-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, Apr 28, 2007 at 10:04:22PM -0400, Herbert Graf wrote:
> On Sat, 2007-04-28 at 21:40 -0400, pete@petertodd.ca wrote:
> > Just wondering about the current status of email clients, you know,
> > actually following standards...
> > 
> > There should be a pgp signature attached to this email, and all email
> > clients should display this text properly.
> > 
> 
> The text wasn't encrypted, so it displaying properly doesn't surprise
> me.
> 
> I do get an error (invalid signature) stating the following:
> 
> gpg: no valid OpenPGP data found.
> gpg: the signature could not be verified.
> Please remember that the signature file (.sig or .asc)
> should be the first file given on the command line.

Just noticed that this list completely messes up the mime stuff when it
adds it's own signature at the end. So it's definetely not gonna work.
This one is done with an inline signature, so this should work.

> Personally, I've never understood the point of "signing" email messages
> on a public list, but that's just me.

When I was more of a computer type I used to sign absolutely every
email, but stopped when I started posting to forums, like piclist. I've
seen some instances where it's come in handy when people have tried to
forge emails. But it's damn rare for it to be of use, like most anything
security related it's 99% paranoia; this time I was more curious about
the current state of standards support.

That said I was *damn* glad every email and any other type of sensitive
file between I and my old employer was encrypted when our main server
got broken into a few years ago. It's why I'm still carefull about only
working on sensitive data, like ssh access keys and financial stuff, on
secure computers. I'm also looking into monotone as my revision control
system for some stuff, it keeps a digitally signed history of everything
such that tampering is basically impossible. Guards against any
inadvertaint data corruption too while it's at it.

- -- 
http://petertodd.ca
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGNAoR3bMhDbI9xWQRAkiVAJ0fXMT0sQJoF6DhDoyDWR89AY6lLwCgh6NC
0b2KyL/uKuTve7R82+l1aM0=
=puxT
-----END PGP SIGNATURE-----
-- 
http://www.piclist.com PIC/SX FAQ & list archive
View/change your membership options at
http://mailman.mit.edu/mailman/listinfo/piclist