1994-09-30 - Re: PGP hole

Header Data

From: danisch@ira.uka.de (Hadmut Danisch)
To: cypherpunks@toad.com
Message Hash: 0bf35ab085525b1e3e6351624840fcbb237faaa536c0bed1a92129ba8618a8d5
Message ID: <m0qqenW-00018RC@elysion>
Reply To: N/A
UTC Datetime: 1994-09-30 10:03:21 UTC
Raw Date: Fri, 30 Sep 94 03:03:21 PDT

Raw message

From: danisch@ira.uka.de (Hadmut Danisch)
Date: Fri, 30 Sep 94 03:03:21 PDT
To: cypherpunks@toad.com
Subject: Re: PGP hole
Message-ID: <m0qqenW-00018RC@elysion>
MIME-Version: 1.0
Content-Type: text/plain



> 2.3a, and most likely earlier versions as well. Apparently, it is possible
> to insert cleartext within a signed message and still receive a good sig
> message upon verification. Interested parties are referred to alt.security.
> pgp for a rather lengthy thread on this subject. I haven't seen anything

I think this was posted as a bug of 2.3 long time ago to alt.security.pgp.

I thought the bug was already fixed...


Hadmut





Thread