Can't check pgp-6.5.8 signatura

Owen Blacker owen@flirble.org
Tue Oct 16 23:57:01 2001


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Andreas Hasenack wrote (2001-10-16 T 18:39 -0200):

>
> From: Andreas Hasenack <andreas@conectiva.com.br>
> To: gnupg-users@gnupg.org
> Subject: Can't check pgp-6.5.8 signatura
> Message-ID: <20011016183959.U1614@conectiva.com.br>
> Mime-Version: 1.0
> Content-Type: application/pgp; x-action=sign; format=text
> Content-Disposition: inline; filename="msg.pgp"
> User-Agent: Mutt/1.3.23i
> Date: Tue, 16 Oct 2001 18:39:59 -0200
>
>
> [NON-Text Body part not included]
I've deleted some of the headers (obv). Was this message actually OpenPGP compliant, as pine gives me no way of accessing its content whatsoever. Whilst I understand that lots of mailers, including pine, don't adhere to the OpenPGP specs and don't use the "preferred" Content-Type method, looking at this (and having only glanced at RFC 2440 and RFC 3156) it seems like a really bad way to do this. RFC 3156 mentions that application/pgp is now a withdrawn MIME type, I'm aware that I don't know enough (or, indeed, as much as I should) about OpenPGP message standards, but was this message a right way to do it? It just seems plain stupid to create a mainly-text message (assuming it was clearsigned -- surely it's considered bad form to send binary-signed messages to a list?) and label it application/* so that most MUAs will choke on it. Opinions? Am I just being too unfamiliar with the OpenPGP standards? O x - -- Owen Blacker | Senior Software Developer and InfoSecurity Consultant See http://www.owens-place.org.uk/pgp.html -- more about my PGP keys Sig 0x3e2056b9 | 18cd 92aa 32aa 81b9 f5e8 c520 6475 6239 3e20 56b9 - -- They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety --Benjamin Franklin, 1759 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE7zKyqZHViOT4gVrkRAm+kAKDaj5YXsxzwBOZXw4EEyiP9QkZlJACeME9Z dMbSptUI8zgaqqUxmS3++Aw= =zhWV -----END PGP SIGNATURE-----