> Where is the certificate associated with the signature carried? I would > like the originator to be able to include her certificate in the signed > multipart. It is out of band. If you need to get the key of the signatory, you look it up in a directory or ask the sender for it. PGP does not have in-band key certificates. This is considered a feature. -derek