[Subject Prev][Subject Next][Thread Prev][Thread Next][Subject Index][Thread Index]

Re: [LI] [Adminstrativa] Additional policies in place for the LI



I haven't yet seen a situation on the LI mailing list which requires a 
message to be signed.

And sending your PGP key in an e-mail to a public mailing list is
pretty sort of oxygen-starved in any case.

>>>>> "Suresh" == Suresh Ramasubramanian <suresh@xxxxxxxxxx> writes:

    Suresh> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

    >> 1. Use an ASCII armor (--- Begin PGP -- etc) 2. Use PGP/MIME
    >> (RFC 2015) (2) is technically a better option because it allows
    >> you to forward PGP signed emails, and sign mails with
    >> attachments.

    Suresh> The best is to use ASCII armor and keep the pgp sig within
    Suresh> the mail (it will come under your regular .sig - like
    Suresh> this).  On mailing lists at least.

    Suresh> This is because, on the Linux India digest (or any other
    Suresh> majordomo digest) - all attachments (text files / word
    Suresh> docs / s-mime like the PGP keys ..) are automatically
    Suresh> displayed in BASE64 encoded format as ASCII (that is, as
    Suresh> useless junk characters).

    Suresh> In fact, I'm member of several lists where attachments are
    Suresh> streng verboten - there is a blanket ban on them.  There
    Suresh> are also some lists where your .sig MUST stay within 200
    Suresh> chars after a "--" on one line - or the post is bounced.
    Suresh> Some guys are creative enough to do wonders with that
    Suresh> limited .sig

    Suresh> And yes - unless your org / personal situation requires
    Suresh> you to use PGP sigs on every mail you send out (CAUCE has
    Suresh> this policy) I'd recommend NOT using PGP keys - at least
    Suresh> posting on a list.

    Suresh> This just implies that you don't trust someone out here,
    Suresh> and that someone is any day going to post a forged message
    Suresh> in your name to the list (this is known as a Joe Job)

    Suresh> We at CAUCE are regular targets of joe jobs - thanks to
    Suresh> spammers we keep disconnecting.  The last Indian spammer I
    Suresh> got rid of was a Delhi based "web promotion" outfit called
    Suresh> hitsgenerator.Com - hosted by a Delhi based web dev Web
    Suresh> Werks India http:/www.wwindia.com .

    Suresh> I had to escalate my LART (complaint) all the way to their
    Suresh> backbone provider (UUNet) for that one - these guys had
    Suresh> leased space from some small garageroom ISP in the States,
    Suresh> who proved rather uncooperative.  Anyway,
    Suresh> hitsgenerator.com is toast.

    Suresh> - ---s



    Suresh> -----BEGIN PGP SIGNATURE----- Version: PGP 6.0.2 -- QDPGP
    Suresh> 2.60

    Suresh> iQA/AwUBOBYDBZqQidQMDLaoEQIxggCgvbBSbhZh9Sx18bMjswDNG+cakTMAoJrp
    Suresh> 2fBcx+ZC59J/qsmWfH20Aa89 =RT6P -----END PGP SIGNATURE-----

    Suresh> Suresh Ramasubramanian, CAUCE India Suresh@xxxxxxxxxxxxxxx
    Suresh> | Suresh@xxxxxxxxxxx Stop Spam | Join CAUCE |
    Suresh> http://www.cauce.org Phone: +(91-40)3736553/3745398 |
    Suresh> eFax: +(1-603)590-5437 He who breaks a thing to find out
    Suresh> what it is, has left the path of wisdom.  - Gandalf

    Suresh> --------------------------------------------------------------------
    Suresh> The Linux India Mailing List Archives are now available.
    Suresh> Please search the archive at http://lists.linux-india.org/
    Suresh> before posting your question to avoid repetition and save
    Suresh> bandwidth.

--------------------------------------------------------------------
The Linux India Mailing List Archives are now available.  Please search
the archive at http://lists.linux-india.org/ before posting your question
to avoid repetition and save bandwidth.