[Subject Prev][Subject Next][Thread Prev][Thread Next][Subject Index][Thread Index]
Re: [LI] [Adminstrativa] Additional policies in place for the LI
I haven't yet seen a situation on the LI mailing list which requires a
message to be signed.
And sending your PGP key in an e-mail to a public mailing list is
pretty sort of oxygen-starved in any case.
>>>>> "Suresh" == Suresh Ramasubramanian <suresh@xxxxxxxxxx> writes:
Suresh> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
>> 1. Use an ASCII armor (--- Begin PGP -- etc) 2. Use PGP/MIME
>> (RFC 2015) (2) is technically a better option because it allows
>> you to forward PGP signed emails, and sign mails with
>> attachments.
Suresh> The best is to use ASCII armor and keep the pgp sig within
Suresh> the mail (it will come under your regular .sig - like
Suresh> this). On mailing lists at least.
Suresh> This is because, on the Linux India digest (or any other
Suresh> majordomo digest) - all attachments (text files / word
Suresh> docs / s-mime like the PGP keys ..) are automatically
Suresh> displayed in BASE64 encoded format as ASCII (that is, as
Suresh> useless junk characters).
Suresh> In fact, I'm member of several lists where attachments are
Suresh> streng verboten - there is a blanket ban on them. There
Suresh> are also some lists where your .sig MUST stay within 200
Suresh> chars after a "--" on one line - or the post is bounced.
Suresh> Some guys are creative enough to do wonders with that
Suresh> limited .sig
Suresh> And yes - unless your org / personal situation requires
Suresh> you to use PGP sigs on every mail you send out (CAUCE has
Suresh> this policy) I'd recommend NOT using PGP keys - at least
Suresh> posting on a list.
Suresh> This just implies that you don't trust someone out here,
Suresh> and that someone is any day going to post a forged message
Suresh> in your name to the list (this is known as a Joe Job)
Suresh> We at CAUCE are regular targets of joe jobs - thanks to
Suresh> spammers we keep disconnecting. The last Indian spammer I
Suresh> got rid of was a Delhi based "web promotion" outfit called
Suresh> hitsgenerator.Com - hosted by a Delhi based web dev Web
Suresh> Werks India http:/www.wwindia.com .
Suresh> I had to escalate my LART (complaint) all the way to their
Suresh> backbone provider (UUNet) for that one - these guys had
Suresh> leased space from some small garageroom ISP in the States,
Suresh> who proved rather uncooperative. Anyway,
Suresh> hitsgenerator.com is toast.
Suresh> - ---s
Suresh> -----BEGIN PGP SIGNATURE----- Version: PGP 6.0.2 -- QDPGP
Suresh> 2.60
Suresh> iQA/AwUBOBYDBZqQidQMDLaoEQIxggCgvbBSbhZh9Sx18bMjswDNG+cakTMAoJrp
Suresh> 2fBcx+ZC59J/qsmWfH20Aa89 =RT6P -----END PGP SIGNATURE-----
Suresh> Suresh Ramasubramanian, CAUCE India Suresh@xxxxxxxxxxxxxxx
Suresh> | Suresh@xxxxxxxxxxx Stop Spam | Join CAUCE |
Suresh> http://www.cauce.org Phone: +(91-40)3736553/3745398 |
Suresh> eFax: +(1-603)590-5437 He who breaks a thing to find out
Suresh> what it is, has left the path of wisdom. - Gandalf
Suresh> --------------------------------------------------------------------
Suresh> The Linux India Mailing List Archives are now available.
Suresh> Please search the archive at http://lists.linux-india.org/
Suresh> before posting your question to avoid repetition and save
Suresh> bandwidth.
--------------------------------------------------------------------
The Linux India Mailing List Archives are now available. Please search
the archive at http://lists.linux-india.org/ before posting your question
to avoid repetition and save bandwidth.