[pgpenvelope-users] Another suggestion, different issue.
Brought to you by:
ftobin
Menu
▾
▴
[pgpenvelope-users] Another suggestion, different issue.
|
From: L. S. <ra...@qu...> - 2000-02-16 07:07:52
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 When I send mail to myself, signed, and run it through the PGPEnvelope filter, I notice this: - -----BEGIN PGPENVELOPE INFORMATION----- gpg: Signature made Wed Feb 16 01:57:33 2000 EST using DSA key ID 09AC0A6A gpg: Good signature from "L. Sassaman <ra...@qu...>" gpg: aka "L. Sassaman <lh...@in...>" gpg: aka "L. Sassaman <lh...@qu...>" gpg: aka "QuickieNet System Administrator <sys...@qu...>" gpg: aka "L. Sassaman <sys...@qu...>" gpg: aka "L. Sassaman <le...@de...>" gpg: aka "L. Sassaman <ra...@de...>" gpg: aka "Thawte Freemail Member <ra...@qu...>" gpg: aka "Leonard Harris Sassaman <ra...@qu...>" gpg: aka "L. Sassaman <lh...@ta...>" gpg: aka "L. Sassaman <ra...@ta...>" gpg: aka "L. Sassaman <LSa...@un...>" - -----END PGPENVELOPE INFORMATION----- Which looks fine. And that is the problem... These: gpg: aka "L. Sassaman <lh...@in...>" gpg: aka "L. Sassaman <lh...@ta...>" gpg: aka "L. Sassaman <ra...@ta...>" gpg: aka "L. Sassaman <LSa...@un...>" Are revoked. There should be a check against self-signature revokations on UIDs, and this should be displayed as a warning (or they should simply not appear in the list). I have a feeling, as I am writing this, that this is really a GnuPG flaw, and not a PGPEnvelope flaw, though possibly PGPEnvelope could compensate for it. - --Len. __ L. Sassaman System Administrator | "All of the chaos Technology Consultant | Makes perfect sense..." icq.. 10735603 | pgp.. finger://ns.quickie.net/rabbi | --Joe Diffie -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.1 (GNU/Linux) Comment: OpenPGP Encrypted Email Preferred. iD8DBQE4qkwtPYrxsgmsCmoRAuiXAKCUcwf0S3oxJxD+xzv/9JC7IDfoPgCg81Po e46ScxLW2KfXlIH4wEBcTeg= =UPId -----END PGP SIGNATURE----- |
