Re: Things we should know about PGP
On Wed, May 09, 2012 at 09:17:17PM +0200, Ralf Mardorf wrote:
> Regarding to security. Assumed somebody always sign the mails to a
> mailing list. Isn't it possible that somebody hacks the view of a
> mailing list archive? Make it look like if a nice guy said odd things
> for signed mails. He never did, the mails were not hacked, just the view
> of the web page is hacked.
They could, if you were relying on the mailing list archives to verify
the signatures, but they don't. You can fetch the signature and the
original message (awkward from a web mailing list archive, but Camaleón
has shown a way of doing it with gmane in the past) and perform the
verification yourself.
Reply to: