PGP Test Message (OT)
Posted by Gollan on January 21, 2003 at 18:24:21: Previous Next
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
This is a test message. I'm curious how this PGP thing works.
To test it out, I am trying here to post a message that appears
to have been posted by Gollan. If anyone out there has PGP
installed, I'd be curious to see what it tells you about
this message.
-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0 - not licensed for commercial use: www.pgp.com
iQA/AwUBPi3iZ75J09170+RIEQLPagCfemHBaTMQCwSJ0DE3isACBfE1Ul8AoNKy
7n1ypH4RwtQAzg6GfIdI9PQ5
=VkyR
-----END PGP SIGNATURE-----
Re: PGP Test Message (OT)
Posted by Victor on January 21, 2003 at 18:26:23: Previous Next
In Reply to: PGP Test Message (OT) posted by Gollan on January 21, 2003 at 18:24:21:
Just so there is no confusion, I posted the previous message. I'm just curious to see what this PGP stuff actually buys us.
Re: PGP Test Message (OT)
Posted by Gollan on January 21, 2003 at 22:53:00: Previous Next
In Reply to: Re: PGP Test Message (OT) posted by Victor on January 21, 2003 at 18:26:23:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
It would be good if it actually worked. Here is what I got:
That is what is SUPPOSED to happen when someone other than the key -----BEGIN PGP SIGNATURE----- iQA/AwUBPi3uBale7nXNZSR0EQI+7wCfRJJ4P2b/yE8Tyu5frDTMpkCU1i4AoLjT Re: PGP Test Message (OT) In Reply to: Re: PGP Test Message (OT) posted by Gollan on January 21, 2003 at 22:53:00: -----BEGIN PGP SIGNED MESSAGE----- : I invite people to test THIS posting and see what it says. My results: *** PGP SIGNATURE VERIFICATION *** Looks like you're having difficulties. -----BEGIN PGP SIGNATURE----- iQA/AwUBPi4zvZRTihjv8QkBEQK7GQCgivS3sWGLIN5GhaZu2CV9KcX7VUwAoLim Re: PGP Test Message (OT) In Reply to: Re: PGP Test Message (OT) posted by seraphim on January 22, 2003 at 01:17:59: Here is what I got: -----BEGIN PGP SIGNATURE----- iQA/AwUBPi5VcKle7nXNZSR0EQK1UgCdHNQE0AD/gX1sEw7H5lujkewyPLcAoPxz Re: PGP Test Message (OT) In Reply to: Re: PGP Test Message (OT) posted by Victor on January 21, 2003 at 18:26:23: I would never know that that wasn't the real Gollan. All I see is the PGP stuff... I don't know how to read it. Re: PGP Test Message (OT) In Reply to: Re: PGP Test Message (OT) posted by Chris on January 21, 2003 at 22:53:25: : I would never know that that wasn't the real Gollan. All I see is the PGP stuff... I don't know how to read it. You don't read it. You have to download the PGP software. Then, you have to choose to ask the software to verify the message. As I think my post demonstrates, a message cannot by itself be demonstrated to be a fraud. It is only a fraud in the context of a previously trusted signature. Let's say, for example, that you take my message and import the key into the PGP software. Then, the real Gollan's messages appear bogus. Re: PGP Message In Reply to: Re: PGP Test Message (OT) posted by Victor on January 21, 2003 at 23:31:54: Too bad it doesn't keep it from showing up on the board. Guess it's just for peace of mind?
*** PGP SIGNATURE VERIFICATION ***
*** Status: Good Signature from Invalid Key
*** Alert: Please verify signer's key before trusting signature.
*** Signer: Gollan
*** Signed: 1/21/2003 7:14:31 PM
*** Verified: 1/21/2003 7:55:02 PM
*** BEGIN PGP VERIFIED MESSAGE ***
owner signs. It is saying the signature is good (a valid PGP key was
used) but it is invalid (it is not Gollan's key). If it was signed by
me it would just say "Good Signature" without the "Alert".
Unfortunately for the past few days was a problem verifying my signed
posts. I believe that it has to do with my public key not being
properly distributed to the PGP public key server. It may be resolved
by now (it finally found my key when I did a search). I invite people
to test THIS posting and see what it says.
Version: PGP 8.0 - not licensed for commercial use: www.pgp.com
l9A22Ncfs02Btvzv3Y+lpM1x
=Uo4M
-----END PGP SIGNATURE-----
Posted by seraphim on January 22, 2003 at 01:17:59: Previous Next
Hash: SHA1
*** Status: Bad Signature from Invalid Key
*** Alert: Signature did not verify. Message has been altered.
*** Alert: Please verify signer's key before trusting signature.
*** Signer: Gollan
*** Signed: 1/21/2003 5:04:05 PM
*** Verified: 1/21/2003 9:59:41 PM
Version: PGP 8.0 - not licensed for commercial use: www.pgp.com
pZf1PXdNhGFwtfnm5wyyYVEK
=6c6b
-----END PGP SIGNATURE-----
Posted by Gollan on January 22, 2003 at 13:03:23: Previous Next
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
*** PGP SIGNATURE VERIFICATION ***
*** Status: Bad Signature from Invalid Key
*** Alert: Signature did not verify. Message has been altered.
*** Alert: Please verify signer's key before trusting signature.
*** Signer: seraphim
*** Signed: 1/22/2003 1:01:33 AM
*** Verified: 1/22/2003 3:24:36 AM
*** BEGIN PGP VERIFIED MESSAGE ***
Version: PGP 8.0 - not licensed for commercial use: www.pgp.com
U3pClFVLX3OpZpxY1tGlf6yG
=epTh
-----END PGP SIGNATURE-----
Posted by Chris on January 21, 2003 at 22:53:25: Previous Next
: Just so there is no confusion, I posted the previous message. I'm just curious to see what this PGP stuff actually buys us.
Posted by Victor on January 21, 2003 at 23:31:54: Previous Next
Posted by Hair Religion on January 23, 2003 at 10:46:37: Previous Next