[plug] PGP-signing. Was: Help! Network Problems!

Mike Holland myk at golden.wattle.id.au
Tue Feb 1 15:08:05 WST 2000


On Tue, 1 Feb 2000, Greg Mildenhall wrote:

> It's not encryption, it's a digital signature. It is used to prove that
> the message really was sent by the person claiming to have sent it. I
> certainly wouldn't call it redundant.

Is it redundant if nobody checks it? 

Digital signatures are a great idea, but not in the body of an e-mail.
They are meant for machines to read, and just annoy humans.
  I remember Greg Rose ( http://people.qualcomm.com/ggr/ ) had a system
for adding a dig.sig. as an X-auth: header line. e.g.:

X-Auth: PGPMoose V1.1 PGP Greg_Rose at sydney.sterling.com
        iQBVAwUBMYkcIwhlw9IC/53JAQFVGQIAm/c8gum1IrjuN6bSmGJ45ImNLsWhPlU6
        73Uy8NuYsbX2YvOahkmn0gvRHyLx+2KZoSdsczpcTFnWS9H4Cu3wLA==
        =f3We


Mike Holland <mike at golden.wattle.id.au>            Perth, Australia.
                          --==--






More information about the plug mailing list