force-v3-sigs not necessary any longer?

Hasnain Mujtaba hmujtaba at forumsys.com
Fri Oct 22 19:59:49 CEST 2004


I did some testing and learned that PGP8.x generates v3 signatures, but it can verify v4 signatures. This is probably for interoperabilty with PGP6.5.8, which cannot verify v4 sigs. 

RFC 2440 describes the difference between v3 and v4 signatures as follows:

   Two versions of signature packets are defined.  Version 3 provides
   basic signature information, while version 4 provides an expandable
   format with subpackets that can specify more information about the
   signature. PGP 2.6.x only accepts version 3 signatures.

Hasnain.

-----Original Message-----
From: gnupg-users-bounces at gnupg.org [mailto:gnupg-users-bounces at gnupg.org] On Behalf Of Per Tunedal Casual
Sent: Thursday, October 21, 2004 4:15 PM
To: gnupg-users at gnupg.org
Subject: force-v3-sigs not necessary any longer?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,
I have used --force-v3-sigs in my preferences for a long time. Is this not
necessary any longer? What PGP versions can handle V4 signatures?

Besides what is the difference between V3 and V4 signatures? Are V4
signatures safer? How?

Vänligen
Per Tunedal
Civ. ing. Civ. ek.

S:t Mickelsgatan 148
129 44 Hägersten
Telefon: 08-646 34 83

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (MingW32) - GPGrelay v0.950
Comment: Vad är en PGP-signatur? www.clipanish.com/PGP/pgp.html

iD8DBQFBeBjnaDDfzFT+2PIRAhvkAJ9kicjC0XzlbHDZ4ZvrRht3r/sakACfbB1l
9bXp/6lPBoC0G6ef7sdalvw=
=TaVi
-----END PGP SIGNATURE-----


_______________________________________________
Gnupg-users mailing list
Gnupg-users at gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users



More information about the Gnupg-users mailing list