Re: PGP 5.0 MessageID

Dave Del Torto (ddt@LSD.com)
Tue, 17 Nov 1998 20:01:05 -0800

• Next message: Bernardo B. Terrado: "statgraphics...."
• Previous message: Vin McLellan: "NAI Partners with Xcert for Open-Standards PKI, "Active Security""
• In reply to: Mail System Internal Data: "DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA"
• Next in thread: Derek Atkins: "Re: PGP 5.0 MessageID"
• Reply: Derek Atkins: "Re: PGP 5.0 MessageID"

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In Reply to the Message wherein it was Written:

>Does anybody know what purpose the MessageID in the PGP 5.0 ASCII armoring
>serves, and why I wouldn't want to turn it off immediately, since it
>leaks state from the random number generator used for generating the
>session key?

Bag it immediately: it's basically a sixth toe from the says when non-MIME
MTAs might break a long msg, so PGP used to pre-break the ciphertext (and ID
the parts) to elude such beasts.

   dave

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.0
Comment: Get interested in computers -- they're interested in YOU!

iQA/AwUBNlJGe5BN/qMowCmvEQJsoACfZ/kdz3pDFCeOSzG5M5ai+owbn0AAoPwh
d+jIh3KETY3L4RG6wX3+azoi
=OgE6
-----END PGP SIGNATURE-----

• Next message: Bernardo B. Terrado: "statgraphics...."
• Previous message: Vin McLellan: "NAI Partners with Xcert for Open-Standards PKI, "Active Security""
• In reply to: Mail System Internal Data: "DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA"
• Next in thread: Derek Atkins: "Re: PGP 5.0 MessageID"
• Reply: Derek Atkins: "Re: PGP 5.0 MessageID"