
What if I haven't had John Random Hacker's public key? In this case, the
message would appear as such:
The message is signed, but the signature cannot be verified at all. This is also
how a recipient that does not use Enigmail, nor any other OpenPGP software,
will see the message. As expected, the original text is still readable: signature
ensures authentication of the sender, not confidentiality of the message.
Note how OpenPGP manipulates the mail when signing. The original message
is prepended by a line
-----BEGIN PGP SIGNED MESSAGE-----
and then it is specified which hash function has been used. Then there is the
original message. Finally, the digital signature, embedded within two lines
-----BEGIN PGP SIGNATURE-----
and
-----END PGP SIGNATURE-----
is appended to the message. Within the signature there is a line that specifies
the version of GnuPG used. It is also possible to put an additional GnuPG
comment line after the version, by passing additional parameters to the GnuPG
command line; this will be explained in Section 9.1.4.
The lines starting with ----- are called PGP headers.
49
Comentarios a estos manuales