Re: [LUG] Online verification of signed emails

[Robin Cornelius <robin.cornelius@xxxxxxxxxxxxxxxxxxx>]

Henry Bremridge wrote:
> Does anyone know of a website where you can paste a signed email and it
> will confirm if the PGP signature is valid?
>
>
> Henry
>   

Hi Henry,

The only problem with this is that you would have to trust the server as 
well as it could just lie and you would then be in a position of 
believing a sig is valid when in fact it is not. It would be fairly easy 
to implement just accept the email (with in line pgp only) as a http 
post, run it through gpg to find what key has been used, import that key 
and run it through gpg again and send results back to web page.


Regards

Robin

--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe. FAQ: www.dcglug.org.uk/linux_adm/list-faq.html