gpg results from the CPAN

Benchmark-Perl-Formance-Cargo

Brendan Kehoe wrote:
> As a workaround, the various distributions could use a GPG singature to verify 
> correctness of the file.  Since the distributor's secret key is required to 
> create that signature, it would add a pretty significant step that would have 
> to be taken to make it possible to replace both a rpm or apt file and its 
> accompanying signature.

Check your local friendly Red Hat installation:

[root@localhost up2date]# rpm --checksig zsh-4.0.2-2.src.rpm
zsh-4.0.2-2.src.rpm: md5 gpg ok

Of course, this is only as useful as, say, the gpg keys distributed with 
the Kernel tarballs, i.e. if you don't actually bother checking the sig 
then you are open to abuse. It's entirely possible that rpm can be 
configured to require good signatures, but I've not read that part of 
the fine manual just yet.

Cheers,
Waider.
-- 
waider@waider.ie / Yes, it /is/ very personal of me

share/SpamAssassin/easy_ham/00200.883884dc35bd45feb65b9a351371a7c9 view on Meta::CPAN

Subject: Re: [ILUG] Got me a crappy laptop
Message-Id: <20020827182650.GC23883@fiachra.ucd.ie>
Reply-To: Irish Linux Users Group <ilug@linux.ie>
Mail-Followup-To: ilug@linux.ie
References: <NGEJLIBHKCAGGNGEGNJOMECHCAAA.zeez@eircom.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <NGEJLIBHKCAGGNGEGNJOMECHCAAA.zeez@eircom.net>
User-Agent: Mutt/1.3.28i
X-Gnupg-Publickey: http://fiachra.ucd.ie/~gavin/public.gpg
X-Operating-System: Linux 2.4.18 i686
Sender: ilug-admin@linux.ie
Errors-To: ilug-admin@linux.ie
X-Mailman-Version: 1.1
Precedence: bulk
List-Id: Irish Linux Users' Group <ilug.linux.ie>
X-Beenthere: ilug@linux.ie

On Tue, 27 Aug 2002, Jon wrote:

share/SpamAssassin/easy_ham/00291.69656be850c89e739f4ae1db5b43d90f view on Meta::CPAN

X-Original-Date: Wed, 9 Oct 2002 11:03:11 +0200
Date: Wed, 9 Oct 2002 11:03:11 +0200

Once upon a time, Brian wrote :

>      OK, it's now time to work out the PGP securing of apt repository
>      traffic. I've never gotten anything but "sitename.whatever will not
>      be authenticated" until running Redhat 8.0 when I get something
>      about having "No Key" for various files.

I don't think gpg signing my repositories will help anything, as it will
just ensure that my passphrase was typed to confirm the md5 signatures of
all pgklists and srclists. Basically, you'll then just be sure that it's me
who generated the files, and this will of course prevent automating the
process of updating the apt repository when Red Hat updates show up.

In Red Hat Linux 8.0 though, the warnings about "No Key" appear until you
import the right gpg public keys directly with rpm, for example :
rpm --import /usr/share/doc/apt-0.5.4cnc7/RPM-GPG-KEY
(this will import my key, which is used to sign all freshrpms.net packages)

Hopefully it is possible to the tell rpm to install *only* packages who
verify against an imported gpg key? This for me would be the optimal way to
ensure integrity with the way things curently work.

Matthias

-- 
Clean custom Red Hat Linux rpm packages : http://freshrpms.net/
Red Hat Linux release 7.3 (Valhalla) running Linux kernel 2.4.18-10acpi
Load : 0.14 0.18 0.17

_______________________________________________

share/SpamAssassin/easy_ham/00292.d70b6d753352d01060579b1c34df4e4d view on Meta::CPAN

    <mailto:rpm-list-request@freshrpms.net?subject=subscribe>
List-Id: Freshrpms RPM discussion list <rpm-zzzlist.freshrpms.net>
List-Unsubscribe: <http://lists.freshrpms.net/mailman/listinfo/rpm-zzzlist>,
    <mailto:rpm-list-request@freshrpms.net?subject=unsubscribe>
List-Archive: <http://lists.freshrpms.net/pipermail/rpm-zzzlist/>
X-Original-Date: Wed, 9 Oct 2002 04:27:34 -0500
Date: Wed, 9 Oct 2002 04:27:34 -0500

On Wed, 9 Oct 2002 11:03:11 +0200, Matthias Saou <matthias@rpmforge.net> wrote:

> I don't think gpg signing my repositories will help anything, as it will
> just ensure that my passphrase was typed to confirm the md5 signatures of
> all pgklists and srclists. Basically, you'll then just be sure that it's me
> who generated the files, and this will of course prevent automating the
> process of updating the apt repository when Red Hat updates show up.

    Isn't there a packager-key that's concealed inside the rpm?  Things have changed a bit since I used to work with'em, but I thought there was some internal number that must be compared to be correct (or, presumably, return an error.)
 
> In Red Hat Linux 8.0 though, the warnings about "No Key" appear until you
> import the right gpg public keys directly with rpm, for example :
> rpm --import /usr/share/doc/apt-0.5.4cnc7/RPM-GPG-KEY
> (this will import my key, which is used to sign all freshrpms.net packages)

    Hey, cool; wether it protects me or not, I feel better about it.
 
