3 ms·
> but you can plausibly claim And anyone else can plausibly claim that you carefully forged a file to get a victim to sign it -- the signature will be of the w
by mseebach 10y ago
> but you can plausibly claim
And anyone else can plausibly claim that you carefully forged a file to get a victim to sign it -- the signature will be of the whole file, not just a single view of it.
But that said, you shouldn't sign binary files unless you have a reasonable understanding of what is in it (or trust the party presenting it to you).
- lisper 10y ago> And anyone else can plausibly claim that you carefully forged a file to get a victim to sign it Yes, of course, but by the time someone realizes this the damage may already have been done. > you shouldn't sign binary files There are a lot of things that people shouldn't do that they do nonetheless.