<<< Date Index >>>     <<< Thread Index >>>

Re: PGP output lines...



At  3:57 PM PST on October 30 David Yitzchak Cohen sent off:
> On Thu, Oct 30, 2003 at 05:42:05PM -0500, Todd wrote:
> 
> > If you aren't going to look at the output of gpg, then you could just
> > 
> >     :unset pgp_verify_sig
> 
> That's not what he means.  (No, I can't read his mind.  I just remember
> the last time he asked this question ... and my answer, too. . .)

Was that the same thread where I pointed out that there's more behind the
lines than appears at first glance?

> David: Please file a wishlist "bug" report.  Coding a patch to implement
> that change is trivial for anybody familiar with the relevant code.
> If you file the bug report and nobody else steps forward, email me and
> I'll hack up a patch just out of spite.

If by trivial you include checking if the sender put fake "Good signature"
lines into the plaintext, fine.  And don't forget the cases where some, but
not all, of the plaintext (more likely attachments) is signed.

(No, I'm not the creator of the PGP output lines, and I don't know who is. ;-)