note 103596 deleted from function.gnupg-sign by danbrown
| From: | danbrown@php.net | Date: | Thu, 21 Apr 2011 18:19:42 +0000 |
| Subject: | note 103596 deleted from function.gnupg-sign by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-179059@lists.php.net to get a copy of this message | ||
Note Submitter: friend_helps_u at yahoo dot de
----
You fool!
Signing always has to be performed with the private key!
How someone will check your signature, if you sign it with your public key and he has just the
public key too?
In an assymetric scenario this is impossible!
You _ALWAYS_ sign your text with prv-key and the receiver checks the signature with the pub-key!
Other way round he would have the need to keep your prv-key? Security?