[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: ClearSig Bug in PGP?

To: [email protected]
Subject: Re: ClearSig Bug in PGP?
From: Derek Atkins <[email protected]>
Date: Wed, 05 Oct 1994 13:03:05 EDT
Cc: [email protected]
In-Reply-To: Your message of "Wed, 05 Oct 1994 09:33:34 PDT." <[email protected]>
Sender: [email protected]

The bug is that you can add text into a clear-signed message that
appears to be real since PGP drops everything before the first empty
line.

The temporary fix is to only read the output from PGP (since the added
text will not be in the output file).

The long-term fix will be in 2.6.2, which will hopefully be released
next week (a message will go out saying when it has been released).
The patch is really too difficult to separate from other patches to
post it separately.

-derek

References:
- ClearSig Bug in PGP?
  - From: [email protected]

Prev by Date: Re: NYT Libertarian News
Next by Date: Tcl citations from Cyphernomicon
Prev by thread: ClearSig Bug in PGP?
Next by thread: Tcl citations from Cyphernomicon
Index(es):
- Date
- Thread