2.3a, and most likely earlier versions as well. Apparently, it is possible to insert cleartext within a signed message and still receive a good sig message upon verification. Interested parties are referred to alt.security. pgp for a rather lengthy thread on this subject. I haven't seen anything

I think this was posted as a bug of 2.3 long time ago to alt.security.pgp. I thought the bug was already fixed... Hadmut