SecurityFocus

Potential PGP signature verification problem? Mar 12 2003 07:59PM
Avri Schneider (avri_schneider yahoo com) (1 replies)

Re: Potential PGP signature verification problem? Mar 13 2003 07:47AM
Peter Hanecak (hanecak megaloman com) (1 replies)

Re: Potential PGP signature verification problem? Mar 14 2003 08:14AM
Florian Weimer (Weimer CERT Uni-Stuttgart DE)

Peter Hanecak <hanecak (at) megaloman (dot) com [email concealed]> writes:

> sounds to me like MUA problem, not PGP problem.

Last tiem I checked, PGP tried to implement MUA support without any
actual support from the MUA. So it's probably a PGP problem. (Of
course it's questionable to hack security-critical features into other
programs in ways like this -- we've seen countless instances of
surprising features of such combinations.)

BTW: Maybe Symantec can reconsider the "Strip Cc" BUGTRAQ policy. It
is a bit annoying when you post follow-ups, and I don't see the point
in restricting (reasonable) cross-posting.

--
Florian Weimer Weimer (at) CERT.Uni-Stuttgart (dot) DE [email concealed]
University of Stuttgart http://CERT.Uni-Stuttgart.DE/people/fw/
RUS-CERT fax +49-711-685-5898

[ reply ]