Encouraging email security.

Werner Koch wk@gnupg.org
Thu May 22 09:09:42 2003


On Wed, 21 May 2003 11:13:39 -0300, Juan F Codagnone said:

> Another problem i see with email signing, is that the signature only validates 
> the body, and someone can take ambiguous signed messages and give them 

That is no prblem.  It is the same in the real world: Removing the
envelope and replacing it with a different one is pretty easy,
changing the actual letter and the signature is harder.  People know
that they can not trust whats on an envelope; maybe except for the
timestamp of the postal service.


Salam-Shalom,

   Werner

-- 
  Nonviolence is the greatest force at the disposal of
  mankind. It is mightier than the mightiest weapon of
  destruction devised by the ingenuity of man. -Gandhi