2014-667rhzu3dc-lists-groups at riseup.net
Sun Jun 25 13:11:49 CEST 2017
-----BEGIN PGP SIGNED MESSAGE-----
On Friday 23 June 2017 at 12:49:28 PM, in
<mid:2460ac1a-55f7-79d9-af02-e6b1bde30394 at digitalbrains.com>, Peter
> When you say "not altered in transit", that would
> very much depend on
> your definition of "in transit". If a Man in the
> Middle changes both the
> text and the signature, I'd say it /was/ altered in
> transit. But it was
> altered in such a way that it once again has an
> "UNTRUSTED Good"
> signature, by a different (attacker-controlled) key.
> So IMO, "good" doesn't even mean "not altered in
> transit", as you said.
Fair enough. "In transit" was not the best choice of words. But "good
signature" _does_ mean when the signature was verified the message had
not been altered since it was signed. Or maybe that the original
message data has been replaced with new message data that hashes to
the same value.
MFPA <mailto:2014-667rhzu3dc-lists-groups at riseup.net>
Keep them dry and don't feed them after midnight
-----BEGIN PGP SIGNATURE-----
-----END PGP SIGNATURE-----
More information about the Gnupg-users