> Hopefully it is possible to the tell rpm to install *only* packages who
> verify against an imported gpg key? This for me would be the optimal way to
> ensure integrity with the way things curently work.

    Yeah, surely there's a flag for that; there is, for everything else, aye?  :)

------------------------------------------------------------------------
Brian Fahrländer              Linux Zealot, Conservative, and Technomad
Evansville, IN                    My Voyage: http://www.CounterMoon.com
ICQ  5119262
------------------------------------------------------------------------
angegangen, Schlange-Hüften, sein es ganz rüber jetzt. Bügel innen fest,

share/SpamAssassin/easy_ham/00970.b567daf8f05ff88b2cc4418bdc993913 view on Meta::CPAN

> 
> 
> 

Ah, sorry for not making that clearer.
But no.
Previously (v1.0.6 of GnuPG) there would be a slight pause at this point while
it went out to get the public key from a keyserver.
Now, whether I have the key or NOT, I get the failure message.

Its as if it cant find gpg to execute it (but I fixed that path), so there
must be something else that I am missing...


-- 
                                        Reg.Clemens
                                        reg@dwf.com

share/SpamAssassin/easy_ham/00972.b94b5871ba0d2d042da63d0fcaa2fa32 view on Meta::CPAN

 > > 
 > > 
 > 
 > Ah, sorry for not making that clearer.
 > But no.
 > Previously (v1.0.6 of GnuPG) there would be a slight pause at this point whi
     le
 > it went out to get the public key from a keyserver.
 > Now, whether I have the key or NOT, I get the failure message.
 > 
 > Its as if it cant find gpg to execute it (but I fixed that path), so there
 > must be something else that I am missing...
 > 
 > 
 > -- 
 >                                         Reg.Clemens
 >                                         reg@dwf.com
 > 
 > 
 > 
 >

share/SpamAssassin/easy_ham/00973.42545038686536033b1032380502ae09 view on Meta::CPAN

 > >  > > 
 > >  > 
 > >  > Ah, sorry for not making that clearer.
 > >  > But no.
 > >  > Previously (v1.0.6 of GnuPG) there would be a slight pause at this poin
     t whi
 > >      le
 > >  > it went out to get the public key from a keyserver.
 > >  > Now, whether I have the key or NOT, I get the failure message.
 > >  > 
 > >  > Its as if it cant find gpg to execute it (but I fixed that path), so th
     ere
 > >  > must be something else that I am missing...
 > >  > 
 > >  > 
 > >  > -- 
 > >  >                                         Reg.Clemens
 > >  >                                         reg@dwf.com
 > >  > 
 > >  > 
 > >  >

share/SpamAssassin/easy_ham/01001.ea532debe8b8f0f94d2fdbbaa743204b view on Meta::CPAN

List-Subscribe: <https://listman.spamassassin.taint.org/mailman/listinfo/exmh-workers>,
    <mailto:exmh-workers-request@redhat.com?subject=subscribe>
List-Id: Discussion list for EXMH developers <exmh-workers.spamassassin.taint.org>
List-Unsubscribe: <https://listman.spamassassin.taint.org/mailman/listinfo/exmh-workers>,
    <mailto:exmh-workers-request@redhat.com?subject=unsubscribe>
List-Archive: <https://listman.spamassassin.taint.org/mailman/private/exmh-workers/>
Date: Wed, 11 Sep 2002 12:17:33 -0700

Hmm - I'm cc'ing the exmh-workers list, because I really don't know
much about the various PGP interfaces.  I think there has been some
talk about "issues" with the latest version of gpg.

>>>Hacksaw said:
 > version 2.5 08/15/2002
 > Linux habitrail.home.fools-errant.com 2.4.7-10smp #1 SMP Thu Sep 6 
17:09:31
 > EDT 2001 i686 unknown
 > Tk 8.3 Tcl 8.3
 > 
 > It's not clear to me this is a bug with exmh per se, but it's something 
that
      
 > manifests through exmh, so I figured asking you might help me track it 
down.
 > 
 > When I receive a gpg encrypted message, and it asks me for a passphrase, 
it
 > first tries to ask me via the tty under which exmh is running. It tells 
me m
     y 
 > passphrase is incorrect every time, at which point exmh offers me the 
line i
     n 
 > the message about decrypting. I click the line and it offers me the 
dialog
 > box, and tells me the passphrase is correct, and shows me the decrypted

share/SpamAssassin/easy_ham/01002.c71b3eb67b112d8bf7d101cb3cacd6f0 view on Meta::CPAN

List-Subscribe: <https://listman.spamassassin.taint.org/mailman/listinfo/exmh-workers>,
    <mailto:exmh-workers-request@redhat.com?subject=subscribe>
List-Id: Discussion list for EXMH developers <exmh-workers.spamassassin.taint.org>
List-Unsubscribe: <https://listman.spamassassin.taint.org/mailman/listinfo/exmh-workers>,
    <mailto:exmh-workers-request@redhat.com?subject=unsubscribe>
List-Archive: <https://listman.spamassassin.taint.org/mailman/private/exmh-workers/>
Date: Wed, 11 Sep 2002 13:48:40 -0600


The way to debug something like this is to turn on the log (Preferences 
-> Hacking Support -> Debug log enabled) and track the gpg commands 
being issued and the responses.

