Re: Inline PGP signing in a text only environment

From: Russ Allbery (rra@stanford.edu)
Date: Thu Dec 25 2003 - 16:44:32 CST


J B Moreno <planb@newsreaders.com> writes:

> I'd recommend something that puts the signature in the headers

If you have the luxury of writing all of your own processing software at
both ends, this is a possible solution. There is, however, no standard
for putting a signature in a header, so if you expect your signatures to
work with standard software, this is bad advice at the present time.

(With one possible exception: A small but growing subset of Usenet news
readers are capable of verifying X-PGP-Sig headers, as used with Usenet
control messages, so if that signature does what you want and your users
are using tin, Gnus, or the other small number of news readers that
support those signatures, it may be a possible alternative.)

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>



This archive was generated by hypermail 2.1.7.