-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
NotDashEscaped: You need GnuPG to verify this message

On Wed, 24 Dec 2003 23:50:26 +0100, Jan Alboszta <janek@usunto.gwozdzie.dhs.org> wrote:
>> complaints has to be before the text it signs. Maybe the signature
>> itself can be in an attachment, but the body must have the start and
>> end markers.
>
> Are You sure? Why don't think about it once again?
> For some reason your mail program knows where headers section ends and
> message body beggins. And all attachments are separated.
> Is it magic? Lucky guess? ....
> When You think about signing one attachment, but with sign in other one.
> No trouble at all. No need for special marking begin and end because they
> are already marked.
> So more posts under that topic and You will be classified as troll.

Are you talking about PGP/MIME or the mythical header-signing AC and rm
have been rabid over?

PGP/MIME isn't appropriate for newsgroups for the simple reason it
requires MIME. MIME in newsgroups ain't cool.

The mythical header-signing that has been discussed here ad naseum isn't
going to work for several reasons. The primary being there's no
standard governing it nor a significant number of news readers capable
today of deciphering it. Technical issues aside, this alone is going to
keep it from becoming an acceptable way of signing a post. There is no
good reason to move the PGP data out of the body except to appease
trolls.

Technically, the header signing has a few issues, as well. Many
individuals subscribe to news services which add a footer to the bottom
of their posts with some sort of advertisement. Without clearly marking
in the body where the original body ended with something (hmm... maybe
END PGP SIGNED MESSAGE or something similar?;-), such users are going to
find their posts un-verifiable. Not good, IMHO.

I have yet to really understand what the problem with PGP signing inline
is, really. It's been hashed out so many times here, but has never come
to a real point - the thing is, our trolls don't dislike the use of PGP
so much as they see PGP as a vehicle to use to attack us. Oh well,
they're well killfiled now, anyway.

--
Rob | If not safe,
Email and Jabber: | one can never be free.
athlonrob at axpr dot net |
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/6it0hm6KEoOOAe0RAkOYAKC3yB5rdJkFAuLpozQs7GS88BTgOg Cg1N6U
Jry3XcQgauKvQGTQUrrPX18=
=9IZM
-----END PGP SIGNATURE-----