PGP hole

[Hadmut Danisch]

> 2.3a, and most likely earlier versions as well. Apparently, it is possible
> to insert cleartext within a signed message and still receive a good sig
> message upon verification. Interested parties are referred to alt.security.
> pgp for a rather lengthy thread on this subject. I haven't seen anything

I think this was posted as a bug of 2.3 long time ago to alt.security.pgp.

I thought the bug was already fixed...


Hadmut