Daniel Kahn Gillmor personal blog

Inline PGP signatures considered harmful

dkg.fifthhorseman.net 2 min read

People often suggest that inline PGP signatures in e-mail are somehow more compatible or more acceptable than using PGP/MIME . This is a mistake. Inline PGP signatures are prone to several failure modes, up to and including undetectable message tampering.

Points

109

HN comments

20

Submissions

1

Cited by

0 commenters

Security & PrivacyNetworking & Internet2014

Related posts from the same era

Launching in 2015: A Certificate Authority to Encrypt the Entire Web

EFF Deeplinks20142,019 points461 commentscited by 6 details

Instagram's Million Dollar Bug

EEXFiLTRATED20151,562 points520 commentscited by 6 details

Let's Encrypt is Trusted

Let's Encrypt Blog20151,260 points311 comments details

Entering Public Beta

Let's Encrypt Blog20151,249 points213 comments details

Confirmed: The NSA is Spying on Millions of Americans

EFF Deeplinks20131,227 points444 commentscited by 3 details

Path texts my entire phonebook at 6 AM

BBranded3 Blog20131,223 points409 commentscited by 3 details