sign and encrypt

[David Shaw]

On Wed, Jun 07, 2006 at 07:30:55AM -0400, John W. Moore III wrote:
> Zach Himsel wrote:
> > - gpg control packet
> > Janusz A. Urbanowicz wrote:
> > | On Mon, Jun 05, 2006 at 11:41:01PM +0200, mkontakt at gmail.com wrote:
> > |> I have seen in the spec rfc3156 that a message should be signed and
> > |> then encrypted, but hypothetically if send a message to someone I do
> > |> not like and sign it and then encrypt it he/she can forward it to
> > |> someone else pretending that the message was originally from my self.
> > |> Is there anything I have missed in spec or in gnupg to forbid this?
> > |
> > | read about eyes only option in gpg
> 
> > Eyes Only?
> 
> for-your-eyes-only is an Option within GnuPG that enables the same
> properties as 'Secure Viewer' does in PGP.  One difference; the Tempest
> fonted viewing screen seen in PGP is unique to the PGP GUI.
> 
> The complete description may be found in the GnuPG Manual.

Note that eyes only does not prevent forwarding.  It is an advisory
flag only (i.e. "please don't forward this").

David