On Thu, 16 May 2002 18:55:01 +0200, Frederic Gobry said: > original unencrypted text. Wouldn't it make sense to provide an option > to switch the order if one wants the second semantic ? No. The problem with S(E(m)) is that it reveals information about the sender/signer whereas E(S(m)) does only tell you who is the recipient - and this can even be avoided by using --throw-keyid. Werner