Date: Fri, 09 Feb 2001 12:34:37 -0800 From: Kris Kennaway <kris@obsecurity.org> To: Eric Cholet <cholet@logilune.com> Cc: security@FreeBSD.ORG Subject: Re: FreeBSD Ports Security Advisory: FreeBSD-SA-01:INSERT_NUMBER_HERE Message-ID: <20010209123436.A64466@mollari.cthul.hu> In-Reply-To: <2488141552.981740685@[192.168.1.2]>; from cholet@logilune.com on Fri, Feb 09, 2001 at 05:44:45PM %2B0100 References: <200102082014.PAA29877@vws3.interlog.com> <2488141552.981740685@[192.168.1.2]>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On Fri, Feb 09, 2001 at 05:44:45PM +0100, Eric Cholet wrote: > I received the following, what worries me is that the PGP signature > verified, and it's not April 1st. WTF ?? Checking the mail headers shows you that it's spoofed - it's trivial to do this with email, which is why we PGP sign them. All advisories released by FreeBSD are signed with the security officer's PGP key, anything which is not is a fake. Kris [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE6hFRcWry0BWjoQKURArG9AJ9K4JYcIq1wSmJFfJeEKef15P50iwCgoZs9 VmapZK+inKheyvC6jP3CjUQ= =XFpX -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010209123436.A64466>