Subject: PGP filter and enclosures

From: [email-masked] (Jan Vilhuber)
Date: 26 Mar 1996 00:47:27 GMT

I get the impression that when signing a message (haven't tried 
encryption), the signature only covers the text part of the email, not 
the enclosure(s). I just tried it (to myself) and the PGP lines (the ones 
with the dashes) seem to be around the message body sans enclosure.

Is this true? This is somewhat undesireable...

P.S. I'm using the scripts posted on here recently. They work well 
otherwise! Thanks!

jan
[email-masked]

---

From: Ed Greshko <[email-masked]>
Date: Wed, 27 Mar 1996 13:09:11 +0800 (GMT)

> P.S. I'm using the scripts posted on here recently. They work well

	Yes, it is true.  Actually, it is desireable from a security
standpoint.

	Each attachment should be signed as a seperate act.  The reason
being that if it were not then detaching the item from the message would
destroy the ability to verify the signature.  This is especially true
when you are attaching documents from more than one source.

	Regards,

		Ed

Edward M. Greshko                       Technical Manager, Electronic Commerce
                                        Control Data Asia/Pacific Region
Voice: +886-2-715-2222 x287             6/F, 131 Nanking East Road, Section 3
FAX  : +886-2-712-9197                  Taipei, Taiwan R.O.C