From: danisch@ira.uka.de (Hadmut Danisch)
Date: Fri, 30 Sep 94 03:03:21 PDT
To: cypherpunks@toad.com
Subject: Re: PGP hole
Message-ID: <m0qqenW-00018RC@elysion>
MIME-Version: 1.0
Content-Type: text/plain



> 2.3a, and most likely earlier versions as well. Apparently, it is possible
> to insert cleartext within a signed message and still receive a good sig
> message upon verification. Interested parties are referred to alt.security.
> pgp for a rather lengthy thread on this subject. I haven't seen anything

I think this was posted as a bug of 2.3 long time ago to alt.security.pgp.

I thought the bug was already fixed...


Hadmut