email bot for PGP/MIME PGP/Inline conversion
Doug Barton
dougb at dougbarton.us
Mon Jul 14 22:10:22 CEST 2014
On 07/14/2014 10:49 AM, Schlacta, Christ wrote:
> Verify, strip, resign.
That would be exactly the wrong way to do it. The only reasonably secure
way, and the only way anyone knowledgeable about cryptography would
accept, is to synthesize an inline message which contained the original
signature.
Your points about the bot becoming compromised are exactly why not to do
what you suggested.
Doug
More information about the Gnupg-users
mailing list