FWIW, using exmh 2.5 and gpg 1.0.7 I do not have problems sending 
encrypted messages to myself. When I select the message, an xterm 
window pops up asking for the passphrase. I don't recall exmh ever 
asking me for the passphrase from the tty that started exmh nor from a 
dialog box. (But then again, I'm not a heavy gpg user).

Kevin

In message <200209111917.PAA02912@blackcomb.panasas.com>, Brent Welch writes:
> Hmm - I'm cc'ing the exmh-workers list, because I really don't know
> much about the various PGP interfaces.  I think there has been some
> talk about "issues" with the latest version of gpg.
> 
> >>>Hacksaw said:
>  > version 2.5 08/15/2002
>  > Linux habitrail.home.fools-errant.com 2.4.7-10smp #1 SMP Thu Sep 6 17:09:31
>  > EDT 2001 i686 unknown
>  > Tk 8.3 Tcl 8.3
>  > 
>  > It's not clear to me this is a bug with exmh per se, but it's something 
>  > that manifests through exmh, so I figured asking you might help me track
>  > it down.
>  > 
>  > When I receive a gpg encrypted message, and it asks me for a passphrase, 
>  > it first tries to ask me via the tty under which exmh is running. It 
>  > tells me my passphrase is incorrect every time, at which point exmh 
>  > offers me the line in the message about decrypting. I click the line 
>  > and it offers me the dialog box, and tells me the passphrase is correct,
>  > and shows me the decrypted message.
>  > 
>  > Any ideas on that?

share/SpamAssassin/easy_ham/01003.56ffd3c6ad3dcb0598cb3b79a1e2dc11 view on Meta::CPAN

List-Archive: <https://listman.spamassassin.taint.org/mailman/private/exmh-workers/>
Date: Wed, 11 Sep 2002 15:52:25 -0400

--==_Exmh_9304186P
Content-Type: text/plain; charset=us-ascii

On Wed, 11 Sep 2002 12:17:33 PDT, Brent Welch said:

> >>>Hacksaw said:

>  > When I receive a gpg encrypted message, and it asks me for a passphrase, 
> it
>  > first tries to ask me via the tty under which exmh is running. It tells 
>
Hmm.. I've seen the *opposite* issue - if I go to *SEND* a signed message,
sometimes Exmh will put up the dialog box, but fail to set keyboard focus
there, so no passphrase can be entered.  Of course, hitting 'return' doesnt
work so you need to click the 'OK' box, at which point it finds that the
passphrase that wasn't entered doesn't work, and asks again, this time with
proper focus set.

share/SpamAssassin/easy_ham/01004.beda866d3cdf304a31d178d03960a3f3 view on Meta::CPAN

I get a pop-up window to enter my passphrase into, and when I type it 
correctly, the message display changes from a prompt to click to 
decrypt to the message content.

TTFN....

On 11 September 2002 at 12:17, Brent Welch <welch@panasas.com> wrote:

Hmm - I'm cc'ing the exmh-workers list, because I really don't know
much about the various PGP interfaces.  I think there has been some
talk about "issues" with the latest version of gpg.

>>>Hacksaw said:
 > version 2.5 08/15/2002
 > Linux habitrail.home.fools-errant.com 2.4.7-10smp #1 SMP Thu Sep 6 17:09:31
 > EDT 2001 i686 unknown
 > Tk 8.3 Tcl 8.3
 > 
 > It's not clear to me this is a bug with exmh per se, but it's
 > something that manifests through exmh, so I figured asking you
 > might help me track it down.
 >
 > When I receive a gpg encrypted message, and it asks me for a
 > passphrase, it first tries to ask me via the tty under which
 > exmh is running. It tells me my passphrase is incorrect every
 > time, at which point exmh offers me the line in the message
 > about decrypting. I click the line and it offers me the dialog
 > box, and tells me the passphrase is correct, and shows me the
 > decrypted message.
 > 
 > Any ideas on that?
 > -- 
 > Honour necessity.

share/SpamAssassin/easy_ham/01005.5ad1b924b3315046822ae89493e5572f view on Meta::CPAN

List-Archive: <https://listman.spamassassin.taint.org/mailman/private/exmh-workers/>
Date: Wed, 11 Sep 2002 13:26:27 -0700


Here's a message that works fine for me:



X-Mailer: exmh version 2.5 07/13/2001 with nmh-1.0.4
To: kevinc@doink.com
Subject: gpg test
Mime-Version: 1.0
Content-Type: text/x-pgp; format=mime; x-action=encrypt;
	x-recipients="D165C0CC, D165C0CC"
Content-Transfer-Encoding: 7bit
Date: Wed, 11 Sep 2002 13:18:58 -0700
From: Kevin Cosgrove <kevinc@dOink.COM>
Message-Id: <20020911201900.492892FEAB@joseph.doink.com>

-----BEGIN PGP MESSAGE-----
Version: GnuPG v1.0.7 (GNU/Linux)

share/SpamAssassin/easy_ham/01005.5ad1b924b3315046822ae89493e5572f view on Meta::CPAN

X-priority: 3
X-mailer: My Own Email v4.00
Mime-version: 1.0
Content-type: text/plain; charset=US-ASCII
Subject: Discussion
From: "XXXXXXX" <XXXXXXX@XXXXXXXXX.com>
Date: Tue, 10 Sep 2002 05:47:46 -0500 (06:47 EDT)
To: hacksaw@hacksaw.org


*gpgRfc822:     0
*gpgChooseKey:  1
*gpgRunTwice:   1
*gpgCacheIds:   persistent
*gpgMinMatch:   75
*gpgShowInline: none
*gpgShortMessages:      1
*gpgAutoExtract:        1
*gpgKeyServer:  pgp-public-keys@keys.pgp.net
*gpgKeyQueryMethod:     hkp
*gpgHKPKeyServerUrl:    keys.pgp.com
*gpgKeyServerURL:       http://www-swiss.ai.mit.edu/htbin/pks-extract-key.pl?op
=get&search=0x%s
*gpgKeyOtherMethod:     exec echo "can't find $id" > $tmp
*gpgComment:    Exmh version 2.5 08/15/2002
*gpgModulePath: /usr/lib/gnupg
*gpgCipherMods: skipjack idea
*gpgDigestMods: tiger
*gpgPubkeyMods: rsa
*gpgPgp5Compatibility:  1
*gpgCipherAlgo: 3des
*gpgDigestAlgo: sha1
*gpgCompressAlgo:       zip





_______________________________________________
Exmh-workers mailing list
Exmh-workers@redhat.com
https://listman.redhat.com/mailman/listinfo/exmh-workers

share/SpamAssassin/easy_ham/01113.444c4a1faf97d17bc580aea2905b773b view on Meta::CPAN


> 	I have used there spec file and fun a few problems in it, and one
> 	of them was just hashing out things for other use ...
> 
> 	Now to get to grips with the Kernel ... still have not found and
> 	easy way to rebuild the Kernel without having to wait and hour for
>       it to generate the headers for all arch ... arrrrhhhh ...

The problem is that "--with <foo> --without <bar>" is clearly not meant to
change deeply the way a package is built. Its use would be more like
enabling/disabling gpg, ldap, whateversql support in packages as it's not
possible to use something like "--with-<foo>=<bar>" which could be used for
a much wider scope.

Matthias

-- 
Clean custom Red Hat Linux rpm packages : http://freshrpms.net/
Red Hat Linux release 7.3 (Valhalla) running Linux kernel 2.4.18-10
Load : 0.00 0.12 0.32, AC on-line, battery charging: 100% (4:47)

share/SpamAssassin/easy_ham/01172.548e6eb1a164cc875189890a4b78e4f7 view on Meta::CPAN

    <mailto:exmh-users-request@redhat.com?subject=subscribe>
List-Id: Discussion list for EXMH users <exmh-users.spamassassin.taint.org>
List-Unsubscribe: <https://listman.spamassassin.taint.org/mailman/listinfo/exmh-users>,
    <mailto:exmh-users-request@redhat.com?subject=unsubscribe>
List-Archive: <https://listman.spamassassin.taint.org/mailman/private/exmh-users/>
Date: Sun, 01 Sep 2002 00:05:03 -0600

HELP.
I had GPG working.
I updated from version gnupg-1.0.6 to gnupg-1.0.7.
This moved gpg from /usr/bin to /usr/local/bin and I changed the path
in the exmh 'executable'.

With that fix, EXMH knows I have GPG, and puts the line

	Check the signature with GnuPG

in messages with GnuPG signatures.  But punching the line ALWAYS
gives

        Signature made Thu Aug 29 00:27:17 2002 MDT using DSA key ID BDDF997A

share/SpamAssassin/easy_ham/02500.05b3496ce7bca306bed0805425ec8621 view on Meta::CPAN

Subject: Re: [ILUG] Linux Install
Message-Id: <20021204115445.GC22559@fiachra.ucd.ie>
Reply-To: Irish Linux Users Group <ilug@linux.ie>
Mail-Followup-To: "'ILUG@linux.ie'" <ILUG@linux.ie>
References: <3C0F11345BD5D611BD8D00902733977E12C077@exchcl.epa.ie>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <3C0F11345BD5D611BD8D00902733977E12C077@exchcl.epa.ie>
User-Agent: Mutt/1.4i
X-Gnupg-Publickey: http://fiachra.ucd.ie/~gavin/public.gpg
X-Operating-System: Linux 2.4.18-686 i686
Sender: ilug-admin@linux.ie
Errors-To: ilug-admin@linux.ie
X-Beenthere: ilug@linux.ie
X-Mailman-Version: 2.0.11
Precedence: bulk
List-Help: <mailto:ilug-request@linux.ie?subject=help>
List-Post: <mailto:ilug@linux.ie>
List-Subscribe: <http://www.linux.ie/mailman/listinfo/ilug>,
    <mailto:ilug-request@linux.ie?subject=subscribe>

share/SpamAssassin/easy_ham_2/00155.54b624e309bf09793148296c7506f6ab view on Meta::CPAN

Message-Id: <20020730110032.A19970@fiachra.ucd.ie>
Reply-To: Irish Linux Users Group <ilug@linux.ie>
Mail-Followup-To: ilug@linux.ie
References: <20020730112811.A32231@wanadoo.fr>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20020730112811.A32231@wanadoo.fr>; from dneary@wanadoo.fr on
    Tue, Jul 30, 2002 at 11:28:11 +0200
X-Gnupg-Publickey: http://fiachra.ucd.ie/~gavin/public.gpg
X-Operating-System: Linux 2.4.18 i686
Sender: ilug-admin@linux.ie
Errors-To: ilug-admin@linux.ie
X-Mailman-Version: 1.1
Precedence: bulk
List-Id: Irish Linux Users' Group <ilug.linux.ie>
X-Beenthere: ilug@linux.ie

Hi,

share/SpamAssassin/easy_ham_2/00156.e4fd48f062c4059e47db9888e09ca85b view on Meta::CPAN

"my_hdr X-GPG-Fingerprint: 9C1D 16F4 11F1 6BD2 933C  048D ACC7 9840 89D0 7646;"\
"set pgp_sign_as=0x89D07646;set signature=~/.signature;"\
"set folder=~/Mail;set record=~/Mail/outbox;set postponed=~/Mail/postponed"
folder-hook /(alphyra|Alphyra/[^.].*) \
"my_hdr From: kevin lyda <kevin@alphyra.com>;my_hdr X-GPG-Fingerprint: "\
"088E 2BC4 381E 990A 1E0E  1DA0 4D44 99EF 20E6 38A0;"\
"set pgp_sign_as=0x20E638A0;set signature=~/.signature.d/itg.sig;"\
"set folder=~/Mail/Alphyra;set record=~/Mail/Alphyra/outbox;"\
"set postponed=~/Mail/Alphyra/postponed"

you could also do this with send hooks.  i use them to tweak gpg settings:

send-hook .			"unset pgp_autoencrypt;set pgp_autosign"
send-hook (ilug|webdev|social)@linux.ie	\
				"unset pgp_autosign;unset pgp_autoencrypt"

and then i have an include file with all people who have keys.

kevin

--

share/SpamAssassin/easy_ham_2/00157.bc9f30a8cf071135d4f3145a15013f72 view on Meta::CPAN

Reply-To: Irish Linux Users Group <ilug@linux.ie>
Mail-Followup-To: ilug@linux.ie
References: <20020730112811.A32231@wanadoo.fr>
    <"from <20020730110032.A19970@fiachra.ucd.ie>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20020730110032.A19970@fiachra.ucd.ie>; from
    ilug_gmc@fiachra.ucd.ie on Tue, Jul 30, 2002 at 11:00:32 +0100
X-Gnupg-Publickey: http://fiachra.ucd.ie/~gavin/public.gpg
X-Operating-System: Linux 2.4.18 i686
Sender: ilug-admin@linux.ie
Errors-To: ilug-admin@linux.ie
X-Mailman-Version: 1.1
Precedence: bulk
List-Id: Irish Linux Users' Group <ilug.linux.ie>
X-Beenthere: ilug@linux.ie

Hi,

share/SpamAssassin/easy_ham_2/00186.d42c074a7cb6f93949c3723b90e05eef view on Meta::CPAN

    <mutt-users-3d42d3a9-19504@klaus.daprodeges.dyndns.org>
    <"from s1118644"@mail.inf.tu-dresden.de>
    <20020727191542.A19057@ie.suberic.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20020727191542.A19057@ie.suberic.net>; from
    kevin+dated+1028225744.d700ac@ie.suberic.net on Sat, Jul 27,
    2002 at 19:15:43 +0100
X-Gnupg-Publickey: http://fiachra.ucd.ie/~gavin/public.gpg
X-Operating-System: Linux 2.4.18 i686
Sender: ilug-admin@linux.ie
Errors-To: ilug-admin@linux.ie
X-Mailman-Version: 1.1
Precedence: bulk
List-Id: Irish Linux Users' Group <ilug.linux.ie>
X-Beenthere: ilug@linux.ie

On Sat, 27 Jul 2002, kevin lyda wrote:

share/SpamAssassin/easy_ham_2/01014.d86f7cf4bda937a58e7af5aef3f71649 view on Meta::CPAN

>>On Sun, 11 Aug 2002, Gordon Mohr wrote:
>>
>>>If you crypto-sign your outgoing mail, you don't have to set your
>>>mailwall whitelist to accept unsigned mail spoofed as being from you.

Yup, I've been meaning to cobble together procmail + script for this, as 
a few Google searches didn't turn up anything. Did anyone here get there 
first?

(I guess I want a config file of mailboxes who normally sign their mail, 
and procmail that runs gpg and adds headers...)

>>Users don't like entering passphrases when sending email. USB fobs, smart 
>>cards or other removable hardware are not yet widespread.
> 
> Bad assumption.
> 
> A reasonable UI would have me enter my passphrase *at most* each 
> time I launch my mail program -- never more than once per day,
> sometimes once per week.

share/SpamAssassin/easy_ham_2/01164.9d5c3fde5125b73106dee03f253fa36c view on Meta::CPAN

On Wed, Jul 24, 2002 at 12:18:27AM +0200, Roy-Magne Mo wrote:
> Seems like irssi.org also has an apt-rpm repository for snapshots of
> irssi:
> 
> rpm http://ninja.no/apt 7.3/i386 irssi
> rpm-src http://ninja.no/apt 7.3/i386 irssi

Maybe sf.net should provide automated (how much more automated can it
get? Well, maybe automatic one-click setup and instructions for those
who can't read manuals and a place in which to drop gpg keys) apt-rpm
(and maybe apt-deb though debian seems to package most stuff anyway)
repositories. If it was one big repository for "stable" releases and
each could have their own for "development" or "testing" releases. You
handled your own repo and they did a nightly stable update for example.
Also it should check that no-one can manage to put in a package with the
same name as another one or otherwise sabotage the thing.

(hmm, and I suppose the good sigmonster may deserve a cookie, too..)

--

share/SpamAssassin/easy_ham_2/01292.483e487ce52ebe78815349060f8aff71 view on Meta::CPAN

Recommendation:

   If you are running PHP 4.2.x you should upgrade as soon as possible,
   especially if your server runs on a non IA32 CPU. If you cannot upgrade
   for whatever reason the only way to workaround this, is to disable all
   kinds of POST requests on your server.  
   
   
GPG-Key:

   http://security.e-matters.de/gpg_key.asc
    
   pub  1024D/75E7AAD6 2002-02-26 e-matters GmbH - Securityteam
   Key fingerprint = 43DD 843C FAB9 832A E5AB  CAEB 81F2 8110 75E7 AAD6


Copyright 2002 Stefan Esser. All rights reserved.

share/SpamAssassin/easy_ham_2/01390.e377b9fcbb54f20570b42b5b37801dd8 view on Meta::CPAN

MIME-Version: 1.0
To: Cypherpunks <cypherpunks@lne.com>
Subject: Defcon key-signing party
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Sender: owner-cypherpunks@lne.com
Precedence: bulk
X-Loop: cypherpunks@lne.com
X-spam: 0 

Anyone interested in a pgp/gpg key-signing get-together @ DC,
please email me your key info (name, key ID, type, size,
fingerprint), and I will add you to the list.

If you don't have a PGP key, now is a great time to make one.

Want to find out more about PGP?
<http://www.uk.pgp.net/pgpnet/pgp-faq/>

You can get the software from:

share/SpamAssassin/spam/0270.d50e186af7a00114ad967b8f77b70338 view on Meta::CPAN

krxDekUcQF+iXrxE3VY8TyXvjExbHtDVYTzzzzBO2CUrlW10IhVKeospV5b1Mc9khTJncadbV3
thA2C5zK+yDUq14lWOTaYFQt9uI6MNP6llZTBLbMCKE2SNRnudFEzD+tN97JqCQFru+YkYsb
fKwuIWvxUg2gv9xija/bBCUqy1+ULa3ofeZr9sL+QmAjHdUbOSnsjQxmIZweru5bFY4TqKOw
XOXHv4hLlxWobbDt0QVhi8utoFrFcXFw9gNoCAfEQxUGO2GKK7PCID5hEzAlVkhguXYgIWX/
ALFmrp1bEVWHQTNR5IiLhxLDZklPF4BlVhcVzwDFA4N7AwrZlWLb2wkrcLYbnI/ExDe7r2ld
nsPdSgDkOqYUxz0wI4PiNnnh3iGMP7g8HuZTtxLfHcHRcRW21XaD1W1HK6BKFrwRQUR1ywFK
77ituACUS+ICU6lYGwb9mZSYoNQ8SqMjrEMEYCQ48QDTiDFig8y/tDQawMDJggly5+8AYe6G
nbbHzK03AAxS/do+8MGNuZm3cKhS4DIi6laSle4Su+7mbr8TNQlxbcDW/AHsMtOVmZQ9gQS/
bGCf+gWU4iIeIriFHGTiZwMQYxHUqqJVgyiMqCZksIZKP2j5aEbt8YJmG+s7VGjMW4YtcQAN
2aLlFEIl5SUScISgbu/tGEbv6l47XvEbFVr7RWNurhXXY3b7MuhMXCOS/MPujTqBKHjbapbe
HvBOh4bcgH7C15KiCKt5oA5+JcAxwmICfdiqgpgx4jtlvvmNdPzDDqWsaXmoJjZu+UG6WAEK
ADeYVZ58S37x/ihRtL6MEJtk85gIpDA2YWA/qCoa6n8hgCluU90MpGDJXc43GA4Rg6lXmJl6
Mx3TK17ig+TaquJdIFHqF0TBa+ZgqfmALNkzDlzEO4JtmByGqmCrx3BrxRq80ndINyLZMATE
xXU4R8EoK4JbttEq4oI1wYi2NHMEC7qbrWIgNt29mPVjd7zgY3NzO0QdjvWWAiGbhzDSysst
Yd/hLArtdQE2Et0QrNwDbMD4gpKMZxBVbOgRgKQWwdk4R5O1RvcqJUBsRrzD2UFsrl5y+7GA
NuCAFV8jMHYnk2lCrT5lbLP7htRvyyoLSfJsQAbRIQyGwwQoIcIICpZB9tZrO1wjTzEw1+0g
jdNhdukhdls8vUTBB9oUEs3Wb10m06iyrxrgL5gladFZQOp1din3ibxE3hsadEFJi0V8Rge2
0rYdpxRt+IwXwb+Y3a1sB8wOc4Ou4UYczqOWmU5FQbsOkq+XUtwx/wBh/KAGYSLmMr86IFhy
wKig2YjkltzxSiPaVJZXwjYRR7a91iJWlsVNw3GJWNUBvzrQlmT7ofmG6bLIN6YJ43Q6gN2h
TfnJFF0A/EoU5qCgxVQN01HFmY7zNozZ3c5O5Q3b/qVXfNbJzKq1K76m6xKW7RsQdYeZXaGq
nIxtLaUhBD7IkILUAqJ/7G8U4jjicMQDm47Dlual8TB76i8xS3dLfa6ghgMqWFaDNZ8IHI2g

