Anthony Mapes [2015-12-24 10:38:28-05] wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA512 > > While we're on the topic of signatures, what do you consider to be > good and bad to include in signatures?
If we change the subject to digital signatures I think that having the
signature in a separate MIME part is the modern way. You had the PGP
signature in the body of the message (and it's fine with me and my mail
client) but separate MIME parts allow clients to display and save
different parts correctly. Raw message data looks like this:
From: [...]
To: [...]
Subject: [...]
Date: [...]
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
micalg=pgp-sha256; protocol="application/pgp-signature"
--=-=-=
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Here's the message body.
--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
[...]
-----END PGP SIGNATURE-----
--=-=-=--
--
/// Teemu Likonen - .-.. <https://github.com/tlikonen> //
// PGP: 4E10 55DC 84E9 DFF6 13D7 8557 719D 69D3 2453 9450 ///
signature.asc
Description: PGP signature
