Authentication at toad.com: WTF?

Wed Nov 30 14:52:23 PST 1994

-----BEGIN PGP SIGNED MESSAGE-----

> From:          Mark Grant <mark at unicorn.com>

> On Wed, 30 Nov 1994, The new cypherpunks signature checking agent wrote:
> 
> > The below message was found to have a valid signature from "JEFF LICQUIA (CEI)
> > " JLICQUIA at mhc.uiuc.edu.
> 
> If you're going to do this, I'd much prefer that you put this in the
> header or in a Comment: field in the PGP block. My mail program
> automatically verifies all signed messages (except those that get trashed
> by MIME-mailers), but if it's got cack like this at the top of the message
> then it (deliberately) displays the whole thing and doesn't verify the
> signature.
> 
> This is in some respects a bug in my program, however I've been unable to 
> come up with a sensible method of dealing with messages when only part of
> them is signed.

Uh... don't think your program would have done much good with that sig 
anyway.  'Twas a spoof by L. Todd Masco to drive home a point (and a 
well-done spoof, I might add!)

Out of curiosity, exactly what is your program?  What platform does it 
run on?  It might be interesting as a good solution to the auto-reply 
proposal, especially if it can be made cross-platform.