Simon Josefsson writes: > [[[[PPGGPP  SSiiggnneedd  PPaarrtt::OOKK]]]] > > So, is this message properly signed or not? As you can see by the strings you've putten above, you haven't even signed it. :-) This is nice to know that Gnus (gpg.el? mailcrypt?) actually puts your fingerprint for keys you haven't signed and/or puts the user name for signed keys. It is also nice to _always_ expand the "GPG Signed: OK" message to be sure. ;-) This shows that one cannot always trust in what he sees. :-) > (Some out-of-band mechanism to signal security status would be nice, > such as arrows in the fringe. O well.) ??? I didn't understand it. -- Godoy. Solutions Developer - Conectiva Inc. - http://en.conectiva.com Desenvolvedor de Soluções - Conectiva S.A. - http://www.conectiva.com.br