Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I think dvh is confused about detached signatures and signatures that contain their payload.

For detached signatures:

    gpg --verify message.sig message
For signed files:

    gpg --verify message.sig
    gpg --output message --decrypt message.sig
It's all documented¹.

Dvh: what are you getting at?

1: https://www.gnupg.org/gph/en/manual/x135.html



I'm just trying to point out that it is easy to make mistake by checking normal signature and detached signature.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: