>>> Testing new mail server. >> >> This email is not legitimate---it did not originate from rms. The headers >> indicate it comes from the same host that attempted to imitate bill-auger >> on gnu-linux-libre list. >> >> I'll forward to the appropriate people. This is a significant problem. > > This made me extremely curious: why does neither gnu.org sign mail > server-side with DKIM, nor RMS sign his own with GPG? Is there any idea > behind it?
We're discussing this now with rms and the FSF. As far as why things are the way they are today, I can't answer that. It dates back to a different time of ITS and PDP-10s ..... Just like when gnu.org didn't require passwords to login.
