Michael Leone on Fri, 12 Jan 2001 15:07:18 -0500

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] GPG signature question

----- Original Message -----
From: <Darxus@ChaosReigns.com>
To: <plug@lists.phillylinux.org>
Sent: Friday, January 12, 2001 2:31 PM
Subject: Re: [PLUG] GPG signature question

> On 01/12, Michael Leone wrote:
> > Does your gpg key signature ever change? If not, what would stop me from
> > copying a signature that appeared in some other email, and pasting it at
> > bottom of this mail? How would you know that I've pasted somebody else's
> > signature, and not my own?
> >
> > I'm presuming that gpg won't be fooled by this, and so this won't really
> > work; I was just wondering WHY. Also HOW.
> The signature includes a checksum of what it signed.

Ah, the the signature DOES change, each time you use it. It's customized for
each use.


Philadelphia Linux Users Group       -      http://www.phillylinux.org
General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug