From: Jan Harkes Date: Mon, 25 Apr 2005 02:43:40 GMT Subject: Re: Git-commits mailing list feed. Message-ID: <20050425024340.GI29939@delft.aura.cs.cmu.edu> In-Reply-To: <20050425023420.GA14696@lists.us.dell.com> On Sun, Apr 24, 2005 at 09:34:20PM -0500, Matt Domsch wrote: > On Sun, Apr 24, 2005 at 09:01:28PM -0400, David A. Wheeler wrote: > > It may be better to have them as simple detached signatures, which are > > completely separate files (see gpg --detached). > > Yeah, gpg currently implements detached signatures > > by repeating what gets signed, which is unfortunate, > > but the _idea_ is the right one. > > I solve this with two simple scripts, "sign" calls "cutsig". ... > gpg --armor --clearsign --detach-sign --default-key "${DEFAULT_KEY} -v -v -o - ${1} | \ > ${CUTSIG} > ${1}.sign You could also just leave out the --clearsign option and it will DTRT. Jan