From: Meng Weng Wong
Sent: Thursday, May 06, 2004 9:25 AM
... The Right Way to
append that sort of thing to s/mime messages is to create another text
part outside the signature section. It's on the to-do list.
Even if you did this, the message would appear to the end-user MUA with a
signature failure due to content changes, wouldn't it? Would you be able to
tell the difference between an additional unsigned text section and a
modified signed section at the MUA?
BTW, I also find the same behavior as PHB with regard to From: using Outlook
as my MUA. If the address in From: does not match the address in the cert,
Outlook refuses to sign the message. I know that it ignores Reply-To:, but
I don't know what it does with Sender:.
--
Seth Goodman