[Dshield] PGP is disappointing

Michael Leone loki at psu.edu
Thu Sep 11 20:19:07 GMT 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

They signed message fingerprint also changes with the message. So it
wouldn't verify if you copied a key from a separate message.
For example my last post has the signature:


iQEVAwUBP2Cgr8u4qMuPoe8vAQJDTQf/fbPcPGC0MW7yA5Ovhdtfkd6V9GxuHI5L
xHHaYg3ye4nWxmy2woc1TIbkbggfnHTEFMO7dvYuY7t/3Llk8UUX7JpcO1GR4+NY
62uHivCk1S1XiFeo4iTbWDIC9VBHxKCqIrHdSD1sN6FVlL58bK8AdboNQsGzQzLe
vcvMsRdM7yZrK836KSLW0OAgKAm1LIivS0T7BnF3tAjgDSDhsu5IVBUS+EOaSf/2
QshYKPABr5ay70jEPPtBwzPGGmGY3AlXkWE2hqo3n1s658k0bQjgUSNAsw34YGlG
o2FSq14zSD4Kf7MXG1hQHiZO4yECKe1F/E7aRsnKv82fbuaKt2m2hw==
=kMmN

But this messages sig would differ slightly.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)

iQEVAwUBP2DYrcu4qMuPoe8vAQKJlQgAqjK49R9doiBuwNV6GXqNQ1MG8GpVeqNN
7lbpnewTrThujliwhLlyOOyICOmb5mtRF8vjlGTAzNMxmDsCbxpaaaKOJ86Q80yh
djF6OrvZbvjIIm6CUokrpaf++ujEg0SuU+saqCwLthOolJUoxpBNE8WcqCH97yS1
yLMvMx20HuDV3P0JNcxgLcCiupeRjOy16UgBecBvxqlXIxtM08Y/iehxtHF9g+v0
5teSizPyS3Doig7JQVSlJhjHdRQXFFVkHbber2X7ON8ZTqV06egI9g7lpqFU2wNj
uYeTcM7C1s6ROy9WSsnCs4mwiwprIQk+YiEs3XvYr/RkmuZbc6mdBQ==
=ofvu
-----END PGP SIGNATURE-----




More information about the list mailing list