Yes, it does check for PGP signed messages, which is good.

But digitally signed messages (like yours and mine), i.e those that
require the person to buy a digital id, go through a verification
procedure etc, are not given any score - negative or positive.  It just
seemed to me that if someone possesses a digital id and uses it when
sending an email, that should surely be worth some kind of negative
value even if it isn't much.

Daz

> -----Original Message-----
> From: dman [mailto:[EMAIL PROTECTED]]
> Sent: 03 May 2002 01:53
> To: Darren Coleman
> Subject: Re: [SAtalk] Rules for digitally signed messages
> 
> On Fri, May 03, 2002 at 01:20:31AM +0100, Darren Coleman wrote:
> | I would've presumed that SpamAssassin would give a score (presumably
> | negative) for MIME attachments, in particular digitally signed
messages.
> | I can't imagine many spammers going to the trouble of digitally
signing
> | email.. :)
> 
> $ grep PGP /etc/spamassassin/*
> /etc/spamassassin/20_body_tests.cf:rawbody PGP_SIGNATURE /-----BEGIN
PGP
> SIGNATURE-----/
> /etc/spamassassin/20_body_tests.cf:describe PGP_SIGNATURE Contains a
PGP-
> signed message
> /etc/spamassassin/50_scores.cf:score PGP_SIGNATURE -2.095
> 
> It does.  It doesn't actually verify the sig though.  Don't announce
> that too loudly or spammers may start sticking that string in the
> message to take advantage of SA's simplicity in this area.
> 
> -D
> 
> --
> 
> Yes, Java is so bulletproofed that to a C programmer it feels like
being
> in a
> straightjacket, but it's a really comfy and warm straightjacket, and
the
> world
> would be a safer place if everyone was straightjacketed most of the
time.
>                                                       -- Mark
'Kamikaze'
> Hughes
> 
> GnuPG key : http://dman.ddts.net/~dman/public_key.gpg



_______________________________________________________________

Have big pipes? SourceForge.net is looking for download mirrors. We supply
the hardware. You get the recognition. Email Us: [EMAIL PROTECTED]
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to