full-disclosure - Re: PGP attachments (was: NEVER open attachments)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: petard at freeshell.org (petard)
Subject: Re: PGP attachments (was: NEVER open attachments)

On Fri, Mar 19, 2004 at 09:53:36PM -0700, gadgeteer@...gantinnovations.org wrote:
> Early versions of Evolution use to support inline signing.  But in 
> their efforts to emulate M$ this went away.  Eventually they got so 
> good at pretending be M$ that I had to switch to another email client 
> so that I could get my work done.
What do you mean, exactly, by "emulate M$" in this context? Due to a
limitation in the way the MIME data is exposed to add-ins, LookOut can
*only* support inline signing. It cannot presently support PGP/MIME,
which is the newer standard. (This is a serious defect; it means you
can't PGP sign attachments.) Adding inline signing is an attempt to
improve interop with MS and others. The reason it went away was tied to
problems supporting multibyte character sets with inline signing.

regards,

petard

-- 
If your message really might be confidential, download my PGP key here:
http://petard.freeshell.org/petard.asc
and encrypt it. Otherwise, save bandwidth and lose the disclaimer.