>From woes

[Greg Troxel]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

  >From Werner.

  Now, is that line a potential mbox delimiter that has been escaped, or is
  it a line written by you and cited by me?  More critically, is the '>'
  character included in the signature?

I think doing > escaping of From should be avoided - this is something
done by delivering MTAs that use broken mailbox formats.

However, having gpg escape From using a dash escape when creating a
clearsigned message, in much the same way as it would escape a line
beginning with dashes doesn't seem so problematic.  One doesn't expect
to be able to extract the clearsigned message body without undoing
dash-escaping, just that it is readable to humans without it.

- From

As others have noted, this probably requires other openpgp impls to
un-dash-escape such things.

The above is an example of what this would look like.  Note that the
signature probably won't check, because I put the '- ' in by hand
after signing...

Some real stuff to be escaped:

- -----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v0.4.5 (FreeBSD)
Comment: For info finger gcrypt at ftp.guug.de
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==
=e4PX
- -----END PGP PUBLIC KEY BLOCK-----

        Greg Troxel
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v0.4.5 (FreeBSD)
Comment: For info finger gcrypt at ftp.guug.de

iD8DBQE2eRIB+vesoDJhHiURAhQuAKCAHcsoxCnvFf5RCi/sHmTxOSoriQCZAWvl
NA8Mq2JtycKJEyIr1wDxj2U=
=uHYQ
-----END PGP SIGNATURE-----