This might be somewhat inconvenient, but how about including MD5 sums of the attachments in the body of the message, which is then signed? (i.e. md5sums *.jpg + cutnpaste)
But since you will do a lot of signing in the future, I'd suggest using a mailer that handles gpg, as the others have suggested :) Quoting Britton <[EMAIL PROTECTED]>: > > see any gpg options to mh, and if I include my scanned identification as > an attachment, then it will not count as input to the hash of the message. Regards, Stefan

