1. [OT] digital signature security problem? (Tony Steward)
Tony,
Two recent posts here from you showed up at my system with a security flag:
"Digitally signed - signature invalid"; clicking on "continue" at the bottom
of a page of general info about digital signatures, I got this message:
Security Warning
There are security problems with this message.
Please review the highlighted items listed below:
Message has been tampered with
Has anyone else had this happen, or know what's going on?
Dan Moyer
2. Re: [OT] digital signature security problem? (Tony Steward)
Note to self:
It's probably just the topica additions that make the content of Tony's
posts differ from what they were when he digitally signed them.
Note to Tony:
If that's the case, then it's probably not a good idea to digitally sign
posts to Topica?
Dan Moyer
----- Original Message -----
From: "Dan Moyer" <DANIELMOYER at prodigy.net>
To: "EUforum" <EUforum at topica.com>
Sent: Sunday, April 27, 2003 8:41 PM
Subject: [OT] digital signature security problem? (Tony Steward)
>
> Tony,
>
> Two recent posts here from you showed up at my system with a security
flag:
> "Digitally signed - signature invalid"; clicking on "continue" at the
bottom
> of a page of general info about digital signatures, I got this message:
>
> Security Warning
>
> There are security problems with this message.
> Please review the highlighted items listed below:
>
> Message has been tampered with
>
> Has anyone else had this happen, or know what's going on?
>
> Dan Moyer
>
>
>
> TOPICA - Start your own email discussion group. FREE!
>
>
3. Re: [OT] digital signature security problem? (Tony Steward)
On Sun, 27 Apr 2003 20:41:35 -0700, Dan Moyer <DANIELMOYER at prodigy.net>
wrote:
>
> Tony,
>
> Two recent posts here from you showed up at my system with a security
> flag:
> "Digitally signed - signature invalid"; clicking on "continue" at the
> bottom
> of a page of general info about digital signatures, I got this message:
>
> Security Warning
>
> There are security problems with this message.
> Please review the highlighted items listed below:
>
> Message has been tampered with
>
> Has anyone else had this happen, or know what's going on?
Yeah, I got this message too.
--
cheers,
Derek Parnell
4. Re: [OT] digital signature security problem? (Tony Steward)
On Sun, 27 Apr 2003 20:50:54 -0700, Dan Moyer <DANIELMOYER at prodigy.net>
wrote:
>
> Note to self:
>
> It's probably just the topica additions that make the content of Tony's
> posts differ from what they were when he digitally signed them.
>
> Note to Tony:
> If that's the case, then it's probably not a good idea to digitally sign
> posts to Topica?
>
You culd be right, Dan. I had similar problems when using PGP to sign email
that was sent using the Opera email client. Opera has a 'feature' that
concatenates email lines that end in a space character. This caused the
message to be subtly changed and when PGP tried to verify the signed
message, it reported that it had been tampered with.
--
cheers,
Derek Parnell
5. Re: [OT] digital signature security problem? (Tony Steward)
- Posted by euman at bellsouth.net
Apr 28, 2003
This is interesting, I used an older verion of PGP 6.03
(or something close) and never recieved a complaint.
I am concerned about messages that come from
Robert Elia. The messages arive with what appear
to be attachments however, there are no files.
Strange....
Euman
----- Original Message -----
From: "Derek Parnell" <ddparnell at bigpond.com>
To: "EUforum" <EUforum at topica.com>
Sent: Sunday, April 27, 2003 11:59 PM
Subject: Re: [OT] digital signature security problem? (Tony Steward)
> On Sun, 27 Apr 2003 20:50:54 -0700, Dan Moyer <DANIELMOYER at prodigy.net>
> wrote:
>
> >
> > Note to self:
> >
> > It's probably just the topica additions that make the content of Tony's
> > posts differ from what they were when he digitally signed them.
> >
> > Note to Tony:
> > If that's the case, then it's probably not a good idea to digitally sign
> > posts to Topica?
> >
>
> You culd be right, Dan. I had similar problems when using PGP to sign
email
> that was sent using the Opera email client. Opera has a 'feature' that
> concatenates email lines that end in a space character. This caused the
> message to be subtly changed and when PGP tried to verify the signed
> message, it reported that it had been tampered with.
