checking multiple signatures of different types (or different digests)

[John Clizbe]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1,SHA256

Daniel Kahn Gillmor wrote:


Funny... as in odd. I do that very thing ALL the time. And it verifies just
fine. See
http://tech.groups.yahoo.com/group/PGP-Basics/message/34730 for an example.

> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1,SHA256

Verifies with:

gpg: Signature made 11/24/2012 19:08:39 using RSA key ID 435BD034
gpg: please do a --check-trustdb
gpg: Good signature from "John P. (FurrBear) Clizbe (FSFE Fellowship card)
<JPClizbe at GingerBear.net>"

<IDs snipped>

gpg: Signature made 11/24/2012 19:08:39 using DSA key ID D6569825
gpg: Good signature from "John P. Clizbe (replaces 0x608D2A10)
<John.Clizbe at Earthlink.net>"

<IDs snipped>


SHA1/RSA & SHA256/DSA -- both are 2048 bit keys, but that's it for similarity.

- -John

I can post the source of the PGP-Basics message on gingerbear.net if the
link doesn't work for you.

- -- 
John P. Clizbe                      Inet: John (a) Gingerbear DAWT net
SKS/Enigmail/PGP-EKP                  or: John ( @ ) Enigmail DAWT net
FSF Assoc #995 / FSFE Fellow #1797  hkp://keyserver.gingerbear.net  or
     mailto:pgp-public-keys at gingerbear.net?subject=HELP

Q:"Just how do the residents of Haiku, Hawai'i hold conversations?"
A:"An odd melody / island voices on the winds / surplus of vowels"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (MingW32)
Comment: When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl!
Comment: Be part of the ﾣ337 ECHELON -- Use Strong Encryption.
Comment: It's YOUR right - for the time being.
Comment: Using GnuPG with SeaMonkey - http://www.enigmail.net/
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=
=a6nj
-----END PGP SIGNATURE-----