GPG support in Mahogany
Johan Almqvist
johan-gnupg@almqvist.net
Tue Dec 10 16:43:02 2002
--mP3DRpeJDSE+ciuQ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
* Xavier Nodet <xavier.nodet@free.fr> [021210 16:25]:
> Something more specific to mails. When a message is signed, we should
> verify that the 'From:' header actually matches one of the IDs of the
> signing key. This prevents an attacker from forging headers to make the
> recipient believe he got the message from a third person.
Would your method see the signature attached to this message as valid?
Please note the -gnupg extension on my address. Or should I add one UID
for each extension address I use?
-Johan
--=20
Johan Almqvist
--mP3DRpeJDSE+ciuQ
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)
iD8DBQE99gvlEVwMevfaF0sRAhPAAJ43sNepvxVHj8FW9qzcVVQTGJ9i/wCfe/lg
pXXBbqUJf6d5MtzUPGVovA4=
=XrKg
-----END PGP SIGNATURE-----
--mP3DRpeJDSE+ciuQ--