On 11/9/06 2:54 AM, "Stefan Schlott" <[EMAIL PROTECTED]> wrote:

> Another possible problem:

And yet another problem:  the proliferation of different ways to create
signed messages, and recognizing them successfully.

I could sign messages at least three ways just using Apple's Mail.app:
   GPG with a suitable plug-in (what I do) in
     SMIME form
     BEGIN SIGNED MESSAGE form
  Whatever is native to Mail.app (involves getting a [free] personal
certificate from Thawte, and putting it into the keychain.  Signing is
automatic at that point).  I don't know what format that produces--I've been
meaning to find out.

(No, you won't find me on the public key servers--we use this inhouse only.)

I think all traces of the signature need to be stripped after it is used for
verification (but I could be wrong).

All that (and the other problems cited in this thread) aside, I advocated
this idea about 5 years ago, and still favor it.

  --John


_______________________________________________
Mailman-Developers mailing list
Mailman-Developers@python.org
http://mail.python.org/mailman/listinfo/mailman-developers
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: 
http://www.mail-archive.com/mailman-developers%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-developers/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp

Reply via email to