full-disclosure - PGP attachments (was: NEVER open attachments)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20040325120009.GB24228@suespammers.org>
From: rodrigob at suespammers.org (Rodrigo Barbosa)
Subject: PGP attachments (was: NEVER open attachments)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, Mar 20, 2004 at 12:14:10PM +0100, Nico Golde wrote:
> inline signing sucks, because there are not many mailers which can
> verify inline signings.

Actually, there is a procmail workaround (for those who can use it) for
this issue:

# PGP
:0
* !^Content-Type: message/
* !^Content-Type: multipart/
* !^Content-Type: application/pgp
{
        :0 fBw
        * ^-----BEGIN PGP MESSAGE-----
        * ^-----END PGP MESSAGE-----
        | formail \
            -i "Content-Type: application/pgp; format=text; x-action=encrypt"

        :0 fBw
        * ^-----BEGIN PGP SIGNED MESSAGE-----
        * ^-----BEGIN PGP SIGNATURE-----
        * ^-----END PGP SIGNATURE-----
        | formail \
            -i "Content-Type: application/pgp; format=text; x-action=sign"
}

- -- 
Rodrigo Barbosa <rodrigob@...spammers.org>
"Quid quid Latine dictum sit, altum viditur"
"Be excellent to each other ..." - Bill & Ted (Wyld Stallyns)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFAYsnJpdyWzQ5b5ckRAtX+AJ9JvBpjHwh5atIZAY8y8od8Vlg4vwCfaQxp
ibXbv7rYwn0A4uba5wO3C+E=
=J//X
-----END PGP SIGNATURE-----