understand that lots of mailers, including pine, don't adhere
to the OpenPGP specs and don't use the "preferred" Content-Type method,
looking at this (and having only glanced at RFC 2440 and RFC 3156) it
seems like a really bad way to do this.
RFC 3156 mentions that application/pgp is now a withdrawn MIME type, I'm
aware that I don't know enough (or, indeed, as much as I should) about
OpenPGP message standards, but was this message a right way to do it? It
just seems plain stupid to create a mainly-text message (assuming it was
clearsigned -- surely it's considered bad form to send binary-signed
messages to a list?) and label it application/* so that most MUAs will
choke on it.
Opinions? Am I just being too unfamiliar with the OpenPGP standards?
O x
- --
Owen Blacker | Senior Software Developer and InfoSecurity Consultant
See http://www.owens-place.org.uk/pgp.html -- more about my PGP keys
Sig 0x3e2056b9 | 18cd 92aa 32aa 81b9 f5e8 c520 6475 6239 3e20 56b9
- --
They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety --Benjamin Franklin, 1759
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org
iD8DBQE7zKyqZHViOT4gVrkRAm+kAKDaj5YXsxzwBOZXw4EEyiP9QkZlJACeME9Z
dMbSptUI8zgaqqUxmS3++Aw=
=zhWV
-----END PGP SIGNATURE-----