no, it's not an email client problem, it's what I said at the start

David Shaw dshaw at jabberwocky.com
Wed Apr 4 02:58:32 CEST 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

On Wed, Apr 04, 2007 at 12:41:42AM +0300, randux at Safe-mail.net wrote:

> It's either a GnuPG problem or an RFC problem. It's possible to add
> or remove or modify text in a clearsigned message.

No, it is not.  The RFC doesn't allow it.  GnuPG doesn't allow it.
Nobody allows it.

I am clearsigning this message.  I challenge you to modify it.  I will
donate $1,000 US to any charity you like if you succeed.  The
definition of success is that:

a) The signature must still verify correctly
and
b) The output of the signature verification in step 'a' still contains
your modification.

Go for it.

> Why all the excuses and flaring tempers...have I insulted anyone?

I think it's that the mistake you're making has been explained over
and over and you're still repeating it.

David
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iEYEAREDAAYFAkYS+DgACgkQ4mZch0nhy8nGtACeLQQuKy8wryUU8sjxubf/uuA+
uT4AnjeoAR7/04F6ZA3/SjzqIwAF8u1L
=e0CQ
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list