share/SpamAssassin/spam/0352.f7adb4aa267e50a8db1e4bcacfe863f3 view on Meta::CPAN

ok1iM1lv8SpG29QYQAZqjVODww82KDueKCVqbzKOSHO45MsEYOA09jiIA3wLoGpgAAx6Sy4w5QkI
BA/YLCkgoGAPgATyDwBIAAY+YASqJQDozbpUYRxPoC8IoGCfgHzdFXMooKNlBCUmZALaTCCs6XWm
g8HAgC9wLFs2IAVsw1UgIINU45sTbCJ2FpcEAGTCdSCoDCRwWiyOkABSYyCIM0ck4H1Ersb/Vi48
8CIdA+7kGIIvNG2DIWYzapFKMM44tiqnzNgfy9asO0csWUsg0MVhZrJUsutWws4lpFQjvpIAkgU5
TmSNkqUnGAKpT6IrTmsoyPVtk+QC6nS/KO1dqeQnjjEwrZBMXOWoCyIqhfIT/7lXkkJDmHAtrown
zzzzV+PExofhiBogK+bjdemKenZ0xDDoADOmNK7+mbplMAZKPUaEP0tCMA3EWxFEawAAAmaCgCfvty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share/SpamAssassin/spam_2/00482.f839ea522f1ee459661a6b2fbd71e823 view on Meta::CPAN

Delivery-Date: Tue May 28 06:37:14 2002
Received: from mandark.labs.netnoteinc.com ([213.105.180.140]) by
    dogma.slashnull.org (8.11.6/8.11.6) with ESMTP id g4S5bEe23947 for
    <jm@jmason.org>; Tue, 28 May 2002 06:37:14 +0100
Received: from pac21.westernbarge.com ([67.96.136.21]) by
    mandark.labs.netnoteinc.com (8.11.2/8.11.2) with ESMTP id g4S5bB728236 for
    <jm@netnoteinc.com>; Tue, 28 May 2002 06:37:12 +0100
Date: Mon, 27 May 2002 22:41:35 -0400
Message-Id: <200205280241.g4S2fZS24792@pac21.westernbarge.com>
From: mort239o@pac21.westernbarge.com
To: qrgpgprrcd@pac21.westernbarge.com
Reply-To: mort239o@pac21.westernbarge.com
Subject: ADV: Extended Auto Warranty -- even older cars... whnyf
X-Keywords: 

Protect yourself with an extended warranty for your car, minivan, truck or SUV. Buy DIRECT and SAVE money!
           
Extend your existing Warranty.
           
Get a new Warranty even if your original Warranty expired.

share/SpamAssassin/spam_2/00777.284d3dc66b4f1bdedb5a5eba41d18d14 view on Meta::CPAN

pf3/eiaSkjkzIwELkDZoSRCou2BlI3SfiqYMmz/BYqNuqrtOW4bSKbXAG7zCy7jFK6HIG7nqSgdx
BgbUdAPSKxCbu8AE4asW4I0f8L0DFHFMtV2qW2a4SxAxx3Y+Blu0a5bli0ZtihHrZQK7a7gbSZ37
y79U26D/64Yap1JHoLz4AgY34DxFkAbUiwc7PAcNXJtb556fQwMSLBALMKqUtGnA4qx267cUsEEM
cGlSfGlnsgHCo1YjfBEDIFQ7x7tFyaOJy8ItTJo1QJJ+FwQzPMBR8AL98wNgYL3V28Cg+4oE4EzP
pJsCcWCvlbo6lxASgAKE8wEiAMiEo7SFAydH67MX/yGxJuy02grGKyzGYxykZcynMkAhkpsvw+NT
YgvH2Ju9HRrEBGACCAkBKTABpgpYCzY5SDU5IvABESYCKyfLgNwulaQRj2gCXQy123qxkizJDToE
NdB9l3wEWCAHY2AEIjBepjS91lsQvvoC5vkDECAEY9cuAuparwWjZclXaXomZpIA/JrNrWUAB7TL
OzqdPPqtGBvJvwykcinMEhgEe2cFO8ABJ7gBRUAGcQDH1pu2PtAGFEADPtADRSDNBDGz0geUqPu+
47bNscUAEZ02ImyqcftUbvmZV2uUcdnRDYq47OzOLSyaElgD87wDOLAABwCwL0BkawAHPgzNc5wH
Bf/QAgaJATZQg2V3A1lQAGLZLr04fF3KMR1DRnhbJGgmAeQcWGVJYTSAg9c3pFIdBtjJ0eqswh/d
qiL9ozVQAiEAh1+1c+I8k0RmZFHaz3OQfi/7nB7Q1j8gpgBQAFFwRmGWuqwVWH8sAmjmA4RDOMKD
AYB5OzfwKfZ5reP1VDRgfWdomkmZhmso1VVN1UapwuvsyzLw1SFwASTwABPQHFKIlmzUOUVAZGmQ
qIUpdkP1AxLwVwp7Nucr0ZTkQr8YVWGWAHp9JlX0ypsWJ3HiMgW11N912ADw1DkYBmjgiZ3Y2Mrd
jI+dnVVt1Sp82V79dCOWx5/qYkJlRlLwpGkLk4L/pXNuh2ldul18xVTnu9B+BYAS4FRnijmCnNvB
otSG/X/DrdgLiNz02In6nd/LrZRT7YMdWbwTCBYRUYmf10POIq+nfXDTIwBRXDbjuwFbrEJRBSz0
RzjBuGBfVmbAAtjWKpYkiNg+AJWaWAb4vd/73d9TDaEPGOBtyKdpAWVqORCr3EM/wAQrS71qrYQI
Vr6AkDaxdYLTI14LTSlVtHIs0Ncf47d326ILHZY/Rt+JLXWnZ+LMmNwq3tw9eJcbvXovTpL4WIqR
FVs5deNSQAbyGtMLXolvRUCSAixnggFR+Fdo8sp6razuMsvDl+SV8gK+CeJLhdhGoJGLneVSHY9X
/zsEEPjl9HzJEphuE+hklQF+xLWY/XLm8oq2QJyHB3dpGbWYF4yzeB3LggxTbIQCRw46KAY2qRzl
UEXcVd6Aajjr28nlXc56uN533SmBE6q1H8sX3zehw7EDIJAAAgCwpKLD/qzjM11h7Js/e5U/aYOi
gFVKd44CgD01qK7XLRc9kXiCrb5U+EfQjIJ6DSiPXO7iX750bkjMx6u1TgZ+MPKxwTEeZTAGVOAD

