Index: gnupg-1.4.14/doc/gpg.texi =================================================================== --- gnupg-1.4.14/doc/gpg.texi +++ gnupg-1.4.14/doc/gpg.texi @@ -252,6 +252,13 @@ security reasons a detached signature cannot read the signed material from STDIN without denoting it in the above way. +Warning: when using this on inline signed files, GnuPG will verify +the signature in the file regardless of whether the file contains +auxiliary content outside of the signed part. Do not use this option +to blindly process an inline signed file solely based on the output +of this option; rather, use detached signatures or use --status-fd +to only capture the data that was actually signed. + @item --multifile @opindex multifile This modifies certain other commands to accept multiple files for