oss-sec mailing list archives

Re: safe use of cleartext signatures?


From: Werner Koch <wk () gnupg org>
Date: Wed, 31 Dec 2025 13:54:23 +0100

On Tue, 30 Dec 2025 15:06, Demi Marie Obenour said:
On 12/30/25 03:47, Werner Koch wrote:
data (with --output FILE).  Actually we have the same problem with MIME
when forwarding a mail.  Not all MUAs correctly mark which parts are
signed by which signature.

What about for detached signatures?

PGP/MIME and S/MIME use detached signature.  There is one MIME object
for the signed text and one MIME object with the signature.


Salam-Shalom,

   Werner

-- 
The pioneers of a warless world are the youth that
refuse military service.             - A. Einstein

Attachment: openpgp-digital-signature.asc
Description:


Current thread: