Re: Authentication at toad.com: WTF?

17 Dec 2003

      -----BEGIN PGP SIGNED MESSAGE-----
...
From:          Mark Grant <mark@unicorn.com>
...
On Wed, 30 Nov 1994, The new cypherpunks signature checking agent wrote:
...
The below message was found to have a valid signature from "JEFF LICQUIA (CEI)
" JLICQUIA@mhc.uiuc.edu.
If you're going to do this, I'd much prefer that you put this in the
header or in a Comment: field in the PGP block. My mail program
automatically verifies all signed messages (except those that get trashed
by MIME-mailers), but if it's got cack like this at the top of the message
then it (deliberately) displays the whole thing and doesn't verify the
signature.
This is in some respects a bug in my program, however I've been unable to 
come up with a sensible method of dealing with messages when only part of
them is signed.
Uh... don't think your program would have done much good with that sig 
anyway.  'Twas a spoof by L. Todd Masco to drive home a point (and a 
well-done spoof, I might add!)

Out of curiosity, exactly what is your program?  What platform does it 
run on?  It might be interesting as a good solution to the auto-reply 
proposal, especially if it can be made cross-platform.