GPG support in Mahogany

Johan Almqvist johan-gnupg@almqvist.net
Tue Dec 10 16:43:02 2002


--mP3DRpeJDSE+ciuQ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

* Xavier Nodet <xavier.nodet@free.fr> [021210 16:25]:
> Something more specific to mails. When a message is signed, we should
> verify that the 'From:' header actually matches one of the IDs of the
> signing key. This prevents an attacker from forging headers to make the
> recipient believe he got the message from a third person.

Would your method see the signature attached to this message as valid?
Please note the -gnupg extension on my address. Or should I add one UID
for each extension address I use?

-Johan
--=20
Johan Almqvist

--mP3DRpeJDSE+ciuQ
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)

iD8DBQE99gvlEVwMevfaF0sRAhPAAJ43sNepvxVHj8FW9qzcVVQTGJ9i/wCfe/lg
pXXBbqUJf6d5MtzUPGVovA4=
=XrKg
-----END PGP SIGNATURE-----

--mP3DRpeJDSE+ciuQ--