David Ritz 
news:alpine.OSX.2.20.1504051048480.53198@mako.ath.cx Sun, 05 Apr
2015 15:55:13 GMT in alt.comp.anti-virus, wrote: 

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On Sunday, 05 April 2015 14:30 -0000, 
>  in article
>  ,
>  Diesel  wrote:
> 
>> You have a problem now.  I've just signed posts and my key from
>> 2007 will verify them.
> 
> gpg: Signature made Sun Mar 29 01:20:57 2015 CDT using DSA key ID
> F83EB938 gpg: BAD signature from "Dustin Cook
> " [unknown] 
> 
> It also fails verification using PGP 10.2.0.
> 
> I believe the failure is due to line wrapping changes, after
> signing. 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

You'd be wrong, too.

Header from my signed post that does verify:

Injection-Info: mx02.eternal-september.org;
posting-host="a0a5bcdf3f10d483967e1f3f620319d9";

See the FQDN? :)

Now the header from the 'Diesel' that can't verify it's signature.
(nothing wrong with the line wrap, it's a forged post and so, cannot
verify with my key. it's a bad signature)


Injection-Info: deiselpower.eternal-september.org;
posting-host="ffad13fbf307ec41ac0168681bc0dfae";

Notice the typo and the host hash different? You'll find many of my
posts have the same host hash, but the 'fake' Diesel varies.


-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1 - not licensed for commercial use: www.pgp.com

iQA/AwUBVSRuZ4qaci/4Prk4EQIyDACeKmSNdL7/U7lKXseUQvhbwqqj1DkAn0+1
rfTihLny7XogE9zsNWQN3tN/
=+KoL
-----END PGP SIGNATURE-----



-- 
I used up all my sick days, so I'm calling in dead.


--- NewsGate v1.0 gamma 2