Robert Menschel wrote:

> I'd gladly sign the rulesets I post with my own PGP signature, to
> authenticate them, but IMO that signature would cause --lint failures.

You can create a detached signature, i.e. using

  gpg --detach-sign foobar.cf

This will create the signature file foobar.sig, and you can use

  gpg --verify foobar.sig foobar.cf

to verify the authenticity of foobar.cf. I'll include both files so
you can try it yourself. The verification should give a message like
this one:

  gpg: Signature made 05/08/04 12:00:32  using DSA key ID 7CACFA02
  gpg: Good signature from "Ralph Seichter <[EMAIL PROTECTED]>"

I'm not sure about the time stamp, it might be displayed in your
local time, but the key ID should of course be 0x7CACFA02.

--
Mit freundlichen Gr��en / Yours sincerely
Dipl. Inform. Ralph Seichter

HORUS-IT
Ahornweg 10
D-57635 Oberirsen
Tel +49 2686 987880
Fax +49 2686 987889
http://horus-it.de/

# $Id: foobar.cf,v 1.23 2004/05/08 09:20:10 Ralph Exp $

header    RS_PHISHING  From =~ /\@(?:paypal|wellsfargo)\.com/i
describe  RS_PHISHING  Suspected phishing attempt
score     RS_PHISHING  4.9

Attachment: foobar.sig
Description: Binary data

Reply via email to