@helene @ukko why couldn't they borrow from signed email? where a pgp message signature is an attachment. you can read the message without parsing the signature, but the sig is proof that the message is unaltered & from whoever claimed to send it
I guess it's like a lot of modern tech "we'll make it new & not look at what's already worked"