Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] STRONGER POLICY for gpg signatures to replace MD5[*] and ALSO new SOURCE_HASH support

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: "Jeremy Blosser (emrys)" <jblosser-smgl AT firinn.org>
  • To: sm-discuss AT lists.ibiblio.org
  • Subject: Re: [SM-Discuss] STRONGER POLICY for gpg signatures to replace MD5[*] and ALSO new SOURCE_HASH support
  • Date: Tue, 30 Aug 2005 12:41:31 -0500

On Aug 30, Mads Laursen [smgl AT dossen.dk] wrote:
> - I seem to recall that gpg allows notations, that can provide a link
> (cryptographically secure) between a signature and a document, that
> describes the meaning and context of this signature. That document
> could be the standard.

You can use --comment to have a string inserted into the plaintext
signature, but it's not secure. Changing it won't break the signature.

Attachment: pgpgMV5GA12bi.pgp
Description: PGP signature




Archive powered by MHonArc 2.6.24.

Top of Page