Re: PGP spoof decrypted output?

[Rich Henning <vulnerable () fast net>]

On Fri, Jun 07, 2002 at 01:50:57PM +0200, Olaf Kirch wrote:
> [-- PGP output follows (current time: Fri Jun  7 13:45:05 2002) --]
> gpg: Signature made Fri Jun  7 13:44:59 2002 CEST using DSA key ID DEADBEEF
> gpg: Good signature from "Olaf Kirch <okir () caldera de>"
> [-- End of PGP output --]
>
> [-- The following data is signed --]
>
> Of course, this sort
> of spoof will only work on mailers such as mutt where you cannot
> clearly tell PGP output from message content (and you have to pay attention
> to other cues, such as the "s" flag shown in the mail folder listing).

Also, in mutt, pgp signatures are displayed as attachments (or in my
config they are).  Your "spoof" was displayed as plain text and not
highlighted as an attachment.

-- 
[ rich henning      ]
[ henninrp () fast net ]