Re: [ft-devel] Digital signatures

[David Somers]

On Tuesday 04 October 2005 08:40, Werner LEMBERG wrote:
> > It also means having a non-MS signing tool. Has anyone actually
> > managed to independently verify or sign a font. I've tried and
> > failed at the most fundamental level of trying to get my md5 hash of
> > a font agree with MSs.
>
> IIRC, there was something into this direction on the opentype mailing
> list.

Yes, there was a long discussion on the OpenType list about this (and it was 
more to do with whether signing fonts provided any benefit - apart from 
providing extra revenue to Verisign to get the necessary signing 
certifictes).

If I get some spare time, one of the things on my TODO list was to try to 
write a proglet to verify the signature in a OTF.

Greeings cold and overcast from Luxembourg,

-- 
David Somers
VoIP: FWD 622885
PGP Key = 7E613D4E
Fingerprint = 53A0 D84B 7F90 F227 2EAB  4FD7 6278 E2A8 7E61 3D4E