Re: comment and version fields. [Long]

2007-04-04 Thread Werner Koch
On Tue, 3 Apr 2007 17:57, [EMAIL PROTECTED] said: > It is well known to people who have followed PGP & GPG for years, some > who didn't watch as well will see that this 'flaw' has been patched on > multiple occasions so it is nothing to worry about. It is not a flaw but a requirement of the stan

Re: comment and version fields. [Long]

2007-04-03 Thread John Clizbe
Stan Rydzewski wrote: >> Not that I take much glee in knowing there are things I can read on >> linux that Windows users can't, but I thought that the man pages were >> generally included with the windows builds and you could open them >> with a text editor. > > Yes. They don't format as nicely,

Re: comment and version fields. [Long]

2007-04-03 Thread John Clizbe
Robert J. Hansen wrote: > Matt <[EMAIL PROTECTED]> wrote: > > Please, if you want to continue to beat this drum, please beat it in > front of the right people. > >> Fixing the RFC is probably not an option, but being more clear in user >> documentation is. Not just the official GnuPG manual, but

Re: comment and version fields. [Long]

2007-04-03 Thread David Shaw
On Tue, Apr 03, 2007 at 09:57:25AM -0600, Matt wrote: > I buy a drill, I know a hand crank or motor turns the bit, and the bit > makes holes. I buy a refrigerator, its job is to keep food cool, I have > now idea how it turns electricity into cooling - and it is not addressed > in the manual, as lo

Re: comment and version fields. [Long]

2007-04-03 Thread John Clizbe
Todd Zullinger wrote: > Matt wrote: > >> There are man pages, which can't be read under windows > > Not that I take much glee in knowing there are things I can read on > linux that Windows users can't, but I thought that the man pages were > generally included with the windows builds and you coul

Re: comment and version fields. [Long]

2007-04-03 Thread Robert J. Hansen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Remco Post wrote: > Now, this is true for you and me. Now, take my secretary as an example. > She has not installed any pgp/gpg aware software, nor is she an > experienced user of cryptographic tools. Do you expect her to correctly > interpret these

Re: comment and version fields. [Long]

2007-04-03 Thread Remco Post
Robert J. Hansen wrote: >> Does it say that the comment lines I read >> in the (clearsigned) message before running it through GPG are not >> part >> of the signed message, that any third party between the sender and me >> could have altered them? > > I would think the line "- BEGIN PGP SIGNAT

Re: comment and version fields. [Long]

2007-04-03 Thread Stan Rydzewski
> Not that I take much glee in knowing there are things I can read on > linux that Windows users can't, but I thought that the man pages were > generally included with the windows builds and you could open them > with a text editor. Yes. They don't format as nicely, but you can read them. In any

Re: comment and version fields. [Long]

2007-04-03 Thread Todd Zullinger
Matt wrote: > Now I haven't read the OpenPGP RFC, but if it is anything like the other > RFCs that I've looked at (but been unable to read) its language is the > worst possible combination between a lawyer and an engineer. Designed to > kill all interest in the subject before getting down to the su

Re: comment and version fields. [Long]

2007-04-03 Thread Robert J. Hansen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 > Does it say that the comment lines I read > in the (clearsigned) message before running it through GPG are not > part > of the signed message, that any third party between the sender and me > could have altered them? I would think the line "

Re: comment and version fields. [Long]

2007-04-03 Thread Matt
Robert J. Hansen wrote: > This is a nonissue. I can't think of a stronger way to put it. The > mutability of the comment and version string is well known and > clearly documented in the RFC. It is well known to people who have followed PGP & GPG for years, some who didn't watch as well will see