From owner-freebsd-questions Tue Aug 7 16:23:30 2001 Delivered-To: freebsd-questions@freebsd.org Received: from guru.mired.org (okc-27-141-144.mmcable.com [24.27.141.144]) by hub.freebsd.org (Postfix) with SMTP id B6AD637B405 for ; Tue, 7 Aug 2001 16:23:25 -0700 (PDT) (envelope-from mwm@mired.org) Received: (qmail 90912 invoked by uid 100); 7 Aug 2001 23:23:24 -0000 From: Mike Meyer MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <15216.30828.442770.319628@guru.mired.org> Date: Tue, 7 Aug 2001 18:23:24 -0500 To: "Thomas Beer" Cc: questions@freebsd.org Subject: Re: Fw: FreeBSD Security Advisory FreeBSD-SA-01:52.fragment In-Reply-To: <10263130@toto.iv> X-Mailer: VM 6.90 under 21.1 (patch 14) "Cuyahoga Valley" XEmacs Lucid X-face: "5Mnwy%?j>IIV\)A=):rjWL~NB2aH[}Yq8Z=u~vJ`"(,&SiLvbbz2W`;h9L,Yg`+vb1>RG% *h+%X^n0EZd>TM8_IB;a8F?(Fb"lw'IgCoyM.[Lg#r\ Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Thomas Beer types: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hi, > > can anyone confirm, that this pgp sign advisory is valid? > > Thanks Tom > > > > > >*** PGP Signature Status: bad > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > > > >*** Signer: FreeBSD Security Officer > >*** Signed: 07.08.01 01:07:38 > >*** Verified: 07.08.01 20:15:15 > >*** BEGIN PGP VERIFIED MESSAGE *** [Rest deleted.] Comment 1) If you really want people to confirm a PGP signature, you need to send the message unmodified. That means you can't send it quoted by your mailer, or in mangled in any other way; you have to send it as an attachement. Comment 2) Asking others to verify a signature doesn't say a thing about the validity of the signature. If they say it's fine for them, that means you need to figure out why your software is complaining about the signature and verify it yourself, *not* trust it. http://www.mired.org/home/mwm/ Independent WWW/Perforce/FreeBSD/Unix consultant, email for more information. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message