>
> --
>
> cheers,
> Derek Parnell
6. Re: [OT] digital signature security problem? (Tony Steward)
--=======7EFF635B=======
At 07:52 AM 4/28/03 -0400, you wrote:
<snip>
>I am concerned about messages that come from
>Robert Elia. The messages arive with what appear
>to be attachments however, there are no files.
>Strange....
>
>Euman
<snip>
Strange, indeed. I haven't sent any attachments. Euman, only if
you have time, could you possibly zip up the funny messages from me and
send them? I'd like to compare them with what I have stored here in my out
box.
Thanks,
Bob
--=======7EFF635B=======
Content-Type: text/plain; charset=us-ascii; x-avg=cert;
x-avg-checked=avg-ok-EC960E7
Content-Disposition: inline
---
--=======7EFF635B=======--
7. Re: [OT] digital signature security problem? (Tony Steward)
Robert,
there is not much to worry about. When one views your messages using Outlook
Express, it OE shows the 'attachment' icon in the message list, but when one
opens the message there doesn't appear to be any attachment. However, this
is because your email client, QUALCOMM Windows Eudora Version 5.1, is
sending your message in two parts - one containing the main content and a
second that just contains the single line of dashes. OE, trying to be
useful, displays both parts as if the were one (except that it places a
solid horizontal line between them).
The MIME headers for the two parts are ...
First:
> Content-Type: multipart/mixed; x-avg-checked=avg-ok-EC960E7;
> boundary="=======7EFF635B======="
>
>--=======7EFF635B=======
>Content-Type: text/plain; x-avg-checked=avg-ok-EC960E7;
>charset=us-ascii; format=flowed
>Content-Transfer-Encoding: 7bit
and second:
>--=======7EFF635B=======
>Content-Type: text/plain; charset=us-ascii; x-avg=cert;
>x-avg-checked=avg-ok-EC960E7
>Content-Disposition: inline
----------------
cheers,
Derek Parnell
----- Original Message -----
From: "Robert Elia" <bobelia200 at netzero.net>
To: "EUforum" <EUforum at topica.com>
Sent: Tuesday, April 29, 2003 11:25 AM
Subject: Re: [OT] digital signature security problem? (Tony Steward)
> ============ The Euphoria Mailing List ============
>
> At 07:52 AM 4/28/03 -0400, you wrote:
>
> <snip>
>
> >I am concerned about messages that come from
> >Robert Elia. The messages arive with what appear
> >to be attachments however, there are no files.
> >Strange....
> >
> >Euman
>
> <snip>
>
> Strange, indeed. I haven't sent any attachments. Euman, only if
> you have time, could you possibly zip up the funny messages from me and
> send them? I'd like to compare them with what I have stored here in my
out
> box.
>
> Thanks,
>
> Bob
>
>
> ==^================================================================
> This email was sent to: ddparnell at bigpond.com
>
> EASY UNSUBSCRIBE click here: http://topica.com/u/?b1dd66.b2mL5y.ZGRwYXJu
> Or send an email to: EUforum-unsubscribe at topica.com
>
> TOPICA - Start your own email discussion group. FREE!
> http://www.topica.com/partner/tag02/create/index2.html
> ==^================================================================
>
>
----------------------------------------------------------------------------
----
>
> ---
>
8. Re: [OT] digital signature security problem? (Tony Steward)
--=======E8F32AA=======
At 09:05 PM 4/29/03 +1000, you wrote:
>
>Robert,
>there is not much to worry about. When one views your messages using Outlook
>Express, it OE shows the 'attachment' icon in the message list, but when one
>opens the message there doesn't appear to be any attachment. However, this
>is because your email client, QUALCOMM Windows Eudora Version 5.1, is
>sending your message in two parts - one containing the main content and a
>second that just contains the single line of dashes. OE, trying to be
>useful, displays both parts as if the were one (except that it places a
>solid horizontal line between them).
>
>The MIME headers for the two parts are ...
<snip>
Thanks very much for the explanations, Derek and Ricardo.
Bob
--=======E8F32AA=======
Content-Type: text/plain; charset=us-ascii; x-avg=cert;
x-avg-checked=avg-ok-68393C48
Content-Disposition: inline
---
--=======E8F32AA=======--
