compression info & "--verbose"

Atom 'Smasher' atom at suspicious.org
Sun Jul 18 20:50:20 CEST 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Sun, 18 Jul 2004, David Shaw wrote:
> On Sun, Jul 18, 2004 at 05:23:02AM -0400, Atom 'Smasher' wrote:
>> when processing a message, why doesn't "--verbose" display information
>> about the compression algorithm and level?
>
> No major reason, except that the compression algorithm isn't that
> relevant to the security of the message.
=======================

but whether or not the message is compressed ~does~ impact the security of 
the message <http://nullify.org/docs/pgp-attack.pdf>, and in the same 
amount of space it takes to display if it's compressed, the compression 
type (or "0/uncompressed") can be displayed.

also, this can help determine that a senders implementation is working... 
if one receives a message that's bzip2 compressed, but that's not listed 
in their preferences, there's likely a problem on the sender's side. as a 
practical matter, if one receives a message that's not compressed then 
something weird is going on.


 	...atom

  _________________________________________
  PGP key - http://atom.smasher.org/pgp.txt
  762A 3B98 A3C3 96C9 C6B7 582A B88D 52E4 D9F5 7808
  -------------------------------------------------

 	"Politics is the art of preventing people from taking part
 	 in affairs which properly concern them."
 		-- Paul Valery
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.3.6 (FreeBSD)
Comment: What is this gibberish?
Comment: http://atom.smasher.org/links/#digital_signatures

iQEcBAEBCAAGBQJA+sZyAAoJEAx/d+cTpVcirXkH/A002bzPBRN2ZIxx6vKTBdnd
pdLGDJyEQQ+pTGeH5oPg6swqvdHWeBcVsoPWitqRelxIHVmd2mUodILhznLCuIM8
CEL4rWKYVkcvgHAtViK8B3L6yH3lkU5u3LHmx+POGCAP/9dRHANgHyURZvrnAs2z
A8ySjr6hXVHL6/Y+M0ygSMX5uglC04elmFpz46zV2BNgKcw8rV9d0fGylVCI7E33
99hkCVsSV5L9nJ2wZ9onNbbzc5NN71kmY78IQ/LT8y+ZxhMe8y2W4jbCUFHCXf1r
lthfIiPMEuw0Z1147EQi661bYX1Wh7bqBZ+c0rNIpEGSEgmpxYbjdHKLkGvwxrg=
=nuXA
-----END PGP SIGNATURE-----



More information about the Gnupg-devel mailing list