PGP messages getting flagged as spam

Snoken snoken at tunedal.nu
Wed Oct 17 09:00:33 CEST 2007


At 16:32 2007-10-15, Werner Koch wrote:
 >On Mon, 15 Oct 2007 13:26, malayter at gmail.com said:
 >
 >> The real solution would be for SpamAssasin to check that the PGP
 >> messages are well-formed, and verify signatures on any PGP message
 >> before altering its score. A tad CPU intensive, I think, and it poses
 >
 >FWIW, a few weeks ago I received the first PGP signed spam.  The
 >signature was good and I believe that it was sent using a trojan
 >utilizing the local MUA which was configured to sign all outgoing mail.
 >
 >
 >Shalom-Salam,
 >
 >   Werner

The good news is that this makes it fairly easy to locate the 
compromised computer and alert the user.
Snoken




More information about the Gnupg-users mailing list