On Sun, May 09, 1999 at 01:22:37PM +0000, Andreas Wessel wrote:
> > > This signature applies to another message
> > > Opening file "/dev/null" type text.
> >
> > The first line means that PGP5 is noisy as hell and that the message
> > itself and the signature are in two pieces. (Normal with PGP-Mime, of
> > course.)
>
> And I thought one of the functions of pgp-signatures is to verify that
> the message wasn't edited and actually comes from a user...
>
> How is that possible, if PGP 5 always tells me that the signature
> doesn't belong to the message? It does verify the sender - but not the
> content of a message - or did I misunderstand something here...?
It is: PGP5 is just reporting that it got two things from mutt:
1) the message
2) the signature
This is as opposed to the 'inline' message/signature combination that
PGP2 did ('clearsign').
It's still verifying it just fine, just being noisy and telling you that
it's a detached signature.
> > It's just the nature of PGP5 to behave that way.
>
> Is there any way to filter these messages or to tell PGP to shut up?
Edit the PGP5 source. You can make the "/dev/null" message go away if
you use a language file for PGP (see the Mutt docs). The other string,
though, is handled somewhat differently and you'll actually have to
patch it out of the code (look for 'PGPMSG_SEPSIG').
--
Brian Moore | "The Zen nature of a spammer resembles
Sysadmin, C/Perl Hacker | a cockroach, except that the cockroach
Usenet Vandal | is higher up on the evolutionary chain."
Netscum, Bane of Elves. Peter Olson, Delphi Postmaster
