From: cactus@hks.net
Date: Fri, 2 Dec 94 12:11:53 PST
To: cypherpunks@toad.com
Subject: Disclaimer within signed body?
Message-ID: <199412022016.PAA16908@bb.hks.net>
MIME-Version: 1.0
Content-Type: text/plain


-----BEGIN PGP SIGNED MESSAGE-----


It's been suggested that I put my "signature disclaimer" within the signed
block.  There are several pluses and minuses to this, and I wanted to see
what others think (As an aside, by the way, I think the aesthetics of
the output are important).

As Eric pointed out to me last night, in general it's bad to modify the body
of a message.  I think that what I've been doing is fine, as the clear
distinction betweem original message and additional stuff is maintained.

However: the disclaimer should really be bound to the signature.  Using the
"comment" block won't do this, since PGP does not use it as part of the
signature.

Additionally, people whose software runs the messages through PGP will never
see the disclaimer if it's outside of the signed block.

What are folks' opinions on this?  My options are:

	- Do nothing.  Memory and the general appearance of the disclaimer
		are enough that people won't be fooled by a message with
		a removed disclaimer.

	- Put the disclaimer within the signature block.  In essence, doing
		nothing as above, but that's what the comment block is 
		there for and it might look nicer.

	- Put the disclaimer at the top of the signed body.  Ugly, since
		it immediately forces its presence in a message, but effective
		for the same reason.

	- Put the disclaimer at the bottom of the signed body.  It's still
		modifying the signed body, but in a much less obtrusive 
		manner.

Input?
- --
Todd Masco     | "Roam home to a dome, Where Georgian and Gothic once stood
cactus@hks.net |  Now chemical bonds alone guard our blond(e)s,
cactus@bb.com  |  And even the plumbing looks good."  - B Fuller

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQBFAwUBLt+AfCoZzwIn1bdtAQF0uQF/R2+Wc4tKXs0/+Qc79ln01EUOT8seW4wC
tKLa8H8CGAI33Exh/FeMvtYjnUEdPcXL
=5852
-----END PGP SIGNATURE-----

[This message has been signed by an auto-signing service.
 A valid signature means only that it has been received at
 the address belonging to the signature and forwarded.]