Hi,

I sent an example to somebody, and they forwarded the email back to
me(as a ForwardedMessage.eml), and commented in the forward.
When I sent the email, I signed it.
When they forwarded the email back to me, despite not coming from me and
only being in the ForwardedMessage.eml, I got: "Good signature from
Joshua Rogers (Internot IT) <<removed>> "
<removed> is the email my GPG key has in it.

Is this normal behaviour?
I assume this could be used to impersonate somebody...

Screenshot attached to show what I mean.

Please include me as CC on reply, as I'm not subscribed to this list.

Thanks,
-- 
-- Joshua Rogers <https://internot.info/>

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
enigmail-users mailing list
[email protected]
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Reply via email to