Derek, et al --

...and then Derek D. Martin said...
% 
% At some point hitherto, Justin R. Miller hath spake thusly:
% > Thus spake Derek D. Martin ([EMAIL PROTECTED]):
% > 
% > > > The "s" in the index is sufficient for me if I want to know if a
% > > > message is signed.
% > > 
% > > Perhaps, but it's not enough to tell you if the message was signed by
% > > the person it clamed to be signed by.  
% > 
% > It changes from 's' to 'S' upon verification. 
% 
% Perhaps, but unless I misunderstand how mutt verifies the signature,
% even that isn't an indication that the mail was signed by the person
% the e-mail claims to be from.  AFAIU, it is only an indication that
...
% Remember, the point of signing a message is to prove, as conclusively
% as possible, that the e-mail originated from whence it claimed to have
% originated.

That, IMHO, is not the case; the point of signing a message is to prove
that the contents were written or approved by the person who signed it.
I could write and sign something and have my secretary or brother or
grass-roots supporters send it out and both the signature and the content
would be no less valid.


% 
% -- 
% Derek Martin               [EMAIL PROTECTED]    
% ---------------------------------------------
% I prefer mail encrypted with PGP/GPG!
% GnuPG Key ID: 0x81CFE75D
% Retrieve my public key at http://pgp.mit.edu
% Learn more about it at http://www.gnupg.org


:-D
-- 
David T-G                      * It's easier to fight for one's principles
(play) [EMAIL PROTECTED] * than to live up to them. -- fortune cookie
(work) [EMAIL PROTECTED]
http://www.justpickone.org/davidtg/    Shpx gur Pbzzhavpngvbaf Qrprapl Npg!

Attachment: msg22654/pgp00000.pgp
Description: PGP signature

Reply via email to