[Please don't cross-post!]

On Tue,  5 Feb 2019 12:47, gnupg-users@gnupg.org said:

> THE DATE PROBLEM. Only the body of the email is signed, not the
> envelope headers, namely the subject and intended recipients, and

Sure, mail headers are subject to changes.  For example by mailing list
software or simpluy by forwarding mail.  Tehre is a reason that OpenPGP
signatures carry a creation date.

> THE STRIPPING PROBLEM. Currently, each attachment is signed separately
> and independently by the PGP-MIME standard. It would be preferable to

Nope.  Please actually read RFC3156 and check compliant implementation -
All I known get it right.


Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.

Attachment: signature.asc
Description: PGP signature

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to