From: Tony Finch
Sent: Sunday, September 19, 2004 5:46 PM
On Sun, 19 Sep 2004, Andrew Newton wrote:
Really? Have you ever sent a message through Yahoo Groups? Many of the
public list services like to tack adds on to the email causing
the signatures not to validate.
The framing used by PGP means that mailing list bumf falls outside the
signed portion of the message, so the signature is robust.
I believe that's true of the in-line PGP signatures only. I don't think the
PGP attachment signature is robust in the same way, but I'm willing to be
corrected on that.
S/MIME is easily broken by mailing list additions at the end of the text.
--
Seth Goodman