share/SpamAssassin/spam_2/00777.284d3dc66b4f1bdedb5a5eba41d18d14 view on Meta::CPAN

bcN0YYs/07Crb0MYq8rs3egwOlQbDZJEiTdI6ovqTigDLvNWLfJaceshH8hVKJnKaWxnsWdy8jF3
PUk1olYxlNsvaVMod7eQ/JIOMnHNY1o3V0aUpW0Ys+mujZWEkezVgn3Kal0K5idP+WRH/A6ZGowk
jqp/77pkiZ/2f/H6AEz7f+PUCEz7f+PUwEz7frQIM+360wE/z1oASgAoEJQAUwFha502QtASM/eR
xwa0cex0Kp3Naw1mG5YRTDyZjwAfun6Gp20NN9SbVrMXVo2OJIwWX/CgVtQkvQdJF0OroPz6UIbH
6faC0tgvV2+Zz70MSVlYhvNVSFjHCBLIOpz8oppXFKSRlyNNeS7pMyN2UDgfStLJGLlKWiLMOl3D
8sBGPek5WBUm9y0mkRDG+Rm+nFLnZapLqWhZWwTZ5Kke/Wpu9i1FDVs/KOYJ5Yx6Z3D8jSduqDlf
QJROBzBDMPb5TUeyj3Bt9is32Njtmja3f0ZePzqXTkibxYjaYrjdC0bj2qOaw3T7FWW0aPqF/I1S
Zm4tEDLt67fypkDeP9mmAnHtTEJx7UAJQAUCEoAKYHUsqtwyhvqM1SZ17lWfS7S4BDRBSe68U7gl
YqeXNpJGy4MsJ/5ZuOn0OaRROI441ztzErecI+wJHT6Z5oERrDNqfzS3BSL/AJ5oMfme9MllqHT7
aAYEYYju3NFw5UiwAF4UAD2FIoKACgAoAKACgAPIweRQBE9rA/WMKfVflP6U7kuKIZIprZdyXLMo
/hkG6p5IyE7x6kMd0lyxRoFDf3gf6VEqfLswUubdFW7hCNwalGclYqY96szEx70AJQAlAgpgFAH/
2Q==

------=_NextPart_000_002D_01C22F7E.50ED29E0--




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.

share/SpamAssassin/spam_2/00802.0812cab595172a326e8808357b98fcc5 view on Meta::CPAN

    webnote.net (8.9.3/8.9.3) with ESMTP id XAA25153 for <jm@jmason.org>;
    Sat, 20 Jul 2002 23:50:12 +0100
Received: from btclick.com (mta04.btfusion.com [62.172.195.246]) by
    mandark.labs.netnoteinc.com (8.11.6/8.11.6) with ESMTP id g6KMoBp03617;
    Sat, 20 Jul 2002 23:50:12 +0100
Date: Sat, 20 Jul 2002 23:50:12 +0100
Received: from lpsystems.com ([217.34.233.11]) by btclick.com (Netscape
    Messaging Server 4.15) with ESMTP id GZKKRE01.PLT; Sat, 20 Jul 2002
    23:50:02 +0100
From: "Alica" <kvlci@gomail.com.ua>
To: "snmygpg@cs.com" <snmygpg@cs.com>
Subject: A youthful and slim summer in 2002
Content-Type: text/plain; charset="us-ascii";format=flowed
Content-Transfer-Encoding: 7bit
Message-Id: <WMAAC069FF51D647ed871211F013AC8D44@gomail.com.ua>

As seen on NBC, CBS, CNN, and even Oprah! The health 
discovery that actually reverses aging while burning fat, 
without dieting or exercise! This proven discovery has even 
been reported on by the New England Journal of Medicine. 
Forget  aging and dieting forever! And it's Guaranteed!

share/SpamAssassin/spam_2/00975.5e2e7c9d8b2c04929ff41e010163e5e8 view on Meta::CPAN
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( run in 1.516 second using v1.01-cache-2.11-cpan-df04353d9ac )