🚀 go-pugleaf

billmcc@seanews.akita.com (Bill McCormick) writes:

> Here are the MD5 hash values for the PGP 2.0 distribution.

>     pgp20.zip:     BD 66 4E 83 A1 BC 56 AA 50 32 D6 21 6D 76 3A 01
>     pgp20src.zip:  0A 5D C0 E1 2C D4 3E 13 74 BB 70 A1 24 BA 98 02

Nah, no good. If somebody modifies the archive comments, this will
change the zip archive as a whole, and therefore its message digest.
What we need is a MD on each file in the archive, a list of the files,
and an MD of that list. And all this - issued by some of the
developpers of PGP.

The best solution would be, if Phil Zimmerman signs the above MDs with
his PGP 2.0 private key and re-publishes his PGP 2.0 public key,
signed with his PGP 1.0 private key.

Regards,
Vesselin
-- 
Vesselin Vladimirov Bontchev          Virus Test Center, University of Hamburg
Tel.:+49-40-54715-224, Fax: +49-40-54715-226      Fachbereich Informatik - AGN
< PGP 2.0 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C
e-mail: bontchev@fbihh.informatik.uni-hamburg.de    D-2000 Hamburg 54, Germany