[pe-users] Re: [pgpenvelope-users] message signed with revoked key

[L. S. <ra...@qu...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ok, but that is a different situation. You are signing with a revoked
key; I as signing with a valid key, with certain revoked uids that GPG was
still listing in the "aka" output as though they were valid.

On Wed, 16 Feb 2000, Frank Tobin wrote:

> -----BEGIN PGPENVELOPE PROCESSED MESSAGE-----
> 
> Frank Tobin, at 01:45 on Wed, 16 Feb 2000, wrote:
> 
> > I'm signing this message with a revoked key of mine; note that this is an
> > RSA key.  Hopefully, GnuPG will tell you (if you have a recent copy of
> > this key from the keyservers) that this key has been revoked.
> 
> As you can see from below, GnuPG for me showed this signature as revoked.
> 
> > -----BEGIN PGPENVELOPE INFORMATION-----
> >
> > gpg: Signature made Wed Feb 16 01:46:02 2000 CST using RSA key ID 49D683A5
> > gpg: Good signature from "Frank J. Tobin <ft...@bi...>"
> > gpg: WARNING: This key has been revoked by its owner!
> > gpg:          This could mean that the signature is forgery.
> > gpg: WARNING: This key is not certified with a trusted signature!
> > gpg:          There is no indication that the signature belongs to the owner.
> > gpg: Fingerprint: 67 E1 E1 E5 28 49 7A 1F  03 7B 36 0D 38 5D 53 28
> >
> > -----END PGPENVELOPE INFORMATION-----
> 
> 
> --
> Frank Tobin		http://www.neverending.org/~ftobin/
> 
> "To learn what is good and what is to be valued,
> those truths which cannot be shaken or changed."  Myst: The Book of Atrus
> 
> OpenPGP:  4F86 3BBB A816 6F0A 340F  6003 56FF D10A 260C 4FA3
> 
> -----BEGIN PGPENVELOPE INFORMATION-----
> 
> gpg: Signature made Wed Feb 16 02:48:04 2000 EST using DSA key ID 260C4FA3
> gpg: Good signature from "Frank J. Tobin <ft...@bi...>"
> gpg:                 aka "Dekan"
> gpg:                 aka "Frank J. Tobin <ft...@ui...>"
> gpg:                 aka "Frank J. Tobin <ft...@ne...>"
> gpg: WARNING: This key is not certified with a trusted signature!
> gpg:          There is no indication that the signature belongs to the owner.
> gpg: Fingerprint: 4F86 3BBB A816 6F0A 340F  6003 56FF D10A 260C 4FA3
> 
> -----END PGPENVELOPE INFORMATION-----
> 
> 
> _______________________________________________
> pgpenvelope-users mailing list
> pgp...@li...
> http://lists.sourceforge.net/mailman/listinfo/pgpenvelope-users
> 

__

L. Sassaman

System Administrator                |  "All of the chaos
Technology Consultant               |   Makes perfect sense..."
icq.. 10735603                      |
pgp.. finger://ns.quickie.net/rabbi |              --Joe Diffie



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.1 (GNU/Linux)
Comment: OpenPGP Encrypted Email Preferred.

iD8DBQE4qq2dPYrxsgmsCmoRAsTEAKCVqGNf+yQWvBuMQ85a7KXjRv8mfgCg/er9
4o8+GXMDOQNVfDGg0EzgOdk=
=Jp8l
-----END PGP SIGNATURE-----