[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ntbugtraq
Subject:    PGP Signature Corruption by Outlook Express 5 Spellchecker
From:       Aaron Lafferty <lafferty () OAR ! NET>
Date:       1999-09-24 14:11:53
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In the same vein as the Qualcom Eudora 3.x problem (posted by Cancer
Omega from attrition) with pgp signatures from Sept 18th.

Outlook Express 5 from Microsoft, when the check spelling before
sending is applied, will try to
spell check an already digitally signed message, and also try to
spell check the signature.  Thus corrupting
the signature of the document.  This again, is not a fault with pgp.

This was observed on an intel box running NT 4 server with Outlook
Express 5, other platform's, os's, and versions
of this product have not been tested.


===========================================================
Aaron Lafferty   Systems Developer/Engineer
lafferty@oar.net  OARnet
614-728-8100 x 221

Opinions presented here are not necessarily those of the author.


-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.1 for non-commercial use <http://www.pgp.com>

iQA/AwUBN+uGmL9xJ0mAeQ1YEQLq/ACg5mi6OJ2k5jHLzok/kAH61WmBXvUAoLli
UbazTU40uB8BXCB+eFRmrBYD
=sOIl
-----END PGP SIGNATURE-----

[prev in list] [next in list] [prev in thread] [next in thread]