[29303] in bugtraq
Re: Potential PGP signature verification problem?
daemon@ATHENA.MIT.EDU (Florian Weimer)
Fri Mar 14 11:49:24 2003
To: Peter Hanecak <hanecak@megaloman.com>
From: Florian Weimer <Weimer@CERT.Uni-Stuttgart.DE>
Date: Fri, 14 Mar 2003 09:14:41 +0100
In-Reply-To: <Pine.LNX.4.44.0303130827560.5265-100000@intraserv.md.megaloman.sk> (Peter
Hanecak's message of "Thu, 13 Mar 2003 08:47:46 +0100 (CET)")
Message-ID: <877kb2fjpq.fsf@Login.CERT.Uni-Stuttgart.DE>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Peter Hanecak <hanecak@megaloman.com> writes:
> sounds to me like MUA problem, not PGP problem.
Last tiem I checked, PGP tried to implement MUA support without any
actual support from the MUA. So it's probably a PGP problem. (Of
course it's questionable to hack security-critical features into other
programs in ways like this -- we've seen countless instances of
surprising features of such combinations.)
BTW: Maybe Symantec can reconsider the "Strip Cc" BUGTRAQ policy. It
is a bit annoying when you post follow-ups, and I don't see the point
in restricting (reasonable) cross-posting.
--
Florian Weimer Weimer@CERT.Uni-Stuttgart.DE
University of Stuttgart http://CERT.Uni-Stuttgart.DE/people/fw/
RUS-CERT fax +49-711-685-5898
